Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e31392e302f32342d3234203d3e20323036323833.roa
File: 38302e37352e31392e302f32342d3234203d3e20323036323833.roa (raw, json)
Hash identifier: UKsQF8XzXdwT+7TtCcNtQMNfKB5330vA4uhQZwb55ok=
Subject key identifier: C8:09:43:09:17:D0:A4:AD:99:D9:EA:EE:6F:39:4B:AB:0B:71:6F:44
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3828FBBA29640BC09329E17C4E90B1BCF6BAE244
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e31392e302f32342d3234203d3e20323036323833.roa
Signing time: Tue 04 Mar 2025 09:45:48 +0000
ROA not before: Tue 04 Mar 2025 09:40:48 +0000
ROA not after: Tue 03 Mar 2026 09:45:48 +0000
asID: 206283
IP address blocks: 80.75.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:28:fb:ba:29:64:0b:c0:93:29:e1:7c:4e:90:b1:bc:f6:ba:e2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 4 09:40:48 2025 GMT
Not After : Mar 3 09:45:48 2026 GMT
Subject: CN=C809430917D0A4AD99D9EAEE6F394BAB0B716F44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:d8:d9:af:f6:6e:8f:c8:07:4e:dc:e1:68:
bf:e4:a4:9c:1b:aa:d9:1a:bf:71:af:46:ea:4d:7e:
dc:16:0c:43:9c:6b:fe:fa:3e:d0:46:d9:4a:86:e9:
d2:35:f2:fd:3e:50:e4:b2:2c:5b:76:8e:86:41:cd:
2e:7d:68:a3:52:1d:a8:22:cb:8f:86:e4:36:d3:82:
07:bb:80:25:3b:c0:b1:8e:45:c2:e4:4a:0d:b4:a4:
d6:ec:47:c9:fd:79:83:dc:89:56:7c:f8:54:ae:25:
f7:d8:64:47:f8:d0:1b:13:6d:e0:48:a1:53:be:24:
32:82:1b:3d:e9:2b:60:b2:a4:fe:08:3e:f0:25:ae:
a9:91:7f:8f:a5:00:5b:35:a8:5c:df:9f:d0:c9:c5:
07:ba:df:59:f6:4f:2f:f7:7c:e6:19:de:9c:57:db:
ec:07:c3:45:d0:b3:b5:59:03:51:1c:d8:94:04:fa:
b7:e1:dd:79:37:a8:93:8e:f2:be:01:6a:87:26:a1:
83:a2:f3:80:a5:e3:82:08:89:cd:28:26:7a:b6:74:
e1:b5:f0:70:37:eb:89:45:4b:9c:87:c1:d3:13:0c:
5e:42:92:5e:d7:9b:36:42:27:02:2a:99:0b:67:42:
e5:fd:83:69:12:96:41:b3:36:4a:1f:95:33:dc:76:
76:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:09:43:09:17:D0:A4:AD:99:D9:EA:EE:6F:39:4B:AB:0B:71:6F:44
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e31392e302f32342d3234203d3e20323036323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.19.0/24
Signature Algorithm: sha256WithRSAEncryption
96:61:eb:79:fa:a6:5f:62:22:af:db:d5:6b:c5:bc:e7:5d:80:
0c:11:dd:53:b5:4a:19:45:a1:7e:ab:c3:35:2d:0d:31:bf:8e:
dd:fc:df:20:e2:2c:ae:5a:82:ae:88:cc:ac:a1:2a:3e:74:c3:
29:1e:f2:6e:cf:65:6d:0e:0f:f2:23:22:8e:3b:a5:c7:ea:45:
64:03:6e:2c:e9:b3:12:d6:da:6b:79:59:a7:75:b3:a9:c8:11:
f7:c9:21:70:53:28:e9:ea:17:46:29:05:d9:4d:5f:5a:69:fe:
44:f9:2f:6c:be:4d:a9:8f:ae:d2:7e:18:68:58:43:19:39:a6:
df:fa:5e:fc:65:0c:8e:c1:36:9b:fa:53:c8:58:ff:2c:cf:c3:
10:3a:48:3d:89:e6:97:9e:29:79:a6:8b:36:36:45:fc:66:3c:
c9:63:59:bf:88:04:0d:75:99:7c:db:2e:7e:a9:56:4d:65:c2:
d8:44:46:d9:38:42:4b:70:ef:c7:d4:b3:27:a0:6c:9a:81:1f:
68:4e:a9:5f:b7:a1:91:c4:f1:04:dd:fe:70:58:1d:2a:c6:5f:
a2:a6:29:d4:ed:fd:51:6c:e9:75:fe:19:08:b7:3d:27:4d:4b:
69:aa:83:9b:0a:c9:01:17:8f:c9:8c:46:53:19:b4:63:e6:ec:
ef:5b:26:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:40 2025 by rpki-client