Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130342e302f32342d3234203d3e20313336373837.roa
File: 3137382e3133322e3130342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: fIOwwq9bmf7DaNUf7ixBE2OoLS+mT8LThVzO+f9KqiI=
Subject key identifier: 22:98:12:30:DA:9C:BA:5C:C1:89:EF:8F:18:D0:22:BD:F3:75:27:4A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 67E17A20781694BF85433DDDC6972F99C10C9B08
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130342e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:45:07 +0000
ROA not before: Mon 27 Jan 2025 09:40:07 +0000
ROA not after: Mon 26 Jan 2026 09:45:07 +0000
asID: 136787
IP address blocks: 178.132.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:e1:7a:20:78:16:94:bf:85:43:3d:dd:c6:97:2f:99:c1:0c:9b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:07 2025 GMT
Not After : Jan 26 09:45:07 2026 GMT
Subject: CN=22981230DA9CBA5CC189EF8F18D022BDF375274A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:b5:4a:fe:af:85:4d:5f:f9:d4:f1:87:80:
8e:25:1f:32:15:eb:bc:09:5a:ee:b3:1a:4c:7b:ec:
2e:8e:80:d7:88:5f:d5:4b:c1:18:0c:e5:c0:97:96:
14:6f:fa:f3:3d:c8:1c:00:fb:30:9b:94:03:53:4c:
1e:fd:4a:ab:99:8e:38:59:2c:91:e9:6a:bc:31:16:
4f:18:9a:b0:75:65:ab:eb:5d:59:ae:87:bf:a4:c4:
21:a5:c2:b8:70:06:7a:e6:f4:f1:cc:a4:c5:9b:59:
cd:fc:46:52:3f:5f:d5:07:9e:99:5b:19:1c:fc:13:
0f:06:56:1c:ea:38:8c:64:7e:6a:ee:1a:10:c1:cb:
b5:35:59:d0:c9:36:29:0c:0d:05:27:36:b0:81:ce:
bb:51:cf:23:0d:35:81:42:d9:96:39:56:e9:08:a4:
62:0e:02:a9:0d:1a:cf:16:3a:92:04:98:e4:1d:c8:
b5:11:57:ab:19:d0:40:12:2b:ab:0e:0a:cc:92:ab:
dc:1a:f8:0e:74:5b:59:c5:9d:d5:43:c4:83:86:db:
ee:cf:c0:c4:eb:e1:b8:64:79:c8:43:0d:8e:32:92:
83:c6:21:66:6c:16:23:1f:a1:ab:47:37:d2:08:14:
48:1e:a3:54:4d:9d:c1:04:78:6c:9c:a6:48:03:2c:
32:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:98:12:30:DA:9C:BA:5C:C1:89:EF:8F:18:D0:22:BD:F3:75:27:4A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.104.0/24
Signature Algorithm: sha256WithRSAEncryption
43:fa:a7:40:fb:d2:1d:d7:a7:6a:ea:91:e9:dd:bd:36:1a:5b:
06:c0:74:6d:5a:65:59:ca:9c:5c:82:85:6d:fa:c4:1d:12:da:
32:e2:65:e9:e1:c9:22:7b:55:b1:85:a0:4c:6d:9e:24:fa:58:
bf:59:86:87:55:7d:ce:1c:d8:e2:2b:8b:26:6e:36:63:c8:dd:
4a:73:12:02:13:9a:d3:ff:ba:7b:13:b9:58:f2:d3:8c:05:0b:
93:06:0a:8b:24:18:b7:49:92:66:f5:1f:a9:ba:2c:8e:5d:9e:
af:25:b6:95:f0:b5:a9:f5:ea:21:2f:01:b3:92:10:df:e2:ff:
34:7d:38:93:cb:91:94:f6:b1:92:f8:a1:65:1e:e3:05:40:45:
82:df:f8:26:98:43:82:7c:ea:ae:08:b8:e0:11:be:37:bd:b5:
b8:65:b7:9c:b7:20:89:1b:02:d8:b4:f6:64:3b:b3:58:3d:91:
75:78:e6:ba:73:3e:ee:2e:e7:74:3d:e3:3e:c2:d7:0d:bc:a6:
e7:90:79:76:ee:1a:3e:4b:3d:bd:b3:b8:25:63:26:d6:99:c2:
87:c7:de:41:a3:02:e1:3a:1a:74:2a:c0:c7:f4:23:a8:4a:bf:
ed:d1:d6:a2:e3:6f:4f:0f:63:7d:6c:ba:80:e8:e9:4a:3a:13:
21:a2:52:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:21:01 2025 by rpki-client