Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136302e302f32322d3234203d3e203437353833.roa
File: 38322e3138302e3136302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: ksXTlxrj83zkxiKklSuInKOgupP793TZGuYl4WDsIo4=
Subject key identifier: 74:D9:F9:A4:70:C3:95:E9:B3:E6:F5:11:E8:DC:F3:95:B5:7F:C5:79
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 15F06E962A7E03F3347029FD9AF1287A54BF5301
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136302e302f32322d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:21 +0000
ROA not before: Mon 27 Jan 2025 09:40:21 +0000
ROA not after: Mon 26 Jan 2026 09:45:21 +0000
asID: 47583
IP address blocks: 82.180.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f0:6e:96:2a:7e:03:f3:34:70:29:fd:9a:f1:28:7a:54:bf:53:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:21 2025 GMT
Not After : Jan 26 09:45:21 2026 GMT
Subject: CN=74D9F9A470C395E9B3E6F511E8DCF395B57FC579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:f1:e9:72:3b:4c:23:eb:f5:d3:07:be:90:
06:47:58:1b:0e:a8:7f:4f:62:b3:2a:7d:7f:a7:53:
d8:f0:05:fe:4d:fe:d6:a7:ed:0b:8a:94:4c:df:d3:
da:0f:a6:7a:39:26:3f:89:f4:e4:ec:0d:0a:8c:de:
a5:ba:6e:db:5b:25:82:5e:c6:b5:d0:df:89:2f:e6:
9f:e7:a9:4b:03:36:76:b1:e6:45:35:ed:41:95:95:
0e:b3:ab:f1:bd:9f:db:f0:e5:6f:95:74:a0:13:e1:
f8:95:83:9a:c8:9b:9e:d2:2a:e9:4e:7f:c0:a7:61:
ba:6f:dd:45:dd:74:86:e5:22:95:9f:c4:97:c9:e8:
dc:53:01:01:71:31:73:e2:fa:71:c6:cd:a4:21:e9:
13:d6:aa:64:58:fe:81:b4:25:7b:bd:98:26:78:cd:
62:59:0a:61:c3:98:09:b5:ab:5e:7e:0b:38:54:08:
1b:b6:2b:3a:ac:71:ac:a8:43:be:1d:f9:ac:be:10:
d9:24:a8:bd:53:c3:6f:5c:4e:c9:a5:bc:8c:c2:e5:
99:5a:01:0a:9b:59:9e:45:13:b0:88:27:7f:9f:90:
28:81:5b:d5:d0:9e:95:be:91:7e:85:c7:bf:af:e1:
9c:bf:5d:5d:62:c2:16:15:e0:3a:1c:52:7b:9c:16:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D9:F9:A4:70:C3:95:E9:B3:E6:F5:11:E8:DC:F3:95:B5:7F:C5:79
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.160.0/22
Signature Algorithm: sha256WithRSAEncryption
68:d8:c0:12:42:45:e4:19:24:66:dc:8c:f0:8e:d1:c8:81:64:
01:03:23:0a:da:96:91:ba:ff:cf:7c:96:20:a0:7b:80:ff:6f:
fd:9e:3b:aa:68:7d:32:08:f3:7a:0c:f7:80:14:6d:79:61:0c:
a8:3a:15:aa:c0:2a:61:e3:02:93:2f:33:e5:ed:00:5e:4b:59:
06:c2:e6:1d:d3:db:ba:a1:db:da:02:8c:1d:3e:a0:d0:9b:95:
b4:b2:96:b9:ff:3e:f8:03:13:48:54:a7:c3:38:a9:2d:7c:a8:
ab:d7:e9:1c:c5:13:b0:a6:da:30:2b:57:55:9b:85:1d:ab:76:
d0:0d:0c:82:2e:c3:4b:ed:2c:c9:4a:38:7c:22:e1:d2:b1:b4:
ae:ca:a8:54:c7:2e:eb:31:8b:21:70:63:7c:04:18:dc:a9:00:
66:aa:13:45:2e:90:3e:d3:bc:20:81:41:c7:1c:53:9c:f5:3d:
c8:f2:76:bb:b0:19:f7:84:3c:21:aa:7e:74:69:e8:6c:98:0c:
1c:ba:42:e1:df:ea:2e:5a:1f:d6:56:c4:e6:64:1b:86:f1:a3:
6b:63:85:b2:6c:8b:69:7c:2a:e8:91:80:ad:08:ee:3a:32:d8:
59:86:b8:6d:e2:38:59:1e:a3:a1:6f:2d:64:b0:1c:67:9f:4e:
3d:27:3d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:48 2025 by rpki-client