Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38322e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e38322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: o0ZAz120Pxp+xsHX74NSnOo5qUvQzdQy9/rkon20uAs=
Subject key identifier: 04:08:44:41:CF:F5:F6:59:71:55:27:CD:38:51:C9:4F:ED:FE:4C:1D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 63B07D0520E5DC4F4A151C41190A0C7B113CF263
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38322e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:45:19 +0000
ROA not before: Mon 27 Jan 2025 09:40:19 +0000
ROA not after: Mon 26 Jan 2026 09:45:19 +0000
asID: 136787
IP address blocks: 155.133.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b0:7d:05:20:e5:dc:4f:4a:15:1c:41:19:0a:0c:7b:11:3c:f2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:19 2025 GMT
Not After : Jan 26 09:45:19 2026 GMT
Subject: CN=04084441CFF5F659715527CD3851C94FEDFE4C1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a3:7c:41:ba:13:fd:80:21:11:eb:65:f2:51:
44:49:7f:82:3d:54:74:e8:4f:96:0e:ba:62:be:0f:
b6:6a:54:f7:ad:70:6a:02:16:8b:12:f3:d7:00:f3:
0f:8b:28:38:a3:0c:bb:d7:b4:45:b8:c4:3d:83:7f:
ff:7f:fc:24:1e:8e:df:29:9d:31:a4:f9:18:18:78:
b0:a7:69:e1:68:db:7e:60:1a:f3:ef:54:f2:40:94:
3d:f1:86:bf:f5:4f:79:63:a4:6d:00:05:4d:b9:24:
83:31:3f:f7:e3:3b:f9:b3:40:ec:d1:99:c1:ff:a3:
7d:ec:77:f6:2c:8c:c8:38:b5:81:6a:75:3b:ca:c7:
5f:6b:8f:85:bb:1b:27:69:29:00:2e:83:5f:87:6e:
46:60:89:a4:c0:39:f7:d7:98:f1:69:39:fe:c7:46:
6f:d5:06:8c:ef:3a:fc:26:1a:f4:b8:38:ba:b0:82:
f3:d3:b7:fb:6c:86:ef:64:31:11:92:87:e0:87:26:
14:6b:18:d3:fb:05:24:d1:19:4f:84:66:a4:4d:39:
09:b0:5f:1d:88:49:a4:e5:29:55:c9:ca:09:17:ba:
c5:67:cd:07:c7:74:e2:6a:a4:53:5b:02:66:87:7f:
87:18:51:c5:d9:30:80:73:01:93:eb:65:a7:eb:3f:
01:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:08:44:41:CF:F5:F6:59:71:55:27:CD:38:51:C9:4F:ED:FE:4C:1D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e38322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.82.0/24
Signature Algorithm: sha256WithRSAEncryption
80:9e:40:76:ae:58:e4:3f:16:c1:3e:bd:0e:75:0f:c4:fa:a0:
9e:ae:64:97:1e:3e:ea:0b:0b:1b:7e:6e:a7:44:cd:b4:67:1b:
73:86:59:c2:3d:a4:04:9f:f7:f0:0d:b6:40:b1:82:b5:e4:ce:
58:b9:fd:f5:29:97:cb:5f:3c:fa:9f:5c:80:2c:4d:2d:6f:cc:
47:d1:18:90:39:9a:5a:a2:67:72:a0:21:10:fe:d7:9f:b0:88:
1e:41:bf:03:1c:f7:09:01:3a:36:21:f8:a9:1a:73:a5:2b:6e:
0f:4b:d5:93:fa:48:5e:d0:21:6f:dc:c1:b7:3d:86:7e:ca:63:
32:b2:9f:cc:bf:39:b3:84:c3:19:03:2e:7d:6d:75:ea:e4:64:
2c:ca:70:e7:e3:d7:96:02:e5:64:2a:93:31:ff:17:eb:e7:6d:
c4:e8:fc:94:07:55:37:6a:91:c4:6f:ea:d2:89:61:e8:c6:e3:
25:5d:8b:a2:61:4f:b9:cf:46:b0:b5:8d:5b:74:f1:a7:e3:cf:
86:ac:2a:98:74:bb:ca:fc:f7:bb:21:9d:0d:2c:dc:8a:3d:b1:
54:5a:d9:7d:3a:4c:5d:dd:23:f4:b0:86:91:dc:cd:e0:92:9c:
f4:4e:fa:d4:92:5a:95:16:f4:6a:fe:36:0d:44:cd:cb:03:8a:
3b:b9:5a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:23 2025 by rpki-client