Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34392e302f32342d3234203d3e20383334.roa
File: 38352e3230382e34392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: rEqEUIgdNTnhI5+8sh4oMqFCtaB3sBnW2+T1xGpMUpc=
Subject key identifier: FB:57:06:17:96:7D:0C:B8:83:C0:C7:07:BC:18:F9:CB:76:E7:A4:44
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 385C8D2206B7CCA025A312B79C7EB94B463F6F04
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34392e302f32342d3234203d3e20383334.roa
Signing time: Mon 17 Feb 2025 08:45:43 +0000
ROA not before: Mon 17 Feb 2025 08:40:43 +0000
ROA not after: Mon 16 Feb 2026 08:45:43 +0000
asID: 834
IP address blocks: 85.208.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:5c:8d:22:06:b7:cc:a0:25:a3:12:b7:9c:7e:b9:4b:46:3f:6f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 17 08:40:43 2025 GMT
Not After : Feb 16 08:45:43 2026 GMT
Subject: CN=FB570617967D0CB883C0C707BC18F9CB76E7A444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:4d:9c:a1:10:2c:7b:49:73:6f:de:ab:46:
16:8c:36:a4:6e:55:99:69:50:91:4f:80:ab:d5:4a:
20:89:e0:60:31:fc:bc:ea:fd:fa:44:d1:c4:7f:0f:
4a:18:c4:6f:3f:ea:85:84:8f:f0:18:5b:30:09:5d:
54:85:d4:c2:f3:ac:fc:70:0a:a6:fc:29:4f:33:8a:
4c:3a:84:51:1a:81:a6:5a:87:9f:5c:ba:ae:aa:fd:
1e:3e:44:c5:d1:c4:1e:07:11:35:67:83:a7:b7:e1:
ee:34:ed:d9:00:f0:21:4b:13:41:27:45:da:c0:6c:
3f:10:4e:0e:57:ed:45:a9:f5:d2:79:ec:6a:8e:db:
28:df:72:14:3c:0f:c8:a3:c9:c4:19:22:c2:ab:47:
e5:cf:b3:65:14:d3:08:3c:ef:5d:d3:87:b7:1c:dc:
18:e2:1f:dc:de:63:b8:0f:ca:d7:a2:5f:b5:b1:97:
13:dd:3d:47:80:bc:b5:ab:16:5f:c8:c2:a7:6e:3a:
54:50:7f:9d:73:9a:4d:6f:07:b0:f4:d8:b8:4f:c9:
7a:79:2d:08:0e:ad:c9:39:53:8a:3b:46:52:9c:68:
c0:64:ef:ff:8a:d6:92:53:5b:ae:cd:75:a9:81:ab:
cb:8b:6b:42:93:34:3e:40:bb:75:61:2f:d4:89:9b:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:57:06:17:96:7D:0C:B8:83:C0:C7:07:BC:18:F9:CB:76:E7:A4:44
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3230382e34392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.49.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b8:ee:39:a4:dd:8f:f8:fd:b9:32:41:cd:91:3b:a6:97:83:
d8:79:cd:e5:b4:3b:f5:69:27:d3:6f:9d:fa:7a:15:eb:99:68:
95:4b:a3:00:fa:ef:73:41:d4:e2:ec:f1:e3:c6:6f:02:33:37:
2b:70:a7:13:4a:b9:96:25:76:67:7b:54:f3:78:0c:6b:21:9f:
d4:68:74:21:cc:41:aa:40:40:85:12:ff:95:ee:d0:da:9b:11:
98:52:36:ff:36:88:4a:b2:7b:0c:d7:99:8f:eb:22:11:fa:6a:
d4:58:ea:5b:8e:77:8a:e3:9c:d3:b2:62:c9:6c:55:f5:6e:45:
ec:ac:48:b6:77:f5:a1:5d:54:4c:98:d9:80:41:9e:63:f3:5d:
a7:c2:9d:a8:b6:fc:e8:b4:d7:24:1e:47:82:65:6c:38:8a:a9:
6c:d5:2f:17:a6:c0:5d:51:e4:e6:56:a2:a8:55:9c:04:17:96:
96:1d:89:9b:e7:76:4f:98:98:c7:97:83:e6:26:d3:13:23:37:
25:18:5b:db:84:3f:60:a7:32:1a:cf:fe:4a:5a:a3:97:00:ee:
7e:46:7c:1b:ea:7b:93:59:0d:2d:fa:38:9b:4c:dc:7e:18:fb:
27:63:da:1b:b0:06:31:7f:68:69:a8:63:f2:a8:09:c9:d7:0f:
a0:07:42:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:28 2025 by rpki-client