Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32342e302f32312d3234203d3e20313938303930.roa
File: 38302e37352e32342e302f32312d3234203d3e20313938303930.roa (raw, json)
Hash identifier: 7Qxop8UfPK7sK8uc28/SCq9+tYHhu8rdM41KHFu6pro=
Subject key identifier: D3:97:FC:21:B2:1B:23:6B:C8:E5:E1:C2:9D:9B:A9:7E:F0:DD:B8:41
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7D9759478ED288F4EEC81819C25720112E6F79DD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32342e302f32312d3234203d3e20313938303930.roa
Signing time: Mon 27 Jan 2025 09:45:17 +0000
ROA not before: Mon 27 Jan 2025 09:40:17 +0000
ROA not after: Mon 26 Jan 2026 09:45:17 +0000
asID: 198090
IP address blocks: 80.75.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:97:59:47:8e:d2:88:f4:ee:c8:18:19:c2:57:20:11:2e:6f:79:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:17 2025 GMT
Not After : Jan 26 09:45:17 2026 GMT
Subject: CN=D397FC21B21B236BC8E5E1C29D9BA97EF0DDB841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:41:c9:92:fa:c1:88:15:fc:64:0a:ba:7e:
90:5c:a5:cb:d0:f7:27:ad:62:4d:f3:d1:24:53:34:
3d:bc:4a:92:42:ce:49:2a:42:3b:6a:27:38:c7:2d:
30:db:41:7b:cf:e0:19:33:1d:3f:37:bf:7f:2f:95:
05:f4:fd:8c:3f:f7:ac:60:b5:a0:18:c6:ca:4e:d4:
b6:dc:86:84:7a:d7:7d:ed:e7:3b:7c:73:b4:2a:82:
61:40:96:56:b3:6b:42:71:fa:00:4e:49:b4:0d:d6:
77:a4:5e:ed:8e:ac:6a:50:87:9b:dc:c2:91:4a:0f:
f7:f0:3c:e4:da:c1:56:6a:a1:86:8d:ff:c1:38:97:
5b:2c:75:88:14:0e:80:7b:4c:99:34:9c:e4:10:2c:
2b:76:65:2e:f8:ce:18:03:d8:f8:92:2f:e5:12:c9:
d5:4f:40:f9:4f:e7:8d:5d:0a:4c:7c:1b:31:32:5a:
8b:9d:e3:75:fa:05:ba:c4:a0:ab:ae:24:92:6f:09:
1a:1d:72:5d:c6:0d:fa:a6:cb:71:22:91:2a:1f:00:
63:9d:00:ab:b9:9f:32:a0:11:65:58:7b:6d:d8:85:
b0:c8:29:18:0e:6f:04:c0:1e:c1:1d:8f:cb:89:af:
27:2b:09:97:02:2a:b4:ec:97:cf:45:62:5c:9e:80:
62:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:97:FC:21:B2:1B:23:6B:C8:E5:E1:C2:9D:9B:A9:7E:F0:DD:B8:41
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32342e302f32312d3234203d3e20313938303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.24.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:81:a2:e8:50:ac:df:23:e5:24:71:19:ca:2d:d2:50:d1:f9:
14:d9:60:d2:f5:59:ae:1c:03:6d:35:04:fe:e0:cd:97:0e:1e:
30:24:33:7b:89:52:22:72:35:4e:31:be:f7:70:cc:5b:5e:df:
b0:54:81:6c:cf:d5:7f:86:26:ec:77:2f:03:5d:28:dd:2f:f1:
84:5c:1d:1d:5d:67:6a:48:94:82:4a:68:69:cd:40:fe:8a:14:
1a:e9:2e:4b:ef:9e:c6:31:fa:ec:73:09:c2:b0:90:b1:3a:b1:
9c:3d:91:15:3b:f7:c3:96:7b:4c:c4:bf:74:d5:5c:ce:af:36:
21:51:bf:73:ec:cd:d4:f8:b3:67:c1:4f:14:8c:4c:f3:65:04:
59:95:2c:3b:eb:4c:e7:ca:00:f2:49:90:83:8c:fe:72:dc:00:
d9:10:c5:9b:38:6f:dc:36:aa:8a:c9:52:96:d9:04:f2:3f:f1:
5a:09:88:4b:2c:55:dc:51:30:cb:04:40:ae:29:00:79:4c:e6:
c6:11:c2:5a:67:2b:d7:78:d4:5e:35:7f:1a:63:4f:5d:bd:d5:
e5:7d:01:ac:97:78:db:5f:d3:d2:3b:7b:09:5c:1e:d4:9e:45:
99:6e:25:68:f0:6f:66:7f:4a:7a:57:3f:37:f4:ea:b0:c3:cf:
2e:7e:e2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:05:51 2025 by rpki-client