Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e38372e302f32342d3332203d3e203531313637.roa
File: 3139342e3139352e38372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 1PpgA8T7TkEi0zbBUf2GLfpDWHevK5D5spo43Lk1UVg=
Subject key identifier: 8D:72:3E:E5:0C:51:E0:03:85:A1:CA:9E:2D:84:CA:31:2B:3B:0A:8E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5A0B565C9A18B3326C75231E56206B655B142947
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e38372e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Jan 2025 09:44:58 +0000
ROA not before: Mon 27 Jan 2025 09:39:58 +0000
ROA not after: Mon 26 Jan 2026 09:44:58 +0000
asID: 51167
IP address blocks: 194.195.87.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:0b:56:5c:9a:18:b3:32:6c:75:23:1e:56:20:6b:65:5b:14:29:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:39:58 2025 GMT
Not After : Jan 26 09:44:58 2026 GMT
Subject: CN=8D723EE50C51E00385A1CA9E2D84CA312B3B0A8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:7a:73:3d:eb:f9:95:53:7a:ef:71:9f:f7:
c1:fe:29:f3:c1:4e:6a:ff:44:de:b7:ed:14:70:54:
82:40:56:9a:66:7f:74:d1:31:b5:0c:96:d4:54:9c:
0d:bd:84:ca:a7:42:90:40:d6:b9:92:ca:a6:34:68:
d9:cb:9a:79:98:35:ad:5e:2c:67:37:dd:d8:58:11:
4a:5b:2e:2a:4d:3f:e4:4c:e8:bd:43:92:b9:81:01:
f5:75:38:fd:39:d1:52:ca:81:5a:c4:ed:3a:ac:7e:
0c:6e:6e:61:42:a2:ef:c7:cf:a1:0a:91:49:69:1e:
c8:11:02:3e:69:0b:4d:c2:3b:f9:9d:25:60:14:89:
8f:1e:5d:e5:9d:0e:a8:60:6f:78:03:9b:af:48:6e:
4b:3c:51:a6:79:94:eb:c0:71:f4:65:c1:28:0e:d7:
5d:7a:2c:c9:6d:67:86:7c:9d:c9:2a:46:93:42:07:
5e:a6:97:bf:fb:21:7b:48:74:89:f7:97:a7:a3:c2:
dd:6a:57:90:8a:08:47:54:65:de:3f:ab:42:60:f9:
ea:e7:03:de:00:53:da:2f:7c:2a:0b:93:36:ee:02:
fd:f2:be:66:cf:17:8b:6a:40:be:55:33:f9:dd:6e:
9a:ba:c8:42:ab:5d:e5:54:56:c8:4b:18:c8:c4:09:
53:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:72:3E:E5:0C:51:E0:03:85:A1:CA:9E:2D:84:CA:31:2B:3B:0A:8E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e38372e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.87.0/24
Signature Algorithm: sha256WithRSAEncryption
36:16:1b:e9:b8:8c:bb:8d:77:e7:88:ad:c9:68:1e:63:2b:3d:
13:33:df:87:38:63:ab:62:9b:51:1b:a8:ab:fe:04:19:a3:e1:
93:b9:71:a2:f0:e6:e6:da:7d:31:91:4e:d4:98:0f:9f:03:20:
ba:32:ec:50:6c:c5:9c:91:a3:25:9b:74:50:1a:8c:19:af:ba:
c7:4b:f6:aa:7a:9a:6e:2a:93:4d:be:75:3f:f5:00:a5:ba:a9:
65:2c:ab:3a:20:73:20:c1:fe:76:4c:7e:a9:2d:c5:09:eb:0c:
6b:bc:0b:a1:1f:77:bb:62:13:66:03:de:e1:01:7e:a8:b2:2d:
7b:42:55:77:05:dc:37:b4:7b:4c:b0:9a:36:a0:de:0a:42:8c:
c2:61:22:57:f2:57:d8:8c:c3:c4:a2:1f:07:de:8f:5b:6f:04:
56:07:4a:d5:c2:19:32:56:d2:b7:4c:da:e2:89:90:17:10:8d:
dd:86:68:7d:59:01:a9:85:91:c4:80:1f:5d:fb:4a:17:ab:32:
63:18:f2:43:0c:e7:f3:36:3a:43:cc:11:98:07:f5:00:66:35:
7a:5a:ec:47:c8:23:7d:d0:d8:d8:11:ac:b8:af:ee:7a:7d:5e:
da:7b:43:32:90:57:f7:4d:a7:d0:5f:38:33:42:f7:94:e2:15:
84:b1:9f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:14:45 2025 by rpki-client