Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37392e302f32342d3234203d3e20313336373837.roa
File: 38322e3139372e37392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 7r4cvvFPE0P/6fskZ2ZTIyzQd8kBCjnE/fJSMZVKVnc=
Subject key identifier: 5B:74:9B:39:16:5A:F7:30:EE:3F:45:B4:1E:DB:5E:6E:98:48:E0:38
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 12FEC0DED5743BDF4262A4B132EEBFA810245F16
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 19:44:37 +0000
ROA not before: Fri 27 Dec 2024 19:39:37 +0000
ROA not after: Fri 26 Dec 2025 19:44:37 +0000
asID: 136787
IP address blocks: 82.197.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:fe:c0:de:d5:74:3b:df:42:62:a4:b1:32:ee:bf:a8:10:24:5f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 27 19:39:37 2024 GMT
Not After : Dec 26 19:44:37 2025 GMT
Subject: CN=5B749B39165AF730EE3F45B41EDB5E6E9848E038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:e5:3b:45:6b:7d:30:d3:ea:d2:94:59:30:
c5:b9:87:c3:f3:f3:20:c8:cd:24:88:eb:a5:33:13:
b2:d3:1b:b8:48:5f:d0:96:65:f8:ba:63:eb:63:72:
77:38:c2:d6:26:6f:04:db:2a:a4:c5:96:a1:76:94:
6c:9d:f9:42:b3:9b:f0:f8:18:4f:7c:b8:b3:20:81:
4e:43:60:4b:c4:f2:8d:73:b8:aa:51:33:d9:cd:9c:
9a:0c:5d:71:83:74:51:b2:9d:98:ae:ca:14:22:53:
61:a2:75:0f:48:0a:3d:87:e0:5c:aa:89:62:75:80:
05:01:23:eb:3d:96:99:68:45:aa:3e:d3:cc:0e:57:
7e:f6:b0:a1:68:3f:9b:c0:44:07:3b:5a:59:c8:c1:
94:e0:d3:48:4d:18:6f:13:61:7f:76:42:91:c9:4b:
16:d3:a5:7e:cf:ea:b2:5a:a5:de:d7:8c:4a:c6:7d:
b6:9a:f3:0c:96:c0:9c:b6:f4:aa:cb:1e:5e:70:7e:
b8:27:64:cd:f5:53:91:7a:1b:fa:7b:3e:15:6d:ba:
39:58:e9:35:9a:94:70:28:73:1f:8b:c6:62:fb:12:
b4:d3:a9:80:d8:3d:2d:dd:a7:af:4f:c2:88:32:80:
34:b6:05:72:3b:6d:e5:bf:9a:6d:f3:13:b0:98:4f:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:74:9B:39:16:5A:F7:30:EE:3F:45:B4:1E:DB:5E:6E:98:48:E0:38
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.79.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:34:8c:89:57:80:72:3e:86:5a:f6:c8:39:35:b9:ca:a2:63:
3c:50:d5:3b:5d:cb:28:5f:bc:6b:f3:e6:b7:cb:92:64:f7:af:
c1:fe:ee:90:50:0b:c4:b2:63:f9:0e:5d:26:1a:bb:47:ef:c0:
5a:b6:fa:9c:da:fe:1b:91:56:0b:9b:9a:1c:09:5e:fc:bb:57:
c0:3d:e2:7c:9f:c7:d9:46:c0:03:03:90:5b:c2:7d:43:97:6c:
3c:bd:fc:c7:ac:e3:10:d2:38:c2:f3:a6:5e:0d:7d:52:8a:c6:
7f:ce:8f:74:10:26:8e:4b:41:34:8c:1f:26:36:50:cf:5d:9b:
19:bc:9e:d3:30:34:23:cf:e1:87:bf:20:06:15:ed:26:81:6d:
7f:e1:45:e3:99:3c:95:86:88:98:87:6d:3a:16:a8:a2:32:40:
eb:be:6a:e5:1e:05:ba:d9:55:86:5f:4b:0c:84:ea:89:ea:ac:
a0:4c:71:ca:62:52:4b:08:11:f2:fe:06:41:f0:d7:b9:e1:90:
48:25:4d:85:f5:06:6a:08:a1:d7:59:be:7c:93:04:a1:76:89:
11:07:c5:54:51:99:05:59:89:74:7f:36:d4:b8:90:79:ff:11:
02:34:94:8d:ea:a3:fb:37:48:59:b2:74:d2:55:32:9d:77:3f:
3e:df:be:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:13:07 2025 by rpki-client