Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138352e38332e302f32342d3332203d3e203531313637.roa
File: 3138352e3138352e38332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: Za42cA8TUtNQl7iBENMlujauWn59Vf7ZuDjjizwYtOQ=
Subject key identifier: 03:C8:9F:33:49:F4:21:65:9D:0E:44:9D:0C:71:AC:92:C3:6B:EC:CF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7060CB927A1B8DF8271B3932EFB84D50C691E24E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138352e38332e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Jan 2025 09:45:29 +0000
ROA not before: Mon 27 Jan 2025 09:40:29 +0000
ROA not after: Mon 26 Jan 2026 09:45:29 +0000
asID: 51167
IP address blocks: 185.185.83.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:60:cb:92:7a:1b:8d:f8:27:1b:39:32:ef:b8:4d:50:c6:91:e2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:29 2025 GMT
Not After : Jan 26 09:45:29 2026 GMT
Subject: CN=03C89F3349F421659D0E449D0C71AC92C36BECCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:49:56:b9:d2:7d:25:02:b1:17:ec:af:af:a2:
17:94:7d:d1:02:f5:93:83:f1:8b:e2:77:7c:16:16:
ec:5d:c6:96:95:78:9e:ee:78:e6:d1:a8:a2:64:aa:
43:2d:46:6e:1a:93:51:ae:61:03:e2:54:73:77:e9:
e0:a9:ed:ef:7d:b8:ab:4e:c8:d8:af:9a:22:01:9c:
30:e2:ad:4e:67:45:25:63:d7:79:7c:c9:f9:d3:d9:
60:7e:49:6f:95:e3:4e:68:1b:84:7d:47:93:1d:ab:
5a:f2:6e:7f:ea:83:37:53:9a:71:6d:03:dd:7f:5d:
2e:c4:4a:8c:38:9d:54:b8:95:56:36:7e:d3:e6:8b:
2e:e3:1f:1d:3d:f3:dd:11:64:60:18:67:94:ba:3c:
82:2a:62:0f:a0:3c:33:77:ab:3e:df:4c:e1:ea:3a:
64:ba:2b:b3:2f:a0:26:b3:ae:0c:ad:24:1f:c8:2c:
55:94:51:8d:4b:f0:07:55:f7:74:27:2e:eb:42:b6:
aa:14:ed:09:7e:24:4b:11:83:02:62:c7:fe:f4:40:
89:42:9b:de:18:fb:17:68:19:73:61:f4:ac:88:bb:
34:f2:92:0d:82:3a:c0:eb:60:c0:01:64:2f:3f:28:
7c:cd:c2:11:44:fc:86:29:3b:0a:94:ae:55:2a:f4:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C8:9F:33:49:F4:21:65:9D:0E:44:9D:0C:71:AC:92:C3:6B:EC:CF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138352e38332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.83.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c3:8a:46:7d:5c:d1:a4:21:44:b1:4c:f3:7d:cb:db:49:e4:
f9:6b:6c:3c:9b:ca:7e:74:37:d3:e8:eb:5b:48:3b:cc:44:b1:
9a:47:bd:44:5e:78:2d:bf:3d:26:de:a4:14:3e:6c:a7:c2:35:
a6:dc:88:40:2d:ea:cd:57:67:19:e8:09:da:a9:d9:6d:47:fc:
cf:e5:cc:36:4e:f0:cb:49:98:a3:42:42:bc:f3:f8:12:8d:2f:
57:a2:38:21:52:ce:02:b7:02:9d:8b:f0:40:0f:76:6b:c2:46:
6f:36:0f:00:47:9a:b5:c1:dc:99:c3:06:b8:8d:1c:63:75:b1:
aa:d5:5b:86:ca:ef:26:40:f9:d8:a8:c3:04:5b:22:9c:d8:fd:
88:ea:5f:ac:4e:b5:f5:ae:ad:31:dd:19:c3:b0:6c:d0:85:1f:
08:6d:00:f9:4d:85:7d:0e:3a:bf:3d:e8:56:dc:f9:97:16:90:
5c:bd:45:d6:e2:39:f6:2e:48:14:ff:ea:f5:7c:28:d0:9c:a3:
e1:99:80:29:a6:d2:35:41:8e:f1:09:ac:de:43:29:b3:11:03:
69:ea:42:88:a3:41:bc:a3:a9:dc:8b:15:0c:12:3c:09:62:84:
09:8f:37:f3:5e:8c:9b:7a:73:42:80:b0:67:e5:21:4e:06:2a:
43:9d:a5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:57:22 2025 by rpki-client