Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36382e302f32342d3234203d3e20313336373837.roa
File: 3231322e39372e36382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: JiE6mkOZYxQIfNnjykEOpdukJ5YpamgYRD9m2sunOeg=
Subject key identifier: C0:A1:46:B7:CE:EB:2F:CE:32:14:68:0B:E2:E5:63:AB:B4:A1:0D:32
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 547FB29627EFD1EA374D17C936B35F3919805320
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36382e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 31 Dec 2024 19:44:42 +0000
ROA not before: Tue 31 Dec 2024 19:39:42 +0000
ROA not after: Tue 30 Dec 2025 19:44:42 +0000
asID: 136787
IP address blocks: 212.97.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:7f:b2:96:27:ef:d1:ea:37:4d:17:c9:36:b3:5f:39:19:80:53:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 31 19:39:42 2024 GMT
Not After : Dec 30 19:44:42 2025 GMT
Subject: CN=C0A146B7CEEB2FCE3214680BE2E563ABB4A10D32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:ef:63:13:78:db:da:d9:dd:94:40:5a:6e:
ec:f3:79:f3:c9:44:f4:a5:3e:b0:d1:43:42:56:94:
9c:1a:e7:b2:77:bf:8d:95:a2:04:86:7f:2c:6f:47:
0f:cc:60:e9:b4:98:3c:87:83:bd:5a:78:be:cc:5d:
50:27:65:73:d3:93:3e:1c:66:36:b9:3a:c2:ec:12:
27:26:91:07:c9:d2:3e:73:c0:eb:1d:87:ba:0b:b7:
b5:14:17:9a:e2:92:44:80:4e:dc:b3:47:4d:a4:ea:
91:99:31:27:19:3c:aa:4b:1c:ab:ce:77:fc:80:4c:
04:bf:61:7b:9d:3f:ef:f6:4d:96:f1:a7:77:23:d9:
5b:44:b1:e5:55:f0:44:88:b8:71:1b:ad:f5:5b:d2:
79:0d:e6:a0:d3:d9:a5:d4:81:0b:62:06:43:16:76:
f4:c3:78:39:9b:d5:c0:83:8e:c7:30:10:0c:b9:42:
41:a8:ac:4d:dc:29:31:4c:77:e8:80:82:b1:68:4a:
6e:50:28:ff:35:df:59:b6:ce:55:17:0f:52:19:2c:
f8:e6:de:1b:8f:51:20:bd:79:16:26:ec:c1:53:57:
16:ba:95:90:b9:f8:f2:a8:0d:1a:0a:64:26:aa:6b:
c0:58:b8:9a:20:71:84:17:a7:28:d4:f7:f8:49:f2:
a6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A1:46:B7:CE:EB:2F:CE:32:14:68:0B:E2:E5:63:AB:B4:A1:0D:32
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39372e36382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.97.68.0/24
Signature Algorithm: sha256WithRSAEncryption
57:8c:20:35:f4:e3:a4:3d:94:50:29:dd:1f:60:9f:4c:a4:a6:
41:2b:f2:fe:fa:81:76:d6:49:26:3a:80:19:fd:f4:76:22:2e:
6e:d3:d1:f2:34:9f:be:36:ae:31:ad:9a:09:da:4d:ac:6d:0e:
43:ef:8f:d7:47:43:a7:f6:c2:06:b6:86:38:ea:19:e5:7d:b3:
1b:7e:03:cb:17:ad:22:a4:dd:6f:06:ab:cd:05:e8:fe:d0:05:
76:10:fe:c0:f6:3d:22:98:69:41:20:f6:36:9c:a7:b2:60:9e:
5b:02:56:d1:ba:1c:9f:60:ad:bf:d8:15:6a:c6:83:26:59:d0:
6d:d2:8a:32:d6:3f:17:f0:a0:08:18:38:41:80:45:20:65:2d:
aa:5a:6c:76:5b:89:23:62:db:9e:59:db:ff:a9:29:a9:fa:07:
29:a6:12:08:f5:21:de:5c:d1:ae:b8:63:f0:e7:b4:86:5a:df:
b8:4b:01:b4:c4:72:da:71:21:57:af:1c:c7:7c:81:31:cc:6a:
52:fb:ef:e9:e6:11:11:1b:85:12:d1:32:11:03:9f:c2:d0:0f:
df:d7:4a:bb:aa:10:ce:57:d9:61:0f:ed:59:29:5f:f9:4d:84:
8d:ab:fc:22:e8:b8:44:f9:46:14:a4:f5:1d:b2:77:70:a0:f6:
63:a3:27:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:26:15 2025 by rpki-client