Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31392e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e31392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: oxMAe5HGEirjsehtFNOuRjTqEjuAfBRl8vas5ZrNzYc=
Subject key identifier: 95:31:A4:35:28:F4:88:98:01:64:38:F9:F8:61:50:A3:52:1F:BE:AF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 37925577BD55CEC9615E9FE847CECAD8BBD1FFB8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31392e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 01 Feb 2025 22:45:36 +0000
ROA not before: Sat 01 Feb 2025 22:40:36 +0000
ROA not after: Sat 31 Jan 2026 22:45:36 +0000
asID: 136787
IP address blocks: 155.133.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:92:55:77:bd:55:ce:c9:61:5e:9f:e8:47:ce:ca:d8:bb:d1:ff:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 1 22:40:36 2025 GMT
Not After : Jan 31 22:45:36 2026 GMT
Subject: CN=9531A43528F48898016438F9F86150A3521FBEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:82:e9:d6:be:21:ff:5f:ea:7a:46:e3:9f:d2:
00:b1:32:1a:85:95:9b:8f:1e:43:b1:a1:c9:d3:86:
c5:f8:67:96:c4:a5:27:7b:29:93:b8:03:0f:c3:40:
7b:36:48:8c:4d:ab:af:35:2d:21:be:89:58:bb:ca:
f2:41:a7:23:41:a6:1b:b2:a9:31:8d:c9:0a:1d:9e:
dc:0f:59:6a:27:9e:60:c3:b2:3f:ae:e7:2b:62:8a:
fa:84:2d:15:da:e3:b5:10:b7:78:8c:4e:0c:93:49:
15:18:93:41:2e:57:6c:bc:db:94:a3:aa:89:10:c0:
79:a6:bb:a8:38:b8:ca:28:8c:13:ba:fa:67:59:e0:
0e:76:7d:f8:3e:13:28:d7:0d:9a:43:51:65:dc:f9:
30:99:96:a4:f9:cf:cc:7e:e1:85:a2:b9:99:5a:9e:
f5:0b:08:56:37:e8:d1:20:19:43:19:26:52:ec:9f:
8d:8d:36:c6:a8:a0:7c:cc:a4:89:34:a3:c7:4f:43:
18:9e:e7:89:74:ce:3a:65:49:52:16:62:c8:0f:eb:
7d:51:37:ed:c1:3d:72:49:09:75:f9:17:bf:f8:51:
a7:26:fa:d6:fc:fc:e2:79:15:f2:2d:92:2c:c1:f7:
ec:bd:24:c3:8e:ca:53:b1:80:09:47:f1:9c:c5:9c:
ac:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:31:A4:35:28:F4:88:98:01:64:38:F9:F8:61:50:A3:52:1F:BE:AF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.19.0/24
Signature Algorithm: sha256WithRSAEncryption
91:9c:5a:68:a5:78:0f:f4:22:95:94:a6:e3:3c:6c:14:cf:2b:
45:92:33:02:ee:44:4d:70:0c:f1:b6:a0:b6:60:9b:1f:55:8c:
5e:ca:9e:02:4d:c7:8f:f1:9b:b9:d4:a0:59:41:4f:5e:3e:c7:
26:3e:12:66:a7:3b:b4:77:c2:8b:6c:fa:82:cb:ef:80:ba:c5:
1b:7a:64:16:ca:27:45:c1:3a:6e:5b:9c:d5:b9:75:89:85:13:
f9:c9:d8:6d:b6:b1:b5:c3:d2:8c:5c:49:7b:84:16:ea:ce:34:
b0:8c:d5:b2:56:43:2f:1c:0a:56:ce:f1:5c:04:40:c1:58:86:
61:46:85:e1:f8:a2:5b:30:d5:ba:18:94:7e:1a:e0:3c:db:d3:
35:b1:82:62:ba:4b:9b:62:64:44:7d:43:c3:8e:2e:4a:dd:06:
9c:3c:e0:7a:56:1e:e3:4b:14:ec:58:38:fb:d5:82:bc:01:8c:
af:8f:51:cc:0d:cc:c8:85:89:95:77:c0:b8:e7:36:e6:16:68:
0b:46:c0:8f:23:c1:61:c4:1f:e1:bb:dd:4e:b6:33:92:f1:29:
e6:bd:90:99:92:7f:75:01:bd:f9:0b:52:1a:97:cc:42:2d:9b:
97:0e:3f:2a:f9:ea:9d:a4:24:e6:13:f4:10:5c:33:1d:6a:2b:
1a:50:fd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:38 2025 by rpki-client