Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3136332e33322e302f32312d3234203d3e203437353833.roa
File: 3139342e3136332e33322e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: 4JnPNQ+qYPj72wnT/WKFi82qLJRGnb6a384UQhMDszA=
Subject key identifier: C2:BA:97:D4:E7:15:6A:A9:6F:D6:7B:EC:79:22:18:0D:60:3B:3D:33
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5C0E601DD9DBCED7193C7618D3A40E69E52A81A3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3136332e33322e302f32312d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:18 +0000
ROA not before: Mon 27 Jan 2025 09:40:18 +0000
ROA not after: Mon 26 Jan 2026 09:45:18 +0000
asID: 47583
IP address blocks: 194.163.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:0e:60:1d:d9:db:ce:d7:19:3c:76:18:d3:a4:0e:69:e5:2a:81:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:18 2025 GMT
Not After : Jan 26 09:45:18 2026 GMT
Subject: CN=C2BA97D4E7156AA96FD67BEC7922180D603B3D33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:99:f5:2b:12:2b:3a:af:cd:01:18:80:41:
9f:54:f3:6b:a5:33:a1:e5:d4:84:47:54:49:aa:bd:
bd:41:c5:66:57:f5:b5:74:4a:2f:11:cd:d7:37:43:
0f:bc:57:c6:15:fa:33:e8:70:19:69:08:3b:ae:61:
5a:d9:54:5e:8d:03:8c:d2:be:9e:31:e2:94:3c:28:
25:55:98:e5:6f:97:a5:d0:4c:1b:82:f6:a4:3c:9b:
aa:fb:59:5a:49:db:4a:6e:63:a5:50:5c:a3:0c:05:
c2:45:76:4b:8f:18:21:23:75:7e:a0:42:42:93:70:
e8:d5:c3:5e:a9:9d:a1:03:d2:72:9e:bd:25:d1:55:
9f:6f:04:40:35:42:b3:2f:63:88:0a:34:0b:9c:69:
41:b9:04:75:90:60:2b:b0:50:4a:db:e8:4a:63:a3:
e4:39:da:2d:ab:da:01:ab:5e:38:05:fc:8c:8e:53:
43:44:5f:f9:40:e0:b2:78:6f:e6:53:3c:be:50:1f:
4c:2c:86:ea:43:f7:a6:c3:f5:3c:57:db:ae:44:ab:
de:2c:0f:7e:96:11:a2:83:27:17:4e:0a:72:64:3d:
75:8c:20:96:d5:ec:62:d4:fc:fd:51:de:e8:37:5a:
7c:b2:62:94:4e:39:11:f1:92:58:28:f0:0b:b2:33:
cf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BA:97:D4:E7:15:6A:A9:6F:D6:7B:EC:79:22:18:0D:60:3B:3D:33
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3136332e33322e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.32.0/21
Signature Algorithm: sha256WithRSAEncryption
43:05:46:8e:70:c9:9a:c0:09:62:8c:d0:0b:7a:4f:8b:a7:ba:
f3:53:da:69:18:5a:bc:fd:dd:38:23:c4:e6:a7:49:e5:08:4e:
9e:42:d1:d4:e3:3f:68:5b:2f:44:26:9f:6a:b0:eb:03:7b:4b:
a0:36:5e:a6:ac:1d:6e:14:b5:b0:1f:36:89:a6:52:5c:53:19:
aa:44:00:d0:19:c8:c4:22:c4:7f:6b:c0:2a:50:a8:89:de:ce:
d8:a6:54:d0:9e:d0:49:f5:49:f0:d2:cf:71:24:74:a1:28:67:
91:7b:b4:6a:6c:20:16:a3:33:8f:ac:7c:48:82:33:06:50:0a:
2d:ca:dc:06:1a:ae:26:98:c2:ba:16:d7:f9:26:15:aa:65:c0:
37:10:93:de:ab:a4:da:2a:44:fe:db:f3:0d:dc:13:2a:11:cf:
62:b6:18:e2:b1:c6:d6:ba:d4:38:4b:8c:f0:14:40:62:b5:db:
bd:69:73:89:d1:20:db:ce:b9:6d:ef:0e:20:6d:9e:e0:7b:b7:
51:40:35:28:41:3a:96:8b:9d:48:c1:08:d7:44:40:85:8d:23:
be:ae:78:f8:5e:5b:3a:ba:51:67:89:9b:bc:18:6c:ef:dd:06:
45:69:3f:71:f3:c2:ed:20:db:54:ab:8e:e7:84:53:cd:f4:14:
a3:f1:36:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:53:44 2025 by rpki-client