Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231322e37302e302f32332d3234203d3e203437353833.roa
File: 3138352e3231322e37302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: wqPNSR4IlRzvXvimnlJY2dCduh58mr4B51++KiTPIKE=
Subject key identifier: 22:68:63:C5:2A:43:51:42:EE:3B:8E:A8:1D:CA:0A:80:19:2E:43:F6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 51F0EB4D58FF8AFCDCFAB7065AAE9275C7D6B9DF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231322e37302e302f32332d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:00 +0000
ROA not before: Mon 27 Jan 2025 09:40:00 +0000
ROA not after: Mon 26 Jan 2026 09:45:00 +0000
asID: 47583
IP address blocks: 185.212.70.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:f0:eb:4d:58:ff:8a:fc:dc:fa:b7:06:5a:ae:92:75:c7:d6:b9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:00 2025 GMT
Not After : Jan 26 09:45:00 2026 GMT
Subject: CN=226863C52A435142EE3B8EA81DCA0A80192E43F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c5:55:50:cc:66:cc:10:cc:a9:db:c3:a6:36:
9c:b9:43:f2:0d:fd:a2:eb:09:0c:d1:88:ad:26:0f:
9f:e2:99:c3:2e:74:3c:2c:27:18:c3:8e:1e:a0:82:
a2:5d:0c:b9:20:c7:12:0e:45:4c:b8:cf:20:18:e5:
d4:2e:6b:41:ec:ac:ac:d0:f0:88:03:ef:3e:49:69:
45:8f:44:0c:0d:84:99:06:09:2c:0d:5a:c7:05:f3:
f1:c9:93:b0:12:d0:17:aa:ac:00:8a:26:07:af:3e:
b3:bf:2a:3b:39:e5:c8:a7:3a:77:20:37:7e:80:a0:
50:2c:48:45:79:db:cd:d1:21:48:e0:a9:b5:8a:7b:
12:1d:99:75:a8:7d:cb:6f:c8:19:6c:7a:39:83:e8:
15:71:6a:1b:03:53:20:95:a7:54:51:4e:b7:f9:7c:
22:7a:a8:a6:21:b4:4d:13:ef:1f:79:30:2e:a2:1e:
69:01:d9:6f:3e:5b:ad:13:d1:87:f6:09:47:18:b2:
4c:a9:7b:c4:38:4f:f7:f5:ef:81:69:fa:e7:5a:35:
4b:e9:1d:e9:19:e3:b4:ca:52:58:33:7a:62:44:bc:
3f:dd:96:8f:05:5e:e3:cc:f1:d4:3f:5b:bc:d7:5b:
7a:18:79:ae:c6:e0:46:95:20:04:cf:fe:4a:71:06:
66:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:68:63:C5:2A:43:51:42:EE:3B:8E:A8:1D:CA:0A:80:19:2E:43:F6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231322e37302e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.70.0/23
Signature Algorithm: sha256WithRSAEncryption
46:fb:1e:13:1b:ed:11:a1:1b:16:ce:9f:7b:d4:bf:c0:fb:29:
28:a9:62:9c:d6:1b:b7:2d:93:9b:40:bd:e8:af:fe:ce:fd:f9:
11:ec:2e:b3:9e:ae:f8:64:59:da:33:e0:14:79:1e:49:e9:6b:
50:94:e1:07:10:1c:9c:2e:0d:c4:27:3f:52:6c:6d:92:60:57:
97:8e:52:b1:d6:3f:06:d7:0d:d1:37:83:07:17:e8:4f:c2:79:
d8:1d:09:e1:3e:ad:8a:09:56:57:a7:c7:00:0c:84:e5:2e:c4:
37:f1:26:65:f1:d9:80:be:59:b1:6c:5e:ea:5f:57:e1:7b:4d:
19:f3:7e:4d:b7:4e:11:f2:73:4d:3b:6e:16:e6:fb:e4:b5:d9:
dc:ff:2b:55:8d:28:a8:03:56:4b:ad:f5:4b:88:de:ec:68:d1:
d7:7b:80:9d:89:f7:40:26:2f:93:9d:a3:92:0f:3a:2a:10:8c:
f8:0a:a7:15:09:fd:bc:78:ec:ce:57:86:8a:d9:34:b3:11:58:
6c:de:5c:73:33:3f:1f:56:1f:9f:38:5e:9c:67:98:e3:65:72:
56:8a:a7:a2:27:05:7e:eb:65:57:54:f5:7c:c9:56:f5:12:f0:
25:e4:d5:d3:09:6c:48:cc:3d:4c:e3:5e:2b:73:19:87:d6:91:
05:da:d2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:02:09 2025 by rpki-client