Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e31362e302f32312d3234203d3e203437353833.roa
File: 3231322e38352e31362e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: 2Ngsck5d0/NIM15KIqk2oDvpQVUrYPSHsMXQwYfZEcA=
Subject key identifier: 12:1E:8A:E1:64:51:EE:17:B2:4D:DA:6D:2F:11:F1:55:A7:CC:EB:AC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5F8FB979C207E529D62A06D8426238ED812BD10A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e31362e302f32312d3234203d3e203437353833.roa
Signing time: Fri 28 Feb 2025 12:00:35 +0000
ROA not before: Fri 28 Feb 2025 11:55:35 +0000
ROA not after: Fri 27 Feb 2026 12:00:35 +0000
asID: 47583
IP address blocks: 212.85.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:8f:b9:79:c2:07:e5:29:d6:2a:06:d8:42:62:38:ed:81:2b:d1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 28 11:55:35 2025 GMT
Not After : Feb 27 12:00:35 2026 GMT
Subject: CN=121E8AE16451EE17B24DDA6D2F11F155A7CCEBAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:85:72:0d:cf:8d:0e:37:79:54:4e:14:a1:
b1:70:be:ce:e2:48:e7:14:b4:3c:23:2b:84:f5:62:
31:f9:46:ae:db:5d:a6:13:ff:aa:f5:10:2e:ee:ef:
ed:30:34:91:5a:f3:1d:10:d1:8f:d9:c0:7b:e8:1c:
4f:31:86:08:6a:9d:5c:7e:b7:99:4c:e2:e4:39:b8:
7c:91:e4:1f:f5:b0:48:cb:28:8e:05:be:a5:70:a1:
3e:e4:fa:0a:61:57:e5:7f:e9:a8:8c:0e:54:bc:ff:
c7:f4:fc:d1:21:82:a9:8f:54:90:41:06:5f:da:46:
9e:1e:93:74:a4:f6:d8:4a:a6:7d:b9:09:a9:26:bb:
10:34:a2:ea:7e:78:b6:17:1e:49:78:27:69:87:89:
71:71:8a:2c:a2:c0:9a:6c:80:40:ca:49:74:e9:60:
cf:3c:7f:c1:fb:a0:78:44:c9:99:78:69:22:b9:b4:
14:83:9a:4c:37:a2:1b:c9:00:15:c6:04:c8:ad:7c:
cd:79:4c:86:f2:88:65:27:dd:ca:47:16:28:2a:74:
ea:23:f9:b4:d1:19:af:49:2b:3b:b2:78:db:ce:6b:
d0:e1:40:75:14:6d:3e:8e:3d:65:f1:c0:1f:0c:e4:
21:fe:e2:8e:37:33:13:d5:34:2a:80:8c:7c:a0:b4:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1E:8A:E1:64:51:EE:17:B2:4D:DA:6D:2F:11:F1:55:A7:CC:EB:AC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e31362e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.85.16.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:1d:d1:f6:07:64:ae:17:6e:ff:11:98:ab:4a:e6:06:b9:da:
bb:e5:c6:1d:7e:16:7d:45:2f:5f:14:e8:28:98:83:3e:ac:27:
c0:6a:37:04:81:c3:e0:fe:61:69:a2:fe:60:3c:1e:f1:4b:cc:
66:ae:9d:7d:04:5c:f1:37:4a:21:d8:68:11:36:c8:b7:de:e4:
8f:21:aa:1d:e3:ad:43:74:7c:b8:82:59:6e:64:50:91:d6:90:
46:e4:9f:dd:4f:d0:ec:c0:97:8f:b4:81:dd:c7:15:f5:6f:9f:
63:dd:cd:7c:52:6e:b0:b8:c1:52:91:12:62:9a:a7:b5:eb:b0:
ed:15:e4:d0:81:03:c5:c6:2d:8a:a7:91:48:ef:84:7a:74:d6:
06:4f:a9:19:76:f3:3a:90:f2:2b:e7:5e:a5:fd:84:05:8c:1c:
5a:b5:af:72:26:b7:b1:32:32:b2:64:6c:de:c4:4b:af:5b:fe:
b0:d3:7a:97:50:45:69:ec:74:bd:61:d0:9f:4d:c4:69:99:26:
96:14:65:d5:a0:54:c5:c1:46:69:25:ab:b6:f7:8a:c2:c1:5d:
ae:91:bc:91:62:0b:9c:87:36:38:b9:61:e9:d8:57:aa:ea:76:
ee:e6:35:17:69:dc:f1:ed:86:7a:e8:b3:d7:71:2a:f6:40:42:
ed:07:cf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:02:05 2025 by rpki-client