Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3130382e3135362e302f32322d3234203d3e20323034313730.roa
File: 3138352e3130382e3135362e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier: xb3q4lfFtmg6bsGDmA1o3NXT0Ez2VoNfMiHxMsZqRhM=
Subject key identifier: 4C:84:0F:7C:07:B9:A9:F5:7F:67:4B:65:11:CA:AA:B1:56:2F:00:A7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2FAEDC39B4BA3F88BE7CBBCC979D541EA8E6058B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3130382e3135362e302f32322d3234203d3e20323034313730.roa
Signing time: Mon 27 Jan 2025 09:45:09 +0000
ROA not before: Mon 27 Jan 2025 09:40:09 +0000
ROA not after: Mon 26 Jan 2026 09:45:09 +0000
asID: 204170
IP address blocks: 185.108.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ae:dc:39:b4:ba:3f:88:be:7c:bb:cc:97:9d:54:1e:a8:e6:05:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:09 2025 GMT
Not After : Jan 26 09:45:09 2026 GMT
Subject: CN=4C840F7C07B9A9F57F674B6511CAAAB1562F00A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:5e:4d:d2:33:e8:4a:61:f1:3c:8d:95:b3:
49:2b:22:0e:fd:12:86:93:a0:77:1f:47:e6:a5:a4:
61:e0:8b:97:95:6e:79:30:71:c0:52:38:13:73:40:
c3:8a:85:b2:2a:e0:1e:41:75:e5:09:d8:30:b0:a5:
2e:ec:4d:a1:9f:72:7f:ec:92:d2:00:1a:52:03:16:
15:a6:19:5b:b7:1a:06:61:f4:94:24:9c:3a:4f:f8:
09:1f:93:04:bf:e6:d5:0f:9d:77:f2:50:c7:cf:c6:
92:ad:2e:29:3f:c4:8d:27:c1:b1:ed:ef:b9:87:17:
09:e3:43:ce:0c:36:89:0b:8e:15:e9:55:5c:ce:7d:
9d:fe:07:0d:59:85:2f:e8:15:03:6b:de:91:05:83:
d2:29:60:56:bb:48:f5:6e:7b:84:fd:3e:22:78:20:
02:f1:4c:29:27:38:ee:44:f4:fd:c7:cc:d8:7e:a2:
ab:43:d6:c9:a6:13:49:9e:00:46:ad:8e:a1:33:7d:
f4:d8:84:bc:d5:cd:6e:b3:72:dd:5a:c6:ae:e3:ac:
1c:67:71:c1:07:41:85:46:06:b1:24:6a:84:7f:ef:
28:68:de:f8:f3:25:b9:83:ee:ae:6f:cf:d0:b8:ae:
93:15:69:a1:6d:df:17:55:0c:ed:c8:45:2e:ad:98:
58:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:84:0F:7C:07:B9:A9:F5:7F:67:4B:65:11:CA:AA:B1:56:2F:00:A7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3130382e3135362e302f32322d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.156.0/22
Signature Algorithm: sha256WithRSAEncryption
45:cc:b7:e8:16:0e:66:ab:34:18:86:88:e5:97:e6:87:e3:3c:
93:cc:42:4d:d3:a6:43:37:c3:e3:18:d2:1b:70:36:98:ce:9d:
67:1a:be:31:30:ea:7f:61:2f:ee:4d:71:78:03:02:18:ba:0b:
cf:a4:49:81:99:8d:6e:7c:df:6b:99:f1:20:b7:d0:32:59:bc:
4b:18:b6:67:7a:88:3c:96:1a:8f:c8:ab:cc:3f:b5:f7:fd:03:
4f:f6:37:27:36:2f:f3:d3:d8:f4:e4:da:49:96:11:4b:15:51:
19:a2:ce:b3:a9:cf:dd:2e:f0:e1:5b:64:48:3d:e1:a7:29:51:
3e:b9:3c:8a:72:3a:80:2c:7b:49:ed:aa:bd:c8:0c:bc:e2:da:
63:ee:1a:96:5b:d0:00:44:5f:6b:52:85:43:12:2e:ec:89:78:
58:07:ca:89:c2:20:55:17:e6:5b:90:4c:16:c4:fe:c8:d4:72:
12:e1:10:c4:ef:3f:78:ee:27:ae:9d:90:22:0f:e3:3a:0f:69:
97:f2:94:27:e4:91:e5:65:5c:e0:c2:bf:92:40:84:b0:14:30:
52:06:49:90:e4:c0:95:fc:d5:ff:0e:79:57:c5:d7:67:da:1c:
8e:a9:a9:4b:e4:51:e4:30:b3:0e:da:c9:44:c1:3e:28:ae:b7:
e2:07:56:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:19 2025 by rpki-client