Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36342e302f32342d3234203d3e20323039383534.roa
File: 3135352e3133332e36342e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: t+7uiAPXvhn89aIBjCf8ZdeIeDrRd1emIGeBWbvxgCA=
Subject key identifier: D5:71:5E:85:BB:17:52:D0:2C:CA:78:20:C2:BF:A4:9E:1A:71:6E:0F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3BFD7C00781D575D43FC52DD9F2B6476C7568837
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36342e302f32342d3234203d3e20323039383534.roa
Signing time: Mon 03 Feb 2025 09:45:38 +0000
ROA not before: Mon 03 Feb 2025 09:40:38 +0000
ROA not after: Mon 02 Feb 2026 09:45:38 +0000
asID: 209854
IP address blocks: 155.133.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:fd:7c:00:78:1d:57:5d:43:fc:52:dd:9f:2b:64:76:c7:56:88:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 3 09:40:38 2025 GMT
Not After : Feb 2 09:45:38 2026 GMT
Subject: CN=D5715E85BB1752D02CCA7820C2BFA49E1A716E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:e5:6a:e6:98:03:81:c9:e2:60:77:08:89:
01:17:ce:85:a2:53:f1:f9:31:ef:7a:60:67:88:ee:
bf:14:af:61:39:ef:04:a3:f1:44:93:12:fa:95:6c:
18:08:44:a7:c5:cd:46:60:82:59:fb:2e:25:83:98:
7a:77:c5:89:d4:05:a2:fb:7c:fc:d9:6f:5f:9c:f7:
48:a9:03:69:5f:cd:be:1a:f0:4f:76:d4:59:c7:15:
23:82:00:39:58:fd:a2:f3:aa:b5:88:8f:b5:76:7a:
54:04:6c:30:1d:19:c3:a2:72:60:a1:0a:ea:f7:e8:
66:07:7c:78:56:1f:2a:8c:21:21:91:00:16:ee:85:
78:e3:6c:9d:66:c6:c8:ad:f4:8f:97:6f:ba:e4:18:
97:26:75:82:3b:2b:a3:56:4b:e3:7a:a6:c1:0b:c9:
2a:02:c1:ca:72:84:02:4e:ea:d3:07:35:4e:31:dd:
5c:5e:8f:c4:01:56:dc:9a:b9:25:1f:5b:35:7e:85:
2f:5c:43:f7:f6:f8:d4:17:e7:2c:4e:fc:04:23:18:
b9:7b:52:19:d7:86:f8:0d:48:a1:30:de:f7:b9:5e:
07:39:b2:15:3c:44:be:fd:8a:17:5b:13:f9:91:86:
60:71:35:3b:5c:e0:24:49:8e:36:12:97:45:50:c1:
2d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:71:5E:85:BB:17:52:D0:2C:CA:78:20:C2:BF:A4:9E:1A:71:6E:0F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e36342e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.64.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d0:b8:ef:f8:69:b8:57:57:9d:fe:94:52:60:00:6b:56:31:
64:b9:a6:6a:11:85:01:6d:ca:0c:80:c0:0a:e9:9c:20:2f:e3:
6c:62:1e:70:23:17:80:dd:6d:8b:23:23:b4:34:7d:1e:36:f4:
51:c8:e3:66:61:93:c5:4c:3b:7b:15:e0:d0:3e:92:c0:7b:99:
83:61:78:e6:4d:33:f8:6e:4d:f2:5b:8f:61:12:37:b1:ea:7f:
d5:cf:12:b1:13:e5:11:1e:97:15:31:2a:73:1a:98:5b:83:5d:
c9:f3:ce:5b:d4:c7:80:17:ff:d3:ae:42:84:69:34:72:42:ef:
87:4f:df:e6:bd:c3:e0:da:7c:18:72:b1:2f:ca:91:ce:77:70:
11:56:1d:08:31:0d:b7:f1:b1:64:fc:41:05:e7:60:c4:0b:21:
8b:1f:08:ba:99:07:35:e0:06:82:a7:a7:b6:6a:5e:41:97:25:
06:c0:45:a2:be:18:a9:82:a5:47:d7:d5:21:2b:04:ac:8e:7d:
9b:3e:8e:f4:28:31:ef:01:a3:c9:c9:48:b3:a8:ff:d3:78:42:
2e:56:6b:a1:d8:3e:f8:6c:60:27:86:85:87:87:af:ff:df:ee:
19:10:6b:3d:70:01:27:c3:23:18:1c:bb:9e:5c:94:b8:3a:7c:
ec:48:8f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:20 2025 by rpki-client