Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3133342e302f32332d3234203d3e203437353833.roa
File: 38322e3138302e3133342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: r+l1WdzAfha8ZX2Gi6hn2YnI9D99u/y8p9IkexABL9A=
Subject key identifier: E6:3F:7C:46:B3:C0:51:ED:BB:A9:F2:7C:29:97:AA:E1:FC:77:E9:7E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2A8D673E7DCB4614C04AB8BC50E0DA9FA9F12E69
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3133342e302f32332d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:16 +0000
ROA not before: Mon 27 Jan 2025 09:40:16 +0000
ROA not after: Mon 26 Jan 2026 09:45:16 +0000
asID: 47583
IP address blocks: 82.180.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:8d:67:3e:7d:cb:46:14:c0:4a:b8:bc:50:e0:da:9f:a9:f1:2e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:16 2025 GMT
Not After : Jan 26 09:45:16 2026 GMT
Subject: CN=E63F7C46B3C051EDBBA9F27C2997AAE1FC77E97E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:df:96:b8:bf:93:ea:ec:68:a1:78:49:52:
62:ae:94:51:79:4a:79:0a:03:82:14:39:5f:9b:9d:
1a:c2:1f:e8:0a:47:9d:04:df:44:c3:55:9c:7d:aa:
d9:17:5b:0b:b4:4d:72:6e:ed:ac:1e:b1:47:a3:6a:
de:a4:d5:60:c7:53:45:5e:c1:b9:e4:f3:62:54:bd:
ac:7e:50:11:db:81:2b:a5:0d:27:7b:fb:4f:9b:db:
67:c0:70:71:e4:13:cd:aa:22:b8:36:e7:8a:1a:a5:
36:6f:44:92:b3:58:61:e9:11:b5:ba:7e:d3:5d:ad:
32:a3:3b:a6:8e:27:4f:91:64:00:14:e9:1b:20:01:
61:d7:0c:b4:38:2b:03:a9:5a:91:33:5c:f1:a3:f2:
7f:a3:ef:2c:3f:01:b9:b5:65:75:66:10:e5:b9:a5:
5d:68:ed:24:11:98:0d:a4:42:75:3e:3b:49:f4:be:
ab:d1:a5:0a:97:a3:68:fc:d6:54:31:3c:0d:12:f5:
27:1c:8c:64:ab:13:51:55:e0:da:9e:ed:24:b3:46:
33:c0:f2:5c:4d:bd:20:75:1f:7c:e1:9b:88:07:68:
22:1c:4e:38:12:af:57:db:1c:5c:62:23:13:77:31:
8e:a3:d5:38:f6:df:4e:41:45:ef:19:79:0a:d3:b9:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3F:7C:46:B3:C0:51:ED:BB:A9:F2:7C:29:97:AA:E1:FC:77:E9:7E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3133342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.134.0/23
Signature Algorithm: sha256WithRSAEncryption
00:d9:ce:90:77:90:78:77:dc:79:8c:3c:10:de:1b:39:f3:02:
be:d9:96:b8:e3:cd:e5:56:21:fa:34:d3:50:c2:ad:4b:9d:ba:
36:fa:88:b6:42:c1:1a:8d:04:33:55:aa:e2:db:02:94:18:9b:
9b:5b:03:36:91:0d:6f:f4:d4:0b:7d:ad:04:52:04:19:bc:93:
87:56:48:32:eb:0e:f8:70:03:e0:03:b9:30:a7:b9:71:4e:d6:
7d:28:65:6b:d0:45:78:70:6a:e2:a6:f6:d0:00:4a:0f:d9:f7:
e9:aa:e5:78:ea:b9:ed:67:ec:1e:59:4f:f5:01:a7:81:f0:31:
94:f1:24:a5:55:0d:ca:df:27:85:13:88:8e:9a:50:f5:e2:11:
ad:33:fb:9f:af:47:69:13:64:20:ba:c8:cd:bd:9c:82:ad:bb:
c6:33:bc:4b:f4:d0:00:6f:1b:a6:ed:bd:c1:bb:13:db:8b:8a:
47:7f:16:15:f6:8e:97:3a:b6:43:6e:7f:e6:a9:f5:fd:9c:e9:
74:df:29:12:13:97:9d:56:d0:45:88:66:57:78:d2:18:6f:e9:
fe:e6:18:7f:c3:fc:ac:d9:79:09:7e:b1:f1:bd:10:bd:dd:8e:
73:85:6f:ac:05:9e:0f:6f:56:32:1c:8f:dc:fb:8c:a4:54:90:
70:83:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:08:13 2025 by rpki-client