Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235342e302f32342d3234203d3e20313337323335.roa
File: 322e35362e3235342e302f32342d3234203d3e20313337323335.roa (raw, json)
Hash identifier: Z4B36/xPhUj0T/zObk2/iC6HCmX9s2bC6fTapJ4vRoM=
Subject key identifier: 89:49:CE:2A:04:88:2D:5E:12:79:8A:6C:6A:B5:7B:CA:90:AA:6A:13
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1BF27819A9F7FF236B11CCEE1650EFA401FC6D90
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235342e302f32342d3234203d3e20313337323335.roa
Signing time: Wed 25 Dec 2024 07:53:21 +0000
ROA not before: Wed 25 Dec 2024 07:48:21 +0000
ROA not after: Wed 24 Dec 2025 07:53:21 +0000
asID: 137235
IP address blocks: 2.56.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:f2:78:19:a9:f7:ff:23:6b:11:cc:ee:16:50:ef:a4:01:fc:6d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 25 07:48:21 2024 GMT
Not After : Dec 24 07:53:21 2025 GMT
Subject: CN=8949CE2A04882D5E12798A6C6AB57BCA90AA6A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:d3:f8:ab:c9:f3:2d:47:94:0f:c0:e7:f4:
14:d6:68:e7:47:1c:33:71:a9:82:ad:ba:2c:e7:b1:
c7:c4:bd:bd:0c:7b:cb:f8:a7:ea:97:58:c8:e9:e2:
b5:e5:33:e4:77:3f:31:41:8d:4d:f9:16:05:c1:68:
b9:10:2f:40:2e:8c:bc:dc:af:23:57:92:bb:3b:72:
62:f6:4e:2f:11:7b:1e:99:fe:b9:1f:f2:0a:b1:8f:
fc:44:f3:1b:0e:6e:5b:0b:8f:89:a8:1a:bd:2a:c8:
3d:3d:3f:48:fb:67:e1:ba:e4:56:1d:ba:c4:d8:19:
06:8c:c2:47:14:72:19:2c:e2:10:b6:64:0e:63:66:
45:b7:95:67:8a:19:b9:4e:ab:89:39:f0:1d:45:92:
7e:14:af:a8:3b:de:14:5b:74:6e:db:4b:f5:94:9e:
f6:f5:f0:40:75:31:cc:30:ff:ae:57:be:98:c9:a4:
01:48:41:8e:3b:a4:da:83:1e:e4:22:ab:15:b7:a9:
4f:cc:22:53:28:9c:4e:7e:60:a1:c9:d2:ee:2d:3b:
2c:92:82:f7:f3:4a:c4:b1:84:4f:b9:3f:dc:06:9a:
50:15:fb:3e:b2:b6:f8:0f:fb:d3:8c:c9:91:b3:ee:
f4:41:ed:37:57:4a:9a:0e:52:d0:2a:a2:94:b6:be:
b3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:49:CE:2A:04:88:2D:5E:12:79:8A:6C:6A:B5:7B:CA:90:AA:6A:13
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235342e302f32342d3234203d3e20313337323335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.254.0/24
Signature Algorithm: sha256WithRSAEncryption
99:4f:23:b2:3f:3a:0e:35:c6:bb:25:b5:40:27:a7:85:74:05:
10:23:23:e1:ea:3b:ec:fe:46:e6:4a:85:4b:90:b0:65:82:6d:
59:e3:13:a4:b6:d9:79:61:db:ec:9f:4e:97:1b:e4:eb:ca:5d:
36:9d:c4:51:a6:ad:bb:f7:35:56:b9:e1:ca:ac:a7:ff:60:8a:
63:b5:11:32:d9:26:14:81:55:6a:e1:f5:12:f6:c2:57:25:e2:
4c:53:61:57:e8:da:1b:09:36:6a:c7:a4:09:0e:1a:c2:62:e4:
76:9b:6c:16:49:a6:4d:51:00:60:b6:df:a2:d6:ca:30:6d:ec:
ec:c6:91:f5:8c:92:82:1b:6b:67:c6:7a:9d:f9:02:aa:c6:de:
71:49:e7:4a:9b:b9:6e:ee:d1:f8:b2:e6:b3:9e:0f:ef:cb:c7:
f0:ea:ed:7d:2d:a3:82:41:65:3e:46:2d:00:2a:90:9e:63:ae:
63:55:5d:25:e6:f1:6a:cf:25:7f:2a:c3:cb:97:3a:10:7c:ac:
11:35:bf:0b:1a:bb:77:40:75:8d:c3:45:9a:83:b5:41:95:99:
10:8c:53:b8:f2:3c:28:97:9e:a9:fc:ce:8f:b9:25:0d:91:ba:
0a:a1:07:af:ca:7e:10:de:0f:52:58:06:6a:53:5d:f7:43:e3:
5e:a0:28:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:36 2025 by rpki-client