Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38332e3232332e3139322e302f32302d3332203d3e203536383736.roa
File: 38332e3232332e3139322e302f32302d3332203d3e203536383736.roa (raw, json)
Hash identifier: 6xCzkR73heaXYh46hagZyeLb86640sjQU1NxqEGhT6A=
Subject key identifier: BE:CC:AA:56:65:AC:F9:AF:1A:99:DB:CB:ED:5D:B2:12:41:18:70:34
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 52172A3AC91C8BADCEC26FAC32D421EF864D37C6
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38332e3232332e3139322e302f32302d3332203d3e203536383736.roa
Signing time: Mon 27 Jan 2025 09:44:57 +0000
ROA not before: Mon 27 Jan 2025 09:39:57 +0000
ROA not after: Mon 26 Jan 2026 09:44:57 +0000
asID: 56876
IP address blocks: 83.223.192.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:17:2a:3a:c9:1c:8b:ad:ce:c2:6f:ac:32:d4:21:ef:86:4d:37:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:39:57 2025 GMT
Not After : Jan 26 09:44:57 2026 GMT
Subject: CN=BECCAA5665ACF9AF1A99DBCBED5DB21241187034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3a:ce:ce:4e:79:b3:c1:fa:cd:b4:9d:85:04:
73:dc:b2:72:08:58:98:bc:92:6f:51:76:45:64:98:
1b:57:65:93:02:28:2d:6c:ae:6d:b1:5d:cd:15:1e:
f6:a0:90:f7:15:ba:0c:dc:e4:18:0a:39:b9:f5:e6:
7b:58:c7:86:5b:28:bf:f2:d9:76:11:37:4b:f3:4a:
15:48:42:cf:f6:46:41:a6:93:56:0b:55:03:3b:05:
4b:cc:63:c7:1b:c1:ae:03:70:73:2b:73:89:47:9f:
56:b7:ae:78:f5:8d:63:f5:19:64:5c:46:b8:95:da:
08:4f:cc:18:08:a8:5d:31:8b:6b:86:77:42:e2:d7:
d1:94:96:20:55:61:7b:ac:9a:c8:db:10:a0:2b:b2:
f2:20:9d:7b:34:5b:3d:8f:26:67:71:8f:22:fa:35:
f4:8c:7b:24:3b:27:22:d5:67:87:ea:b0:fd:5a:46:
a3:35:b2:57:5f:51:c3:fe:f8:e0:be:d0:d2:12:56:
c7:aa:ab:0c:f3:8a:1d:7c:61:c1:42:e8:1b:7f:28:
17:31:51:2e:a0:ec:4c:86:95:0d:f1:f9:84:57:4a:
bd:d3:c5:c6:56:88:73:b2:c0:4d:d9:62:8e:9b:39:
b9:cf:80:c2:c7:aa:f6:2c:d9:b2:25:62:af:98:0f:
99:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CC:AA:56:65:AC:F9:AF:1A:99:DB:CB:ED:5D:B2:12:41:18:70:34
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38332e3232332e3139322e302f32302d3332203d3e203536383736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.223.192.0/20
Signature Algorithm: sha256WithRSAEncryption
51:85:67:d4:d3:6c:dc:d0:1c:e8:c0:12:a9:d5:0b:5b:d6:74:
cb:83:81:05:5e:e0:a6:d8:a8:a6:eb:c2:45:69:f6:b1:6b:94:
08:9f:60:16:f7:27:2a:68:ca:05:b9:1f:36:fe:11:b6:28:fb:
9b:07:44:77:47:b2:2b:4f:f5:23:7a:f0:17:71:e9:f5:eb:a9:
6c:a9:cc:65:4d:3f:c7:74:39:ee:1d:53:7e:23:50:af:70:29:
ba:14:b3:24:21:8b:e5:97:08:2c:f8:38:f2:1f:bb:14:b0:9d:
31:6d:1e:5f:00:c3:7f:1d:a6:38:f3:87:5a:21:60:73:2e:d6:
2b:8f:43:22:70:76:e0:22:f5:69:2d:96:2f:83:8b:d7:b9:24:
13:ce:2f:53:4f:28:54:9d:d0:8c:6e:6c:52:d1:af:5e:46:0d:
34:db:ce:5c:4f:e4:51:98:6d:01:91:b6:bf:2f:14:c7:ac:9f:
0d:2d:b0:b8:6a:2d:ac:70:36:91:52:fc:a6:27:8b:7b:1f:80:
c3:11:53:77:15:99:3b:ed:d0:99:65:1b:35:05:dc:c1:de:24:
13:83:21:87:f1:9e:05:e3:62:0b:ca:5c:06:eb:80:09:dd:09:
bc:e5:57:3e:84:70:c6:8e:5d:0a:25:f5:fc:18:e2:f4:dd:89:
66:5e:1e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:00:44 2025 by rpki-client