Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139302e3134312e302f32342d3234203d3e20313336373837.roa
File: 3138352e3139302e3134312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 2n/Rq+yAL0C+WFp1YIV4CnziboXxe3FEj2rTVcw5rxs=
Subject key identifier: AB:8D:58:D4:D5:26:7A:A3:A7:CE:F4:48:E0:99:C8:0C:D1:35:C8:C8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 697ACBBDAC450741771F39F6D1D44BB17BECF2E4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139302e3134312e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 04 Jan 2025 05:30:32 +0000
ROA not before: Sat 04 Jan 2025 05:25:32 +0000
ROA not after: Sat 03 Jan 2026 05:30:32 +0000
asID: 136787
IP address blocks: 185.190.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:7a:cb:bd:ac:45:07:41:77:1f:39:f6:d1:d4:4b:b1:7b:ec:f2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 4 05:25:32 2025 GMT
Not After : Jan 3 05:30:32 2026 GMT
Subject: CN=AB8D58D4D5267AA3A7CEF448E099C80CD135C8C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:e3:a9:d3:14:9c:42:fe:a9:27:43:e2:07:
17:d8:d9:0d:26:84:1f:f1:f2:98:97:8b:ea:c4:48:
2e:37:23:64:d7:86:9b:0f:0b:e1:77:52:66:7c:78:
35:a0:f6:3a:19:02:bd:2a:b0:91:15:a6:77:fd:74:
4d:09:92:e3:9e:cd:7a:a0:48:8d:3c:c9:41:5d:4b:
97:1a:99:2c:c5:51:0e:13:33:4d:eb:25:b7:49:6b:
51:66:dc:4e:a9:8c:98:05:4f:52:af:52:e3:73:24:
ca:4c:9a:4f:c2:76:40:f7:76:ad:56:b0:81:93:a1:
8e:72:45:f7:8d:42:1f:12:40:ea:17:c2:07:c7:75:
1f:b9:bc:72:f7:ef:5f:38:50:36:9c:bc:66:d7:42:
db:15:b7:42:17:07:ed:c3:49:3d:cf:b7:16:30:17:
55:b4:5b:c3:fd:d4:25:65:9e:56:bd:38:2f:b2:2d:
28:bc:6f:2d:d0:3d:a9:ad:49:87:a9:77:36:06:2f:
5c:0b:8e:bc:4b:5a:4c:18:f0:59:1e:e2:f4:81:4a:
0d:60:e6:17:03:98:6c:12:ad:dc:8f:ad:3d:70:6f:
af:61:88:09:11:eb:b4:e3:28:5e:f9:30:75:d0:53:
24:86:eb:8a:8f:1d:88:33:7b:3e:f2:28:76:ef:c7:
73:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8D:58:D4:D5:26:7A:A3:A7:CE:F4:48:E0:99:C8:0C:D1:35:C8:C8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139302e3134312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.141.0/24
Signature Algorithm: sha256WithRSAEncryption
98:4a:1b:e1:79:72:66:64:22:10:c0:ca:88:ba:8e:57:d5:16:
fa:1b:7d:ce:b0:52:cf:1f:93:ab:7f:2f:6a:c9:9f:0b:a6:b0:
6f:38:71:b6:87:70:18:40:6e:f3:a5:f2:c7:58:fb:b2:85:55:
ce:5f:66:ef:f8:89:3d:88:f0:9a:66:82:cc:cd:7a:9b:65:95:
78:f9:de:eb:bf:fd:de:30:a1:26:97:e7:13:f9:3f:23:69:a4:
51:10:89:5c:87:6d:01:89:c0:24:0d:b8:65:61:bc:a9:62:5f:
17:7d:53:27:ca:7c:39:60:5e:b3:d1:25:f9:95:78:73:18:e3:
5b:1d:0f:c8:19:2b:e7:64:f6:69:db:42:13:db:5e:8f:1c:e8:
fa:e8:2d:7e:2e:88:39:19:fd:27:64:eb:3d:ba:08:5d:5d:6a:
05:68:3c:ee:4f:aa:96:e5:73:2d:d4:8e:33:02:d2:22:86:04:
16:7d:14:68:97:0a:f0:52:46:4d:17:be:8b:c7:39:39:d8:3c:
73:53:a4:9f:c0:11:31:92:c0:c7:4d:f4:e8:21:3c:7d:63:9a:
f6:75:c4:41:26:bc:e1:34:7b:6b:c1:78:86:2f:59:63:53:51:
c5:bc:52:c2:68:a5:44:d4:2c:b0:34:af:0b:9a:fc:38:cd:ab:
1d:ec:ac:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:16 2025 by rpki-client