Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e3139302e38302e302f32312d3332203d3e203430303231.roa
File: 38302e3139302e38302e302f32312d3332203d3e203430303231.roa (raw, json)
Hash identifier: lERaBZNMjCp0MTLRiRFT+XW9eFFdpgFDIML8vwf/VBk=
Subject key identifier: B7:1E:9C:96:0D:E3:91:93:0C:10:69:5A:A6:F0:31:38:58:D0:C7:89
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1989725EA2307ADE4C0BB159682F54BC9583665F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e3139302e38302e302f32312d3332203d3e203430303231.roa
Signing time: Tue 18 Feb 2025 10:45:43 +0000
ROA not before: Tue 18 Feb 2025 10:40:43 +0000
ROA not after: Tue 17 Feb 2026 10:45:43 +0000
asID: 40021
IP address blocks: 80.190.80.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:89:72:5e:a2:30:7a:de:4c:0b:b1:59:68:2f:54:bc:95:83:66:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 18 10:40:43 2025 GMT
Not After : Feb 17 10:45:43 2026 GMT
Subject: CN=B71E9C960DE391930C10695AA6F0313858D0C789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c4:bb:a5:2a:23:92:ef:1f:17:10:b0:d1:49:
a2:a7:99:85:2a:17:27:58:21:d9:d7:3d:b1:ab:ce:
4f:03:9a:23:ac:42:e8:06:08:7c:3e:78:2f:ca:04:
f6:9e:0d:2b:9a:e2:11:5e:e3:df:e6:83:f8:a5:d0:
22:17:09:b3:c4:f5:45:d2:0f:d4:fc:d8:d9:b2:c2:
35:73:da:fe:68:11:e5:f7:8f:42:d8:ca:8d:b6:ab:
f4:71:94:fc:4e:c1:90:1b:33:2e:d1:0e:c4:0c:51:
ec:93:62:9b:af:96:67:9f:c7:81:fa:80:5f:be:c9:
43:b6:67:e5:f8:da:68:e4:01:3a:a9:ab:57:38:34:
ea:7c:f8:99:31:53:8e:bf:3c:f2:2e:3f:cc:f3:b1:
b6:61:f5:66:a3:bd:19:31:f9:3a:2d:81:49:89:3a:
79:b7:00:66:5f:c7:14:00:45:a4:a6:e5:e7:48:6c:
0c:d5:96:42:ca:c9:0b:26:12:d9:2c:1f:80:89:bd:
c7:0b:14:29:3d:95:cc:e1:31:e0:5f:3b:32:b2:69:
e6:63:92:7e:ea:7b:0c:28:d4:58:d3:c4:54:cb:d2:
f6:b8:8a:69:63:5f:02:ea:a1:e3:4a:81:fb:6a:ca:
26:4c:34:da:63:25:06:47:87:f1:4e:ae:73:8f:ae:
85:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1E:9C:96:0D:E3:91:93:0C:10:69:5A:A6:F0:31:38:58:D0:C7:89
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e3139302e38302e302f32312d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.190.80.0/21
Signature Algorithm: sha256WithRSAEncryption
56:e1:4a:27:11:d7:5a:fc:21:56:e3:21:70:a4:82:03:5a:0e:
09:e8:1a:79:2f:45:ad:21:d3:73:59:88:ca:34:79:c7:2c:5b:
13:ab:97:76:e5:64:e0:fa:14:a2:db:43:79:1e:e2:a8:69:f0:
58:37:2f:fd:cf:20:b3:82:e6:af:f1:77:9b:bb:f6:03:9e:57:
ce:7c:ad:45:4c:fd:1b:c3:55:fb:bf:87:4c:99:34:47:7f:a4:
e8:f7:36:15:ce:dc:93:13:54:4d:f4:0a:27:81:d9:5f:e6:1c:
8c:38:25:9d:20:fc:cc:e9:d5:22:49:1b:4c:80:aa:c2:f3:85:
b5:06:b2:b0:4c:f9:68:c4:1f:07:ea:87:da:4b:fd:83:69:99:
df:f7:11:3d:71:f8:77:57:62:04:7f:35:8a:b7:f8:cf:c7:2e:
13:68:93:6f:74:22:55:b3:88:38:0e:d4:36:81:eb:0e:64:03:
5d:85:8e:aa:4a:4c:e6:d3:b7:09:fc:a4:e7:dc:5d:0a:04:b2:
71:dc:8a:eb:48:c8:ec:f6:13:33:47:23:b8:28:92:db:6c:75:
56:bd:c0:be:51:e4:f4:f8:08:1d:dd:ac:69:ca:e1:65:61:f6:
55:13:ac:2d:5b:65:72:bc:f1:ff:f8:b3:20:dc:ca:a7:b6:1f:
30:0b:48:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:15 2025 by rpki-client