Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32332e302f32342d3234203d3e20323036323833.roa
File: 38302e37352e32332e302f32342d3234203d3e20323036323833.roa (raw, json)
Hash identifier: WEz7+Qv0Ni5KE7XcDo6eyZLbTtq5hox2k9Wal8hJjU8=
Subject key identifier: 70:60:5A:AF:5F:59:91:D4:78:8E:98:15:56:5B:57:7A:A1:41:35:62
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 462C666D46C0EA6CEC8C562F685B4EDF69044F7F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32332e302f32342d3234203d3e20323036323833.roa
Signing time: Tue 04 Mar 2025 09:45:48 +0000
ROA not before: Tue 04 Mar 2025 09:40:48 +0000
ROA not after: Tue 03 Mar 2026 09:45:48 +0000
asID: 206283
IP address blocks: 80.75.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:2c:66:6d:46:c0:ea:6c:ec:8c:56:2f:68:5b:4e:df:69:04:4f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 4 09:40:48 2025 GMT
Not After : Mar 3 09:45:48 2026 GMT
Subject: CN=70605AAF5F5991D4788E9815565B577AA1413562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9c:5e:9f:b5:94:98:3a:13:9a:ec:7f:14:b8:
03:45:62:4f:3d:4a:ea:27:67:21:29:7c:82:3a:dc:
ef:d7:dd:73:49:d8:d2:9f:cf:39:87:5f:c2:2d:32:
31:5e:e5:4e:79:3a:ff:4d:ac:9c:4c:39:cc:84:64:
fc:0c:45:46:ce:ad:8e:4e:95:3f:2b:a2:89:fe:02:
95:b8:cc:f3:44:bd:78:88:bb:1b:86:aa:40:0c:d8:
36:0e:51:c1:bf:3c:96:08:01:0f:4a:e0:33:a2:93:
b5:97:1d:95:d0:7a:0c:c8:df:68:70:ba:b7:11:62:
f6:9f:af:eb:02:23:4a:58:47:85:8b:7d:fc:2e:f9:
7a:23:59:44:80:12:33:2c:50:03:a3:72:d7:a9:37:
f1:dc:d0:76:a2:30:b7:e6:ef:da:8c:94:7a:0e:0c:
ee:55:db:c3:93:81:2e:ff:23:38:0c:b5:1f:97:e7:
67:c0:c9:a2:b1:c1:6e:42:fc:ea:7a:06:17:d3:3e:
8a:a4:b5:d3:c8:c3:ff:74:09:ac:db:66:ae:af:de:
d1:7b:ff:4e:5b:29:c6:3f:68:ae:ce:2e:5e:5c:09:
86:24:fb:51:e2:db:b7:20:1e:7e:cb:7f:2d:98:e8:
1a:41:28:f8:a7:78:72:b3:d7:60:40:e8:a1:cd:bc:
70:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:60:5A:AF:5F:59:91:D4:78:8E:98:15:56:5B:57:7A:A1:41:35:62
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32332e302f32342d3234203d3e20323036323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.23.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:0f:c2:fb:a9:0c:5e:09:80:34:8e:64:d0:11:da:a9:b1:d5:
93:e8:d2:6f:bf:4c:05:60:e6:23:8b:27:d6:a2:84:95:fa:b2:
9d:b0:3d:03:02:c1:0a:f2:76:35:b9:08:65:4c:81:30:ce:09:
64:44:a8:f8:55:8c:e3:29:ff:d5:ed:c4:24:64:d7:a1:36:6a:
01:5e:3e:ed:21:70:8d:3c:63:d8:29:a1:ef:31:30:dc:5c:76:
08:15:d3:84:c2:d0:35:78:10:b6:d6:c4:7b:c3:43:36:73:8b:
76:f3:3f:e2:57:16:2e:29:04:8b:c6:6b:cb:27:72:a2:a3:f3:
83:16:9a:40:ed:30:02:a4:6f:67:bc:3c:fa:c2:d3:0e:18:26:
ee:42:9e:0d:d5:cf:ae:31:93:49:2b:a8:4a:43:21:2f:49:d6:
d3:66:fd:75:6e:1c:92:1a:72:cf:d6:4e:35:f0:ce:ed:92:10:
ae:40:96:7f:f5:c8:ac:93:27:e7:67:6e:74:bb:a4:a7:54:3d:
79:81:e2:e0:92:93:33:23:5e:50:ec:a2:21:ef:1b:07:4d:dd:
7d:07:2e:04:49:7f:ba:76:54:1f:b8:09:4c:fd:2d:da:83:13:
8e:72:c1:63:e1:38:c4:d9:f4:21:b1:cb:4f:68:8e:25:c5:ed:
bf:1b:26:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:03:55 2025 by rpki-client