Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38312e302f32342d3234203d3e20313437303439.roa
File: 3231322e31352e38312e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: cxObq/jQlLbcLKnBqZhVvapRhf+ODqL9J7YUuhKgGCE=
Subject key identifier: 53:62:A5:E1:37:AF:C6:15:90:95:DB:8D:A1:BC:0D:86:0C:EA:42:83
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 70CC6D7C6A8DCC5469CE9DC2093A0AC4C5D52C22
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38312e302f32342d3234203d3e20313437303439.roa
Signing time: Thu 16 Jan 2025 10:03:44 +0000
ROA not before: Thu 16 Jan 2025 09:58:44 +0000
ROA not after: Thu 15 Jan 2026 10:03:44 +0000
asID: 147049
IP address blocks: 212.15.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:cc:6d:7c:6a:8d:cc:54:69:ce:9d:c2:09:3a:0a:c4:c5:d5:2c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 16 09:58:44 2025 GMT
Not After : Jan 15 10:03:44 2026 GMT
Subject: CN=5362A5E137AFC6159095DB8DA1BC0D860CEA4283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:03:a1:ba:6c:00:d8:8f:8f:c3:76:7f:1c:c8:
01:0b:c3:56:a7:28:d1:19:22:96:53:f5:6b:a1:2d:
92:c4:d6:27:4a:33:3c:1b:52:4c:07:1c:92:b9:5f:
c8:e2:4e:7b:80:e9:55:a9:2f:0d:f9:17:05:28:c3:
89:a8:73:02:0a:43:d1:97:ec:bf:55:de:27:92:1b:
13:15:07:5b:23:2d:28:5f:27:51:bd:f5:00:16:ee:
4b:9b:2c:ae:1f:48:e8:cb:37:9f:08:cf:56:d4:80:
b9:c7:6e:08:f3:94:4b:ba:a1:5d:a0:7b:bd:32:4a:
81:d9:24:56:55:33:c4:ca:52:d4:5a:c0:cd:90:7e:
a4:ae:a8:86:f4:9f:13:e6:f7:d1:0f:14:58:80:8a:
da:9c:53:8b:f1:41:df:dc:1f:59:9c:e3:a0:40:b2:
a3:40:21:db:41:b4:d7:64:ec:77:f0:c7:54:b2:59:
1e:61:f1:54:25:31:27:76:b1:82:7d:34:ec:8c:1b:
99:97:56:e2:37:50:a0:2b:f8:61:ae:e1:0a:c5:5f:
d4:0f:f9:c0:40:86:30:b2:a5:aa:7f:76:84:2b:a8:
2e:db:1e:dd:c0:d7:c2:4a:54:97:7f:c8:c0:19:c7:
86:cf:f2:62:90:eb:19:65:6c:f8:86:bf:3e:26:48:
5c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:62:A5:E1:37:AF:C6:15:90:95:DB:8D:A1:BC:0D:86:0C:EA:42:83
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38312e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.81.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:3c:27:e5:bf:9f:17:ec:26:6b:43:d0:15:06:12:ad:22:45:
43:e1:60:28:8d:37:e3:ea:34:85:49:5a:8b:11:ca:25:3b:4f:
6c:97:32:62:fb:a5:93:48:67:5e:69:43:91:89:b4:3e:5b:e6:
cc:34:26:70:ae:65:d8:a2:0d:4f:db:a2:88:3f:f6:c4:8b:1a:
ab:66:ba:90:40:8f:9b:d8:2e:e6:a1:d9:5a:1c:93:29:07:07:
10:e7:66:91:07:87:f0:b7:66:4c:16:59:f7:24:16:80:95:45:
de:26:57:b7:a6:70:e7:85:61:41:a0:6b:1c:90:33:4e:ee:eb:
08:7f:60:80:e6:bc:5f:7e:f1:94:89:16:f0:64:8b:c8:97:42:
9c:04:72:63:ba:1f:90:1d:f8:9a:af:35:30:19:ca:b9:dd:3b:
d9:20:07:93:5d:58:f7:3e:f0:b7:98:d0:4a:70:88:8d:2b:e4:
90:58:de:f7:87:7d:28:14:b0:3d:d3:55:f4:18:62:e9:71:94:
ef:ab:5e:d0:a8:d8:a3:52:8b:a9:69:87:06:f3:be:d0:46:5a:
ea:49:b2:fb:9b:82:bc:ba:9f:09:73:03:da:fa:6b:1d:7b:ac:
57:3e:01:5b:73:28:b5:2c:c2:6d:95:7f:c0:67:1b:64:eb:87:
fe:3e:11:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:31:41 2025 by rpki-client