Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134302e302f32322d3234203d3e203437353833.roa
File: 38322e3138302e3134302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: j0ThHJZuaLQ+iFe+3b+HpmbkawrIlmr7o99tcRFWneI=
Subject key identifier: F0:6F:F0:00:E9:B4:DF:DD:B9:77:EB:C9:63:49:A2:3F:F9:A9:16:96
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6657F408F705C02A9CE4167A298FD12432A10D1A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134302e302f32322d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:17 +0000
ROA not before: Mon 27 Jan 2025 09:40:17 +0000
ROA not after: Mon 26 Jan 2026 09:45:17 +0000
asID: 47583
IP address blocks: 82.180.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:57:f4:08:f7:05:c0:2a:9c:e4:16:7a:29:8f:d1:24:32:a1:0d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:17 2025 GMT
Not After : Jan 26 09:45:17 2026 GMT
Subject: CN=F06FF000E9B4DFDDB977EBC96349A23FF9A91696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b5:df:c2:16:4b:51:0d:9a:27:d5:00:e9:da:
e9:c8:0e:c0:2d:f9:2e:91:46:8f:d5:90:e2:3a:a5:
02:71:53:e7:ce:34:c3:f7:6e:75:fc:7e:df:55:3a:
cd:14:97:c8:19:7d:ea:d4:e2:b3:48:31:82:df:76:
79:f5:0e:a2:65:54:42:8a:61:b6:85:b4:b2:9a:99:
37:bb:a6:fe:0b:70:cb:3d:a9:59:cb:d8:c3:8f:58:
36:18:5e:a5:7e:83:00:36:8f:58:d1:fb:2f:84:97:
66:f7:21:26:94:3a:81:f4:88:1a:09:e5:5a:0d:f5:
80:1d:c3:60:77:28:fd:19:8a:18:ff:6e:78:fa:5d:
02:b1:2f:d6:4e:9d:df:01:11:ab:0b:86:16:41:eb:
d6:bf:48:a7:57:78:1d:25:94:a1:10:76:af:a9:81:
91:6f:eb:0c:b7:35:17:1b:96:dd:b7:6f:22:05:24:
4e:5c:3d:1d:5a:16:87:44:d9:0d:87:c3:2b:0a:d1:
e7:fc:dc:53:65:6a:8f:b4:5b:ff:34:d6:69:d9:72:
75:e5:b4:fd:e2:a7:3b:e8:66:fc:a4:c8:85:52:e0:
9a:f5:45:1d:f1:c6:78:0a:19:a1:cf:34:43:61:22:
28:3b:cf:ea:cd:fc:84:3d:fe:cc:9a:c2:90:86:84:
da:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6F:F0:00:E9:B4:DF:DD:B9:77:EB:C9:63:49:A2:3F:F9:A9:16:96
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.140.0/22
Signature Algorithm: sha256WithRSAEncryption
91:3d:ab:7b:af:fb:ab:9a:6a:bb:19:30:8d:ab:95:c2:3b:85:
99:e2:3f:79:fa:e6:81:71:fc:64:a9:84:e9:f2:74:89:09:36:
63:8f:c7:d7:d4:45:97:33:23:c6:b8:ea:3b:f0:33:d3:26:38:
ed:ed:6c:3b:b7:35:50:94:08:74:d0:40:ac:18:9f:84:17:37:
c3:6c:4a:78:3e:81:79:db:6d:ad:ef:19:26:74:00:cd:06:76:
dd:ac:f8:81:87:3d:e7:57:17:f3:ca:e0:16:ce:c8:6a:c1:dc:
14:67:4d:a2:f9:7a:5e:ac:54:00:9d:cd:00:d2:e7:15:45:0c:
59:96:90:d5:a1:ec:4c:5e:67:f9:82:69:e2:ef:5d:73:3d:d2:
9a:8f:d7:b4:77:11:5a:2b:e7:81:9b:dd:cb:48:10:dd:ff:37:
3e:54:5f:60:b0:95:45:c2:f6:a0:65:a3:ce:a8:8a:32:5a:fa:
f1:37:3f:7b:76:01:3e:61:53:60:86:c3:7f:96:11:f9:3e:c1:
d0:a7:4e:58:96:1e:75:9a:91:77:33:8e:14:68:b9:f9:37:aa:
f5:b7:c4:e8:2d:ec:b5:d0:c8:aa:bb:11:44:15:82:4c:8c:af:
e6:ea:7e:0c:2a:ff:f3:3d:4d:33:b2:71:ee:6b:f1:c3:e4:1f:
51:1a:7e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:20 2025 by rpki-client