Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37362e302f32342d3234203d3e20313336373837.roa
File: 38322e3134392e37362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 2k4VC+4IbHHTYu2X11e/PgiAICrOzoiaMQE3QSVw7ys=
Subject key identifier: 53:53:A5:DC:F9:F3:9F:C0:0E:E5:E9:A7:39:CD:4D:AE:DF:AF:F4:F7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 76DD11C5AEEB5FF6F8BEB7175FF5E602E3FFD0CA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37362e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 31 Dec 2024 19:44:43 +0000
ROA not before: Tue 31 Dec 2024 19:39:43 +0000
ROA not after: Tue 30 Dec 2025 19:44:43 +0000
asID: 136787
IP address blocks: 82.149.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:dd:11:c5:ae:eb:5f:f6:f8:be:b7:17:5f:f5:e6:02:e3:ff:d0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 31 19:39:43 2024 GMT
Not After : Dec 30 19:44:43 2025 GMT
Subject: CN=5353A5DCF9F39FC00EE5E9A739CD4DAEDFAFF4F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:ba:f9:22:1c:8d:0d:97:71:50:5f:4e:bc:
da:69:0b:04:58:5c:d3:3c:ed:cb:88:5a:12:ba:be:
c6:7a:f5:b5:f4:3e:fd:2b:9b:9f:a3:3b:f2:c4:85:
19:ad:e4:02:2f:3b:4a:9c:48:c6:06:5e:53:ce:b6:
6d:80:09:3f:10:df:7a:36:15:24:32:42:ba:29:9d:
63:ee:18:d1:7c:5d:31:45:d7:14:2f:9f:95:1d:40:
4e:1a:69:8e:b9:d5:49:fb:ab:be:41:ef:96:2d:59:
74:da:9e:65:e0:21:07:7d:b6:e4:6f:c9:91:ff:57:
09:3e:39:1f:ea:67:c7:19:07:be:98:2d:ba:c7:7d:
57:5b:98:b8:d2:0e:84:6e:48:c5:75:ec:6a:a6:f0:
db:c6:e7:26:3d:3f:69:83:92:d1:5b:a9:77:34:b5:
19:0a:c4:ea:19:9f:fc:42:dc:6a:08:62:f0:7a:d0:
ba:72:af:17:87:c0:f6:20:3a:c2:74:42:e6:e5:a0:
2c:fe:d0:a1:40:d5:92:e0:7f:3c:8e:c4:e9:48:00:
20:92:63:8b:74:dd:ac:60:32:90:0b:21:a4:bb:47:
0b:e5:9d:26:5f:89:c4:94:cc:a3:e4:13:80:55:6f:
23:61:4f:69:ab:2a:2d:59:6f:69:36:79:d0:b3:8c:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:53:A5:DC:F9:F3:9F:C0:0E:E5:E9:A7:39:CD:4D:AE:DF:AF:F4:F7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.149.76.0/24
Signature Algorithm: sha256WithRSAEncryption
01:81:17:49:a4:67:f5:ee:c2:94:04:69:b3:59:91:e6:f8:41:
43:60:fd:31:d8:7d:94:15:ee:44:0b:90:c6:c4:f2:07:0d:7a:
27:af:c8:80:03:56:9f:76:a5:8f:b3:56:b4:0e:f6:5d:c4:83:
8f:b9:19:74:eb:ba:4e:fa:25:9c:f1:88:cd:e0:ac:18:b0:f2:
16:65:78:a5:29:4c:35:64:1f:0a:3c:7c:bd:61:1b:f6:d3:a9:
50:a8:94:2a:e6:d1:d2:46:d8:e8:9f:9f:98:6a:0b:67:af:4e:
5e:39:43:a4:3c:7d:6b:e0:e5:2e:c1:35:43:4f:e9:0a:42:80:
3b:39:d8:8e:5d:5d:c0:18:36:5d:47:99:c4:5a:01:84:13:92:
a8:dc:ff:df:27:fa:3a:d0:d4:a9:75:99:bd:2d:7f:6a:89:7d:
52:68:36:4c:78:fc:3c:13:5b:0a:6e:c6:1f:69:c1:81:f6:f4:
a9:d0:8a:e8:3c:07:7b:d8:6f:a1:80:63:39:6e:ee:bf:f6:ce:
75:39:47:43:f8:22:d1:5d:db:61:04:4b:00:6b:6f:49:4f:62:
ec:c8:a4:6e:47:60:26:f2:72:f3:41:37:0c:aa:b2:fa:4f:1d:
4a:95:55:33:15:e6:26:60:d1:c0:50:9c:ef:bc:dc:a0:79:ac:
47:c4:f6:61
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUdt0Rxa7rX/b4vrcXX/XmAuP/0MowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDEyMzExOTM5NDNaFw0yNTEyMzAxOTQ0NDNaMDMxMTAvBgNV
BAMTKDUzNTNBNURDRjlGMzlGQzAwRUU1RTlBNzM5Q0Q0REFFREZBRkY0RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85Lr5IhyNDZdxUF9OvNppCwRY
XNM87cuIWhK6vsZ69bX0Pv0rm5+jO/LEhRmt5AIvO0qcSMYGXlPOtm2ACT8Q33o2
FSQyQropnWPuGNF8XTFF1xQvn5UdQE4aaY651Un7q75B75YtWXTanmXgIQd9tuRv
yZH/Vwk+OR/qZ8cZB76YLbrHfVdbmLjSDoRuSMV17Gqm8NvG5yY9P2mDktFbqXc0
tRkKxOoZn/xC3GoIYvB60LpyrxeHwPYgOsJ0QubloCz+0KFA1ZLgfzyOxOlIACCS
Y4t03axgMpALIaS7RwvlnSZficSUzKPkE4BVbyNhT2mrKi1Zb2k2edCzjNx3AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUU1Ol3Pnzn8AO5emnOc1Nrt+v9PcwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzNDM5MmUzNzM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
UpVMMA0GCSqGSIb3DQEBCwUAA4IBAQABgRdJpGf17sKUBGmzWZHm+EFDYP0x2H2U
Fe5EC5DGxPIHDXonr8iAA1afdqWPs1a0DvZdxIOPuRl067pO+iWc8YjN4KwYsPIW
ZXilKUw1ZB8KPHy9YRv206lQqJQq5tHSRtjon5+Yagtnr05eOUOkPH1r4OUuwTVD
T+kKQoA7OdiOXV3AGDZdR5nEWgGEE5Ko3P/fJ/o60NSpdZm9LX9qiX1SaDZMePw8
E1sKbsYfacGB9vSp0IroPAd72G+hgGM5bu6/9s51OUdD+CLRXdthBEsAa29JT2Ls
yKRuR2Am8nLzQTcMqrL6Tx1KlVUzFeYmYNHAUJzvvNygeaxHxPZh
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:19 2025 by rpki-client