Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3137362e302f32312d3231203d3e20323036323833.roa
File: 38322e3138302e3137362e302f32312d3231203d3e20323036323833.roa (raw, json)
Hash identifier: /oW447i/bjJCkV7QvTrBdasvoQcIrCgAM9dtUsuMaeg=
Subject key identifier: 71:90:FA:AA:DA:0B:4F:27:79:2B:93:B5:12:84:9E:E0:CC:F7:A6:48
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 02A3AE8B435E6CA890CA29F462F636A926E43F85
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3137362e302f32312d3231203d3e20323036323833.roa
Signing time: Tue 04 Mar 2025 09:45:47 +0000
ROA not before: Tue 04 Mar 2025 09:40:47 +0000
ROA not after: Tue 03 Mar 2026 09:45:47 +0000
asID: 206283
IP address blocks: 82.180.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a3:ae:8b:43:5e:6c:a8:90:ca:29:f4:62:f6:36:a9:26:e4:3f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 4 09:40:47 2025 GMT
Not After : Mar 3 09:45:47 2026 GMT
Subject: CN=7190FAAADA0B4F27792B93B512849EE0CCF7A648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:07:1b:73:a0:3e:c7:f1:b5:98:e7:86:0f:29:
c7:69:0a:9a:bb:d3:9e:1a:b6:fd:2b:aa:a7:ec:11:
95:51:da:37:95:86:c4:8a:3e:e7:67:8c:1a:bd:5c:
07:5b:ee:74:62:08:23:aa:ed:8f:69:b8:31:f9:45:
72:71:5d:93:f5:16:88:48:fe:d6:fc:47:fa:5e:a2:
c8:8c:57:b4:30:62:ac:e6:df:e8:c7:cf:95:8d:05:
53:84:cd:3a:a0:83:41:69:2f:c1:5c:44:85:90:f2:
3c:8a:f3:06:e0:1d:af:32:4b:af:d9:4e:42:e1:20:
d3:ee:50:55:9b:25:f5:07:76:10:b1:e8:2d:c0:0d:
35:0d:d6:97:e9:31:bc:d6:ca:3c:8e:5b:87:50:a7:
02:5e:78:31:62:3e:d3:5f:97:f2:62:75:6c:dd:02:
95:5e:db:80:1b:b0:1f:b9:13:74:85:51:50:d4:df:
f5:15:78:74:e1:3e:6f:5b:11:9a:89:85:74:18:80:
6c:c2:1f:20:56:5e:5e:f1:46:2b:f5:cc:37:b1:74:
8e:cc:f8:ce:e1:cd:a4:5c:24:44:77:51:c4:c6:38:
4c:6a:c0:5d:39:84:1c:23:89:bc:fa:80:7c:82:62:
9c:f1:ca:73:33:63:0e:a9:c3:d7:93:43:d8:a0:48:
14:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:90:FA:AA:DA:0B:4F:27:79:2B:93:B5:12:84:9E:E0:CC:F7:A6:48
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3137362e302f32312d3231203d3e20323036323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.176.0/21
Signature Algorithm: sha256WithRSAEncryption
84:2d:98:1c:4a:1b:91:95:e7:78:f8:e7:2b:20:4b:e5:9f:ad:
04:6e:47:4d:81:f8:1c:f8:0d:cd:dd:71:a5:26:f5:21:94:ee:
69:01:c1:10:5f:85:14:37:32:e4:45:7b:3e:61:a5:69:ab:74:
e9:b4:f6:07:eb:23:2b:b8:5e:03:d8:f7:82:fa:fc:81:03:94:
bc:11:16:3f:e8:3e:18:ab:27:03:56:25:7b:22:88:0a:95:2e:
0e:39:27:6d:5e:bf:8f:91:29:af:77:ab:db:0b:79:23:81:fe:
59:f8:ac:94:46:d0:cc:51:74:26:76:53:4e:7c:5c:1f:aa:b6:
2a:3a:1f:e5:67:43:fa:b1:ba:2b:6e:4a:a8:9b:1a:19:b0:00:
37:0b:6e:75:f7:b0:2f:80:78:00:fd:85:66:31:46:ae:71:42:
41:fe:d2:cf:e7:1d:a8:f1:87:4f:cd:80:91:ed:21:a4:95:21:
f8:fc:cc:00:da:22:90:91:4b:a6:78:46:59:57:24:05:3b:44:
9e:30:35:c1:d7:de:c8:d6:25:00:75:b4:00:49:c5:e6:c2:1c:
2e:64:59:37:b4:47:a2:4a:6d:56:74:80:11:77:98:ad:26:89:
5a:3d:62:53:48:09:50:08:eb:c2:2e:fa:eb:dc:ee:14:ec:26:
16:e0:de:82
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUAqOui0NebKiQyin0YvY2qSbkP4UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAzMDQwOTQwNDdaFw0yNjAzMDMwOTQ1NDdaMDMxMTAvBgNV
BAMTKDcxOTBGQUFBREEwQjRGMjc3OTJCOTNCNTEyODQ5RUUwQ0NGN0E2NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVBxtzoD7H8bWY54YPKcdpCpq7
054atv0rqqfsEZVR2jeVhsSKPudnjBq9XAdb7nRiCCOq7Y9puDH5RXJxXZP1FohI
/tb8R/peosiMV7QwYqzm3+jHz5WNBVOEzTqgg0FpL8FcRIWQ8jyK8wbgHa8yS6/Z
TkLhINPuUFWbJfUHdhCx6C3ADTUN1pfpMbzWyjyOW4dQpwJeeDFiPtNfl/JidWzd
ApVe24AbsB+5E3SFUVDU3/UVeHThPm9bEZqJhXQYgGzCHyBWXl7xRiv1zDexdI7M
+M7hzaRcJER3UcTGOExqwF05hBwjibz6gHyCYpzxynMzYw6pw9eTQ9igSBTvAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUcZD6qtoLTyd5K5O1EoSe4Mz3pkgwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzODMwMmUzMTM3
MzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjMwMzYzMjM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BANStLAwDQYJKoZIhvcNAQELBQADggEBAIQtmBxKG5GV53j45ysgS+WfrQRuR02B
+Bz4Dc3dcaUm9SGU7mkBwRBfhRQ3MuRFez5hpWmrdOm09gfrIyu4XgPY94L6/IED
lLwRFj/oPhirJwNWJXsiiAqVLg45J21ev4+RKa93q9sLeSOB/ln4rJRG0MxRdCZ2
U058XB+qtio6H+VnQ/qxuituSqibGhmwADcLbnX3sC+AeAD9hWYxRq5xQkH+0s/n
Hajxh0/NgJHtIaSVIfj8zADaIpCRS6Z4RllXJAU7RJ4wNcHX3sjWJQB1tABJxebC
HC5kWTe0R6JKbVZ0gBF3mK0miVo9YlNICVAI68Iu+uvc7hTsJhbg3oI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:16 2025 by rpki-client