Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38372e302f32342d3234203d3e20313336373837.roa
File: 3231322e31352e38372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: WYSlR+o/U1tx/wbiCCOfXwP+L7zEBy+3SsuoeCIHjWw=
Subject key identifier: 5A:9A:3E:BF:D7:61:80:FA:EE:39:94:24:7F:91:3B:E9:C1:39:DF:AD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 16536FD2E2D73596359773737003ADDAF57FCE52
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38372e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 16 Jan 2025 10:02:41 +0000
ROA not before: Thu 16 Jan 2025 09:57:41 +0000
ROA not after: Thu 15 Jan 2026 10:02:41 +0000
asID: 136787
IP address blocks: 212.15.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:53:6f:d2:e2:d7:35:96:35:97:73:73:70:03:ad:da:f5:7f:ce:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 16 09:57:41 2025 GMT
Not After : Jan 15 10:02:41 2026 GMT
Subject: CN=5A9A3EBFD76180FAEE3994247F913BE9C139DFAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:dd:ef:fa:01:99:9d:51:c6:ac:bc:4c:e4:
a4:b5:7a:67:30:9a:1e:4d:32:f9:cc:08:fc:6b:02:
9d:f7:18:82:7c:05:58:9a:38:6c:f7:db:cb:d1:c2:
d1:f5:45:e7:49:80:88:d2:14:c0:58:a1:91:0f:1a:
8d:d3:0d:12:c8:e8:c1:cd:da:8c:65:3e:36:1e:7f:
8c:ce:29:69:a4:27:4c:db:a1:89:4b:05:7f:ac:a8:
e2:d6:66:5c:bb:9a:fd:50:35:fe:7a:83:44:bc:c8:
00:ef:2e:4b:a6:7a:bd:c2:f8:59:81:6c:28:8b:f0:
a3:72:d8:40:3c:a5:60:e6:6a:01:81:f4:92:f5:86:
66:02:12:c3:ac:9b:28:e2:b9:99:3b:1e:c9:33:ec:
e4:84:58:a2:b6:a5:46:c7:91:db:de:7e:45:d9:ef:
f0:5b:02:e0:c3:2f:c2:06:9d:34:a0:df:b5:91:7c:
12:81:eb:c8:4d:17:0e:43:48:55:0a:93:ff:b4:dd:
74:76:e2:e5:8c:d7:ce:cb:21:9f:eb:54:0b:89:f4:
7d:5d:45:ff:2b:13:61:a6:79:16:b9:b7:74:93:48:
1c:40:7a:6f:08:0a:20:af:db:d4:8c:60:67:ad:1e:
68:f3:81:fd:89:73:a3:3c:22:11:94:a5:75:5b:37:
4e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9A:3E:BF:D7:61:80:FA:EE:39:94:24:7F:91:3B:E9:C1:39:DF:AD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e31352e38372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.87.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:5b:e6:9f:27:c1:a4:90:4d:fe:4b:8c:bf:73:92:ca:7d:34:
39:ef:f9:d0:09:55:b6:9a:56:b0:e7:15:8a:23:7f:63:10:c5:
fe:0d:18:3a:76:84:a1:48:4a:ab:77:d8:a5:2e:0c:d6:77:79:
61:6c:98:2d:86:59:7e:4b:d5:7e:7d:93:d0:ef:11:e3:d6:40:
6d:51:75:81:8c:51:6a:b1:4c:33:bc:db:f9:c4:21:5e:78:6e:
2a:f9:61:86:0f:c6:ed:86:4f:15:89:96:71:49:8d:ea:53:9e:
d2:bb:50:c2:fe:64:bf:0a:90:6f:c1:e9:2c:ee:58:03:9d:de:
5e:73:7c:96:b4:be:e3:ee:93:b9:9a:62:b3:46:fb:7d:a9:4b:
89:95:25:1d:10:44:6c:37:69:d2:48:e7:a0:a6:35:13:f7:c8:
94:49:b3:14:7a:72:75:06:04:25:2e:35:28:76:9b:19:f5:91:
66:db:cc:e8:fe:36:5f:95:68:4e:23:73:b6:9a:cd:d1:eb:67:
e2:50:90:52:fe:ee:a0:05:61:e7:e0:b9:08:88:89:d1:5e:0c:
1c:9e:99:ea:81:42:5c:f3:35:b7:65:5d:77:f0:82:36:90:36:
b5:34:72:d7:3f:5f:20:a5:1b:0c:7d:0c:a0:16:56:a2:6b:45:
bd:bf:1e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:25 2025 by rpki-client