Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3133322e302f32332d3234203d3e203437353833.roa
File: 38322e3138302e3133322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: /ht8XxhxEjgDRjZyOm5vSRBbRP2T78jO+YjO47aanLU=
Subject key identifier: 91:D0:2C:F5:5E:FF:07:20:BF:97:69:4A:C9:5D:60:C0:02:5E:88:47
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 21DA7D75DD9A1CCF7B92BAA5E16DE111EAF3695E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3133322e302f32332d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:44:58 +0000
ROA not before: Mon 27 Jan 2025 09:39:58 +0000
ROA not after: Mon 26 Jan 2026 09:44:58 +0000
asID: 47583
IP address blocks: 82.180.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:da:7d:75:dd:9a:1c:cf:7b:92:ba:a5:e1:6d:e1:11:ea:f3:69:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:39:58 2025 GMT
Not After : Jan 26 09:44:58 2026 GMT
Subject: CN=91D02CF55EFF0720BF97694AC95D60C0025E8847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:9c:cf:c1:4c:61:11:0b:ef:38:ff:ca:3b:
e6:49:17:61:d4:e1:df:c3:cf:a3:17:7f:8b:db:86:
17:c2:47:bf:e3:83:21:59:b8:09:20:5e:0f:34:0b:
e4:66:62:1d:76:29:bb:2c:2a:b6:af:db:7e:51:1e:
97:0b:c0:dd:e7:80:0d:97:22:5f:7d:ac:a2:50:00:
fa:83:9a:e9:39:14:15:75:5b:6e:6f:5d:72:e9:13:
9a:e8:37:b7:24:a6:7f:33:3d:5f:be:78:76:07:dd:
6e:25:31:03:1f:1c:81:b5:af:4e:fc:ba:9c:51:1d:
47:4d:d5:1a:9d:9a:15:ad:42:5b:b5:c5:a7:a8:2a:
07:b6:53:a1:ce:a9:15:77:ce:55:52:31:3d:81:70:
58:d6:96:42:61:df:92:23:6b:af:c6:dd:b9:59:1a:
e2:d1:a8:dd:e6:54:fe:be:88:b5:38:e2:43:8f:10:
9a:f8:54:37:45:14:3e:f7:16:5f:33:9c:76:3c:d4:
ad:12:bd:b7:33:b2:f4:19:ad:af:71:6f:7a:e3:96:
12:23:b0:66:0d:7a:5b:54:b8:b6:b1:b5:bf:2a:4e:
50:49:c8:7e:39:bf:cb:47:1e:b5:b3:d7:ab:d2:ec:
c0:6a:56:26:a3:d4:4e:80:c6:8a:d1:02:1a:c6:6a:
a6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D0:2C:F5:5E:FF:07:20:BF:97:69:4A:C9:5D:60:C0:02:5E:88:47
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3133322e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.132.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:e2:14:7d:4f:4f:ee:e1:2f:5a:d7:9e:88:0f:bb:93:9b:57:
b4:ed:e8:62:bb:1f:ee:40:77:83:c7:58:30:75:f7:26:d8:24:
39:d9:ee:e2:aa:81:85:29:55:dc:c3:db:62:a1:75:71:7a:de:
07:81:18:75:29:3e:e1:19:eb:55:b9:66:90:97:8e:60:96:df:
6e:01:ff:ed:a7:57:e6:bb:26:89:e3:66:ec:b6:b7:5a:ba:1f:
a9:d5:80:c7:e1:68:be:da:d8:59:89:58:65:bc:db:ef:d4:e9:
1c:d1:25:b6:11:87:20:dc:57:f1:4e:b4:92:67:ed:1b:e8:e7:
0e:5a:a3:e9:8f:e4:e6:1a:53:dc:1c:29:79:f7:7a:e0:98:af:
fe:f3:26:db:db:8c:de:ec:17:18:36:e1:a6:cd:0a:be:33:f1:
48:15:0c:fe:ed:76:50:44:26:ba:4a:3e:f7:80:a2:5f:72:05:
38:67:4b:95:bc:42:b4:e3:f8:0c:67:95:55:cd:73:3b:d0:24:
40:13:b5:8f:cb:18:b6:dc:8f:d0:6f:f7:23:01:9d:fb:e9:25:
98:a7:4a:49:8b:86:fe:62:8b:90:b7:00:a9:20:c3:13:aa:44:
07:b1:f8:78:c4:7f:10:10:03:c1:e1:6d:e3:d4:92:06:35:c1:
4b:26:4e:c2
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUIdp9dd2aHM97krql4W3hEerzaV4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTM5NThaFw0yNjAxMjYwOTQ0NThaMDMxMTAvBgNV
BAMTKDkxRDAyQ0Y1NUVGRjA3MjBCRjk3Njk0QUM5NUQ2MEMwMDI1RTg4NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH65zPwUxhEQvvOP/KO+ZJF2HU
4d/Dz6MXf4vbhhfCR7/jgyFZuAkgXg80C+RmYh12KbssKrav235RHpcLwN3ngA2X
Il99rKJQAPqDmuk5FBV1W25vXXLpE5roN7ckpn8zPV++eHYH3W4lMQMfHIG1r078
upxRHUdN1RqdmhWtQlu1xaeoKge2U6HOqRV3zlVSMT2BcFjWlkJh35Ija6/G3blZ
GuLRqN3mVP6+iLU44kOPEJr4VDdFFD73Fl8znHY81K0SvbczsvQZra9xb3rjlhIj
sGYNeltUuLaxtb8qTlBJyH45v8tHHrWz16vS7MBqViaj1E6AxorRAhrGaqYbAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUkdAs9V7/ByC/l2lKyV1gwAJeiEcwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzODMwMmUzMTMz
MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
UrSEMA0GCSqGSIb3DQEBCwUAA4IBAQBN4hR9T0/u4S9a156ID7uTm1e07ehiux/u
QHeDx1gwdfcm2CQ52e7iqoGFKVXcw9tioXVxet4HgRh1KT7hGetVuWaQl45glt9u
Af/tp1fmuyaJ42bstrdauh+p1YDH4Wi+2thZiVhlvNvv1Okc0SW2EYcg3FfxTrSS
Z+0b6OcOWqPpj+TmGlPcHCl593rgmK/+8ybb24ze7BcYNuGmzQq+M/FIFQz+7XZQ
RCa6Sj73gKJfcgU4Z0uVvEK04/gMZ5VVzXM70CRAE7WPyxi23I/Qb/cjAZ376SWY
p0pJi4b+YouQtwCpIMMTqkQHsfh4xH8QEAPB4W3j1JIGNcFLJk7C
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:07:05 2025 by rpki-client