Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38302e302f32322d3332203d3e203531313637.roa
File: 3135362e36372e38302e302f32322d3332203d3e203531313637.roa (raw, json)
Hash identifier: SORMzevde3Ezg9ik+XzcnhqIZzX0ZSoziMBgLeqfQqU=
Subject key identifier: CE:6F:AB:A4:78:95:B4:83:61:98:F8:B6:84:8D:9E:3C:86:05:C6:7D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3A83BC7249EED13C5629D5F774D776F13B4D3D74
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38302e302f32322d3332203d3e203531313637.roa
Signing time: Tue 11 Mar 2025 07:45:52 +0000
ROA not before: Tue 11 Mar 2025 07:40:52 +0000
ROA not after: Tue 10 Mar 2026 07:45:52 +0000
asID: 51167
IP address blocks: 156.67.80.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:83:bc:72:49:ee:d1:3c:56:29:d5:f7:74:d7:76:f1:3b:4d:3d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 11 07:40:52 2025 GMT
Not After : Mar 10 07:45:52 2026 GMT
Subject: CN=CE6FABA47895B4836198F8B6848D9E3C8605C67D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:e6:a9:29:21:ca:68:50:78:a2:8a:ec:3e:
ff:18:d8:3b:29:ba:20:cd:a9:5e:b6:7e:bd:6d:ff:
0c:8d:e4:5b:f4:83:2d:d9:a1:d6:a0:f0:c2:f0:ef:
74:38:54:2d:de:dc:8a:92:bf:dc:78:9f:c4:0b:2c:
29:65:6f:99:36:77:e9:bd:3d:cc:97:9b:3e:ed:c0:
55:a5:5c:f7:7d:e1:e7:37:a0:8e:66:7c:02:7b:f0:
df:96:f7:7a:6d:a2:be:27:f6:7a:0c:dd:2a:b5:51:
58:f5:52:f4:15:de:1a:65:b1:4f:d9:d8:71:3b:07:
c7:7b:08:49:aa:9f:53:48:3f:ea:29:b3:cb:30:4a:
b1:71:cd:48:76:f8:b2:fc:41:3a:33:97:ba:5c:0c:
47:84:ba:65:e4:60:22:b6:11:89:16:f2:cc:c8:72:
08:e4:de:c5:99:ac:37:3d:d9:a6:b2:79:6c:69:56:
7f:69:8b:b7:4b:83:d1:be:79:30:67:2f:e5:30:46:
64:b7:7e:77:5c:32:f2:8f:34:fa:d1:9a:70:db:25:
2c:53:9c:39:47:41:07:fe:2c:4a:c4:00:77:5d:c5:
37:5f:63:c5:b6:9a:f9:6b:ed:ae:04:20:c0:07:96:
0c:29:8a:d6:af:f2:6e:e7:2d:c4:c7:c3:35:8d:e9:
7b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6F:AB:A4:78:95:B4:83:61:98:F8:B6:84:8D:9E:3C:86:05:C6:7D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38302e302f32322d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.80.0/22
Signature Algorithm: sha256WithRSAEncryption
52:7e:6a:96:14:d9:11:42:e8:72:17:db:1b:24:8b:9e:22:0e:
63:e2:5e:ad:b9:28:cb:35:51:24:28:c2:62:b0:47:c9:07:3e:
37:9a:8c:18:53:03:ff:ac:2f:54:a6:e1:3b:a0:8b:94:c6:50:
17:a7:f8:6b:81:da:d8:38:3c:08:0d:b9:7a:d8:df:c4:a1:8e:
1b:db:49:46:c5:09:bb:94:db:7c:57:be:ea:a4:be:41:03:03:
5e:19:73:7a:20:d3:76:d4:84:ac:68:8d:63:51:52:47:38:57:
6a:1e:03:eb:67:19:fd:67:28:99:a9:08:7c:10:0f:c7:f6:0d:
d5:e9:ca:09:23:d1:dd:21:65:f8:2d:a5:f8:fc:25:d4:f1:60:
d0:34:54:d6:50:bf:b8:c3:64:c2:1e:04:0a:bf:21:c1:9f:12:
43:c2:fa:0a:e5:35:1c:fc:51:d8:65:bd:43:bc:fc:f9:28:7b:
82:b6:43:42:8a:33:60:f7:3f:27:6c:e6:0f:27:83:b1:38:06:
b0:79:dc:03:f8:64:9a:ef:64:4f:90:87:96:dd:77:2d:03:be:
8a:08:0b:29:d2:ce:ff:bb:cf:cf:a9:c0:f1:1f:ca:83:70:06:
08:d3:ba:b9:5d:ae:cb:ee:2d:58:a6:e4:67:21:2a:ed:ae:4e:
bf:58:79:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:02:36 2025 by rpki-client