Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35342e302f32342d3234203d3e203439343533.roa
File: 3135392e34382e35342e302f32342d3234203d3e203439343533.roa (raw, json)
Hash identifier: GXmI8WJzgSVYyfTdsnekwwnBmKzbpAB1qDZ2XwRe72E=
Subject key identifier: 12:DE:49:4A:7A:76:CA:B9:5B:4A:2A:2E:81:15:32:4A:E6:41:7F:64
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 28BCFDB6D47FB12CB2A77A8A9FBD8658A40EF972
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35342e302f32342d3234203d3e203439343533.roa
Signing time: Mon 27 Jan 2025 09:45:29 +0000
ROA not before: Mon 27 Jan 2025 09:40:29 +0000
ROA not after: Mon 26 Jan 2026 09:45:29 +0000
asID: 49453
IP address blocks: 159.48.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:bc:fd:b6:d4:7f:b1:2c:b2:a7:7a:8a:9f:bd:86:58:a4:0e:f9:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:29 2025 GMT
Not After : Jan 26 09:45:29 2026 GMT
Subject: CN=12DE494A7A76CAB95B4A2A2E8115324AE6417F64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:fd:84:f5:b9:1c:a8:3b:01:bb:92:81:8b:
c2:5c:96:4f:fc:62:89:5c:9f:e0:25:a4:c8:ba:2b:
f1:84:0c:50:ca:86:df:4c:a7:50:ac:f1:14:ad:46:
99:75:ae:87:6f:4c:71:bc:85:13:0b:b4:0f:d8:1d:
ea:ef:5a:ad:2c:cb:8a:af:ea:b0:68:20:95:3c:17:
9a:c1:36:e0:bf:94:63:b7:9f:ee:ba:44:85:0d:b4:
11:ee:50:e2:cc:90:bf:2e:89:43:70:4f:78:11:d7:
85:38:56:fc:52:81:31:c7:bb:6b:f5:e9:09:d1:80:
f3:a4:72:02:4f:0a:6f:c0:25:d1:d7:d6:f0:fa:83:
f2:23:7f:0c:6c:c9:2d:01:44:a7:65:7d:57:1a:f3:
ca:9f:3b:13:b6:bd:d8:8e:6f:0e:09:77:1b:ad:a9:
c0:1b:df:0f:67:35:eb:19:b9:5c:d0:9e:ff:c1:6f:
5d:25:da:f3:26:d8:99:c5:59:af:5d:f4:f1:c2:96:
98:e2:08:64:1d:50:f9:cc:90:15:c9:d3:0e:97:20:
9e:b0:46:cd:2e:a0:77:77:79:9e:71:4f:00:df:37:
75:17:3c:cf:24:ae:00:3f:23:ea:e0:2c:9a:5d:40:
d4:79:61:b0:cb:f2:06:d9:b0:7a:9a:3d:91:db:6e:
9a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DE:49:4A:7A:76:CA:B9:5B:4A:2A:2E:81:15:32:4A:E6:41:7F:64
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35342e302f32342d3234203d3e203439343533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.48.54.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:5f:55:7f:c0:19:c1:01:d1:f2:89:b7:97:e4:c2:85:8c:d3:
c5:54:56:78:2a:f1:7d:dd:6e:5b:01:f3:52:0d:a9:4e:b3:63:
4c:d1:0e:6f:b5:b6:bd:2e:b1:8d:88:3a:2f:72:c6:2f:38:46:
c2:45:98:24:f5:8e:2a:54:0e:4c:55:e5:80:6c:83:5d:c5:ca:
29:37:06:c8:c9:c8:13:fe:d7:db:0b:74:a0:6d:4c:59:58:0a:
d2:c0:4d:0c:53:a0:8a:52:03:38:b0:1d:2c:e8:3d:a4:5b:8f:
15:7c:49:3d:10:aa:43:8d:dc:87:e2:97:96:b8:d2:9f:72:f5:
0f:06:d2:09:05:29:15:f2:7d:5d:0b:d1:10:4f:6b:fc:64:02:
c0:64:ac:a2:ec:c0:2e:f5:b6:83:5d:bb:a2:59:89:36:78:54:
aa:38:03:ed:32:25:fd:59:ee:8c:c2:ea:a0:cb:00:c2:fb:d3:
c1:1b:c0:14:b0:ee:47:1c:79:df:16:41:ce:55:10:08:12:cd:
e4:4a:a2:02:90:16:d0:f1:c2:99:f9:3d:09:de:d3:c3:b5:ca:
0e:06:62:9e:b1:fe:ef:39:c8:36:9b:55:e6:22:80:f8:a2:b3:
f8:a5:41:9e:26:db:fd:fe:68:5c:33:53:b0:f8:aa:93:f0:8e:
bb:10:db:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:39 2025 by rpki-client