Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e38362e302f32342d3234203d3e203437353833.roa
File: 3139342e3139352e38362e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: sX1nNYKUlaW4w2GeE14xrYYdLm3QgSVMD7flKkxAbSE=
Subject key identifier: EB:C9:46:C9:70:AC:63:77:E6:79:28:76:EB:27:95:AC:A6:B5:4B:7C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5FD99E083F159ADCCBA674CD15C16B52E1568E29
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e38362e302f32342d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:21 +0000
ROA not before: Mon 27 Jan 2025 09:40:21 +0000
ROA not after: Mon 26 Jan 2026 09:45:21 +0000
asID: 47583
IP address blocks: 194.195.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:d9:9e:08:3f:15:9a:dc:cb:a6:74:cd:15:c1:6b:52:e1:56:8e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:21 2025 GMT
Not After : Jan 26 09:45:21 2026 GMT
Subject: CN=EBC946C970AC6377E6792876EB2795ACA6B54B7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:f8:c7:7b:6c:38:b8:48:a7:2e:35:40:8c:
ff:fa:cc:7d:5c:50:bd:ba:02:69:0e:82:d5:e4:43:
bd:61:b2:cb:5c:01:f5:2c:54:82:0a:e2:38:1f:84:
4b:bc:93:d5:eb:7f:94:c6:58:9e:66:28:5e:58:56:
41:cc:30:35:1b:ed:d6:f8:96:e7:c2:ad:85:4d:02:
4f:db:b4:f7:4b:ff:51:ad:77:d6:09:95:4c:93:09:
86:8a:77:44:9c:ed:a1:d8:9e:c6:42:83:51:ca:c1:
4d:66:91:6c:44:ad:01:72:3b:a3:3d:17:dd:91:b9:
ba:76:69:9c:de:f7:51:c0:c8:4c:d5:75:50:de:5c:
53:3c:b1:4d:a4:4f:b1:a1:4f:b4:f2:d0:e2:95:6e:
c3:a7:4e:8b:f8:84:45:f4:b8:af:ce:c3:04:d3:ec:
2d:51:39:12:49:47:51:b0:d5:44:24:9b:d6:d4:78:
b0:d0:e9:a7:00:eb:61:db:4e:39:e1:2e:e6:1c:af:
dc:28:1a:6b:1b:c7:37:76:37:85:ca:21:0d:20:25:
9f:88:27:8e:d2:16:fa:34:60:f5:74:ed:ec:9d:92:
66:2e:39:98:5e:c5:7e:d9:0e:be:ea:84:59:67:6d:
d3:b2:62:ac:45:ea:5f:c5:15:d4:a9:4b:eb:df:e0:
57:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C9:46:C9:70:AC:63:77:E6:79:28:76:EB:27:95:AC:A6:B5:4B:7C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e38362e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.86.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:77:67:e0:ff:58:5c:9d:3a:13:11:34:ec:21:60:c3:ea:75:
02:7c:98:12:3b:48:25:41:b5:7d:4c:cc:36:c3:7d:4b:a1:f9:
3e:46:94:71:10:32:a5:83:13:f8:df:ff:96:1f:6f:bc:31:23:
cb:e9:20:9d:af:ed:a8:6a:e0:47:81:24:6f:e0:17:2e:c5:05:
2b:95:82:d3:82:91:3d:fc:57:af:27:e3:57:b8:a3:d8:f3:de:
6a:67:89:93:41:f1:eb:a7:55:8d:b9:b0:37:63:b3:d8:36:8a:
7f:a2:42:87:bb:d3:cd:da:41:a2:8e:0e:e2:10:10:f7:68:ce:
69:45:b2:fe:af:d1:4e:e5:02:b3:b9:33:8a:9c:56:43:49:0f:
cb:6f:27:b1:50:73:4c:b7:0c:4e:9f:0a:e9:42:77:d7:4c:eb:
e0:b7:31:d3:c2:f7:d9:0f:80:d8:d1:c5:c8:7a:8c:03:42:36:
d3:7b:c9:32:80:ce:eb:70:18:fb:c9:2e:89:f5:ee:ec:25:c6:
10:de:8a:24:74:bc:3d:cd:f7:b7:3f:67:a1:38:0b:c8:c1:78:
51:48:1c:5f:a5:7d:01:36:5b:a3:35:0c:e7:3c:dd:54:3e:41:
7f:14:ea:b6:69:86:0f:7e:76:88:b7:b8:d7:24:05:98:bc:c6:
6b:88:6b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:58 2025 by rpki-client