Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34322e302e302f32342d3234203d3e20313431303339.roa
File: 3139332e34322e302e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: ESO1st4me3cCMMeFuIQUk7p9vHJwO6GiuyeBFdLNVqY=
Subject key identifier: 9D:2E:49:02:0F:3F:B3:A4:31:8C:92:54:5E:17:33:BC:35:E6:68:8D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 033249825C0ED6D7696B2FAF8EEBB5D140E1D27F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34322e302e302f32342d3234203d3e20313431303339.roa
Signing time: Mon 27 Jan 2025 09:45:01 +0000
ROA not before: Mon 27 Jan 2025 09:40:01 +0000
ROA not after: Mon 26 Jan 2026 09:45:01 +0000
asID: 141039
IP address blocks: 193.42.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:32:49:82:5c:0e:d6:d7:69:6b:2f:af:8e:eb:b5:d1:40:e1:d2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:01 2025 GMT
Not After : Jan 26 09:45:01 2026 GMT
Subject: CN=9D2E49020F3FB3A4318C92545E1733BC35E6688D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:c4:31:9d:03:5d:9a:cd:cc:60:22:db:e8:
66:e7:90:72:98:b7:68:d0:72:91:2f:07:82:95:a4:
6d:77:67:79:d9:9c:5a:b6:00:3a:15:62:aa:d6:28:
13:b8:77:3c:d8:68:0a:eb:11:43:bc:5a:45:54:41:
ad:55:ee:6c:6c:b1:98:91:22:7d:eb:14:03:f2:3b:
84:b6:8c:30:fd:b6:73:3a:03:18:28:40:92:03:24:
e7:1a:7d:42:33:40:45:b5:19:69:84:b1:a5:1d:dd:
66:dc:b6:ba:01:f9:46:bf:e3:4c:44:7f:d2:33:77:
ca:56:3b:d0:93:76:a8:3f:6d:ea:e2:c5:46:cd:15:
99:f8:a6:d5:5b:08:25:13:e7:e8:cd:bf:21:02:d9:
88:ef:5d:fa:2d:ef:5a:9b:dc:57:ca:32:c5:bb:42:
3a:12:dd:64:23:b7:60:8c:47:b9:7b:ca:c9:c4:5b:
99:9d:0c:cf:74:ee:b4:ab:88:a9:53:80:3f:50:1f:
0e:43:38:b2:cc:be:53:0d:83:db:98:de:0e:c0:bd:
4c:0a:fa:36:8c:ec:c7:b7:0f:06:86:f7:11:a0:22:
49:91:c1:57:07:7a:47:fb:c9:10:6c:29:e5:4a:c2:
9b:f0:c3:40:c3:19:6a:3b:3a:dd:68:dc:76:f2:03:
33:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2E:49:02:0F:3F:B3:A4:31:8C:92:54:5E:17:33:BC:35:E6:68:8D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34322e302e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:31:2e:b6:62:61:a9:a7:98:ba:0f:be:69:36:89:67:e9:00:
dd:e0:41:18:31:7d:2c:f2:b3:45:e4:be:38:ab:ed:48:ba:3f:
d2:ec:5f:27:63:46:d9:ad:01:fe:7a:54:15:71:d7:47:e1:d8:
76:11:f2:77:d4:76:ca:c8:b1:47:a0:e5:9e:ca:ec:80:e1:2e:
f3:80:8a:16:6e:f3:bb:d6:28:62:6c:78:6f:7b:30:de:3e:ed:
73:cd:7e:0b:56:17:ed:f6:bc:ae:a4:08:ad:b8:56:12:2b:c1:
2f:9e:da:86:23:16:75:4a:b6:9d:44:77:35:3c:ab:14:9c:56:
c0:6b:22:87:97:82:01:9b:7d:01:4b:58:32:bc:b4:23:1f:54:
de:8d:39:1b:8c:da:bd:d6:32:31:01:6e:0b:5a:67:0e:26:74:
86:b7:e2:c9:99:13:96:f8:77:8e:68:68:a1:69:d1:35:55:1b:
56:be:81:03:10:58:d1:84:06:01:e4:92:60:c4:cd:67:6d:f7:
08:36:11:5d:9a:ef:9d:df:99:e2:47:3f:92:8e:44:47:c5:f7:
c8:60:4a:3f:cb:a7:07:7d:98:21:1e:dc:56:47:d6:4a:d2:df:
c0:b3:15:89:37:37:39:9e:53:91:40:70:ca:1a:79:5c:e5:68:
8b:35:63:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:51:11 2025 by rpki-client