Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38352e302f32342d3234203d3e20313437303439.roa
File: 3231322e31352e38352e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: zLhLfuPbrXpLA/4ZdtkLmNSr1FZwLIy2eiSV0rC3J70=
Subject key identifier: 5E:49:57:B4:7C:B4:85:AB:51:86:27:36:DF:3A:FC:01:92:95:9B:C9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0B6907472DD28F38ABDF80AED048F6BC23673326
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38352e302f32342d3234203d3e20313437303439.roa
Signing time: Thu 16 Jan 2025 10:03:03 +0000
ROA not before: Thu 16 Jan 2025 09:58:03 +0000
ROA not after: Thu 15 Jan 2026 10:03:03 +0000
asID: 147049
IP address blocks: 212.15.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:69:07:47:2d:d2:8f:38:ab:df:80:ae:d0:48:f6:bc:23:67:33:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 16 09:58:03 2025 GMT
Not After : Jan 15 10:03:03 2026 GMT
Subject: CN=5E4957B47CB485AB51862736DF3AFC0192959BC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:d1:c7:9e:6f:fc:da:2b:7c:dc:87:6d:e2:
4c:99:47:81:25:c0:e5:33:08:f0:fa:e4:c6:34:ae:
63:71:67:69:7c:5b:18:b8:08:4f:ec:c5:3c:45:ad:
18:23:74:e2:fb:94:3f:ea:df:51:c6:b0:6c:37:47:
27:9a:d0:c8:ea:8d:e6:0b:a2:6b:3d:e0:73:e3:4a:
92:2e:dc:f2:76:20:d0:26:28:83:cb:22:ed:5a:9c:
64:08:48:b8:08:14:5e:75:db:da:d3:0b:de:77:01:
fa:ab:a4:48:93:3b:e6:81:b7:5e:d9:25:f5:70:8f:
2d:f5:4d:a5:32:87:75:c7:7f:6a:f2:a3:e9:f8:d8:
23:2b:7e:f5:6c:93:c6:3b:61:32:ba:49:62:fc:e4:
1c:fe:d9:39:e1:50:ac:1a:cc:c1:14:1a:da:d2:1c:
69:46:4c:ef:b2:8b:ca:27:0c:d8:74:f7:7a:94:8b:
3f:11:93:8e:c9:75:a7:be:8b:a4:43:8d:46:e9:b7:
5c:7c:fd:5b:37:5b:04:de:3a:db:e3:78:5d:6d:a9:
3f:77:c4:9f:84:88:e9:c8:7d:d3:97:8a:00:40:0f:
31:a6:eb:35:96:fb:a5:07:77:ba:0a:1f:02:79:00:
7a:ad:06:93:d7:a5:74:4d:69:a2:8a:a9:41:71:5f:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:49:57:B4:7C:B4:85:AB:51:86:27:36:DF:3A:FC:01:92:95:9B:C9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38352e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.85.0/24
Signature Algorithm: sha256WithRSAEncryption
32:38:22:4b:29:37:6c:ba:63:16:b3:bc:aa:c4:7f:a2:2c:c3:
59:32:bb:a3:0d:c1:22:7d:dc:81:bd:e8:83:5a:c4:23:4c:80:
04:8b:2b:40:7f:74:f7:9d:bc:91:66:16:7a:ac:7b:93:8b:0d:
41:c7:7f:2f:5e:42:33:61:37:fe:41:d7:37:7d:dd:58:fa:a2:
a5:09:d4:5c:3b:81:8b:95:00:c8:8a:54:b1:ac:a4:5a:65:d2:
59:bb:a7:33:8f:f5:be:0e:b0:1d:35:8d:98:05:60:6b:9d:29:
b1:c6:87:1f:ae:59:5c:26:33:b1:83:b7:3e:b6:e1:7c:4b:b8:
e9:79:b2:5f:d6:a7:ed:69:ef:b7:46:cb:7c:63:14:40:6f:23:
4d:7a:a1:a4:83:3d:2e:92:6b:90:d6:43:cc:6a:97:33:2b:d6:
27:10:ae:ab:70:7e:6a:80:3f:f5:e2:31:b3:5d:16:e9:1b:9b:
e3:f2:ab:a7:c9:8a:93:7e:f7:be:5f:29:fe:68:84:21:d5:7e:
df:12:dc:ba:b0:36:0b:04:d6:2e:9d:78:8c:65:27:fa:cd:2b:
e3:4c:fd:02:96:57:f9:4e:cc:88:9d:3f:23:da:0f:4e:1d:ca:
d1:8a:34:b8:1c:7c:21:70:40:1c:2d:59:a5:a4:1d:50:25:ad:
3b:d1:2c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:39 2025 by rpki-client