Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134392e302f32342d3234203d3e203633343733.roa
File: 38322e3138302e3134392e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: CghJjeELlCLjZyc5wNY2/dOq1j5FpQ3F4N+qiTszTSE=
Subject key identifier: 17:6F:ED:58:E1:55:58:A1:D9:35:E0:39:7A:60:09:33:63:D4:1D:E9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3891500A605F5F9B66B45E9EECC73A0633B5B902
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134392e302f32342d3234203d3e203633343733.roa
Signing time: Sat 11 Jan 2025 20:44:44 +0000
ROA not before: Sat 11 Jan 2025 20:39:44 +0000
ROA not after: Sat 10 Jan 2026 20:44:44 +0000
asID: 63473
IP address blocks: 82.180.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:91:50:0a:60:5f:5f:9b:66:b4:5e:9e:ec:c7:3a:06:33:b5:b9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 11 20:39:44 2025 GMT
Not After : Jan 10 20:44:44 2026 GMT
Subject: CN=176FED58E15558A1D935E0397A60093363D41DE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:fa:ff:e7:15:a2:47:bf:76:fb:bc:05:db:
b1:05:c3:6d:73:a0:15:04:f5:78:69:a3:1f:11:09:
7d:82:e5:11:ec:23:ab:8a:b4:84:05:98:82:5c:5d:
a6:d4:fc:ca:2a:94:d5:15:94:81:46:dd:e0:86:d5:
c3:7f:8b:eb:05:5d:89:3a:1f:57:c4:43:25:a0:0b:
e7:a2:ff:c1:92:a0:01:fd:50:0c:87:fa:4e:6f:37:
31:76:83:3e:4f:7a:fc:41:50:84:06:31:45:0e:b1:
73:b7:42:ae:17:4d:2e:67:1d:90:bb:ce:e8:46:31:
47:8f:d7:68:b5:ed:fe:71:e4:b2:98:12:3c:4a:e5:
86:43:82:11:a1:68:37:d7:4f:bf:d3:77:95:7f:ad:
5a:69:7b:5c:3e:94:28:de:db:43:60:5a:24:3b:0d:
bf:84:13:1a:d2:64:99:05:e1:77:19:dd:01:00:12:
24:34:39:9b:3f:e2:5f:f1:d1:87:9a:60:c7:56:a5:
54:17:cd:4e:6d:ef:07:fe:86:5b:f2:20:c6:ea:c7:
25:b3:69:3d:23:c5:11:7e:a8:72:de:b6:80:30:70:
2f:bf:4f:eb:29:ff:1e:78:91:2d:cf:68:db:9e:83:
40:54:ec:c2:04:11:09:0a:aa:27:85:97:89:6e:95:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6F:ED:58:E1:55:58:A1:D9:35:E0:39:7A:60:09:33:63:D4:1D:E9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134392e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.149.0/24
Signature Algorithm: sha256WithRSAEncryption
75:23:e0:1d:06:b1:a4:7f:1c:96:ce:6f:fa:30:c5:22:5d:a5:
ad:3e:dc:ce:cd:35:e9:da:b5:8f:99:88:65:a0:14:7e:59:b7:
fa:fd:c0:52:31:d9:69:98:1d:1a:fd:29:59:33:9c:ef:a7:ff:
d2:a3:33:f8:ef:55:8e:9e:78:03:52:16:3a:75:c2:e9:e1:87:
d2:b4:a6:b1:b6:cb:d7:bb:a9:ac:04:db:b6:c3:82:fd:e9:50:
b3:05:07:b0:eb:b0:23:27:0e:b5:d0:01:f3:3d:53:65:58:0c:
6b:f4:0e:8b:83:68:88:d4:ad:bb:6b:f2:c9:12:27:59:02:41:
6d:d7:e9:cb:7f:bb:0c:4e:86:64:af:b6:87:ee:58:6c:65:cd:
30:8e:a1:61:0c:6e:db:1b:da:98:92:6b:55:2d:0a:a1:85:5c:
70:29:a1:7f:16:ed:01:3a:71:e6:0c:46:5e:7f:54:c9:f6:5d:
06:5a:99:56:d2:4c:96:9d:4e:4a:48:07:a2:da:d5:2d:9d:a0:
dc:cc:27:f5:4c:8b:2d:0c:c2:3e:f5:f7:87:59:4e:1b:2f:78:
9a:fb:2b:4b:db:d4:10:49:5e:0b:50:cc:dc:92:11:48:e8:c1:
50:97:63:76:e7:6f:44:1d:bf:6d:41:8c:e4:4e:81:18:1e:8e:
0c:19:a6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:23:45 2025 by rpki-client