Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130362e302f32342d3234203d3e20313336373837.roa
File: 3137382e3133322e3130362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: bWmo/dc900ukrhBWk7fRUj3AA32PduGxOkd9lYs2fEs=
Subject key identifier: 06:D1:49:A6:6E:CF:9A:8A:C8:3A:9B:AA:EE:F5:55:9F:78:75:E4:71
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5778FE6A9FB038B41FA63006920D9782A161671D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130362e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 05 Mar 2025 19:45:50 +0000
ROA not before: Wed 05 Mar 2025 19:40:50 +0000
ROA not after: Wed 04 Mar 2026 19:45:50 +0000
asID: 136787
IP address blocks: 178.132.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:78:fe:6a:9f:b0:38:b4:1f:a6:30:06:92:0d:97:82:a1:61:67:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 5 19:40:50 2025 GMT
Not After : Mar 4 19:45:50 2026 GMT
Subject: CN=06D149A66ECF9A8AC83A9BAAEEF5559F7875E471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:a2:94:ad:5d:be:cb:75:a6:06:49:c9:10:
27:2f:4e:96:fe:54:9b:03:b7:32:1b:a1:59:ed:f3:
04:22:ea:f3:9b:f5:d2:4c:b8:ca:79:70:c2:cd:70:
2d:cf:f1:65:20:70:55:62:78:d8:55:1e:89:a3:97:
20:f5:55:99:4c:15:1c:ed:46:9b:e2:fd:a4:f0:fb:
8b:0d:21:26:5a:a4:ab:fe:4c:c5:39:eb:39:d3:c3:
a2:73:2b:8b:fd:66:5b:35:ef:ca:53:fa:79:5e:bf:
b1:f7:b3:b9:79:4d:f6:9a:a2:7b:2a:e7:9f:24:2d:
de:1d:b6:93:c2:12:11:f8:a0:9b:76:62:58:10:c3:
3d:59:e3:c3:79:67:5b:8f:82:ec:17:5a:2b:01:37:
e5:51:cf:cb:c0:1e:ec:c7:0d:53:26:79:c5:2e:7d:
7a:cc:2a:d8:ad:1d:15:e5:c3:51:52:fc:bb:32:07:
25:f3:ce:54:f4:94:9e:da:ca:a0:6c:d5:5d:d6:c8:
b3:d9:9a:44:32:fe:b4:5b:3f:e1:62:22:26:88:96:
d5:21:da:27:f7:81:da:62:c6:e7:2b:87:c6:90:6a:
90:2c:a8:50:58:c3:64:f2:f1:af:b3:36:88:62:5b:
7b:f6:fd:78:f7:6e:20:30:5d:c3:c1:09:ad:c2:00:
ae:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D1:49:A6:6E:CF:9A:8A:C8:3A:9B:AA:EE:F5:55:9F:78:75:E4:71
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.106.0/24
Signature Algorithm: sha256WithRSAEncryption
65:13:c5:bb:31:90:ac:5b:99:b7:a7:89:ea:be:9b:b7:b5:6a:
e0:25:9d:46:b7:0d:40:53:04:a8:b0:25:ab:87:8e:91:13:52:
93:75:31:c9:c5:a3:f1:2b:15:7b:88:60:9b:d2:d3:5c:62:6a:
52:48:bf:9f:0c:04:65:0c:c4:58:b5:0f:35:d6:fd:a7:39:c2:
88:ba:16:51:c0:04:62:af:8a:c2:a6:81:eb:65:d7:39:0b:15:
2d:ca:af:52:d4:59:43:1b:fd:1d:7a:b8:b2:0f:5f:89:33:f9:
b7:77:7a:6a:b7:6a:64:f8:9c:cb:e8:c6:e4:89:4d:e9:6e:69:
9e:84:23:d2:22:9e:b9:e1:de:ab:fd:67:91:03:01:89:c2:71:
3c:46:10:2e:30:a4:2e:33:ad:5c:32:2e:34:d7:fa:2e:90:72:
b8:bc:9b:eb:f8:35:e8:b6:c8:48:68:86:fb:88:17:40:16:ea:
1b:21:11:c8:5e:8c:9b:e9:7f:a2:d1:0a:c1:b3:42:26:18:d2:
4d:be:04:7f:b5:5b:31:8c:c4:73:8a:56:3e:7f:c4:b6:f4:01:
8a:d2:8f:82:ec:53:bd:a7:92:c7:c5:d5:90:2b:d7:4d:c2:e0:
63:3f:78:79:78:2d:f0:4d:ed:82:72:17:e6:f2:38:9b:16:e5:
bb:24:23:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:07 2025 by rpki-client