Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3233302e302f32332d3332203d3e203430303231.roa
File: 38352e3233392e3233302e302f32332d3332203d3e203430303231.roa (raw, json)
Hash identifier: lYKGpNKApyApB0L/nN0oE4WhCxhSVJWrXTJhJrPzWW0=
Subject key identifier: 24:30:F9:D7:C7:8C:03:D4:24:B1:1A:9C:C6:C9:2E:7B:5B:A2:94:14
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1490FA01D0D93D80C4CD65E7A25BEABC2906A3EF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3233302e302f32332d3332203d3e203430303231.roa
Signing time: Mon 27 Jan 2025 09:45:29 +0000
ROA not before: Mon 27 Jan 2025 09:40:29 +0000
ROA not after: Mon 26 Jan 2026 09:45:29 +0000
asID: 40021
IP address blocks: 85.239.230.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:90:fa:01:d0:d9:3d:80:c4:cd:65:e7:a2:5b:ea:bc:29:06:a3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:29 2025 GMT
Not After : Jan 26 09:45:29 2026 GMT
Subject: CN=2430F9D7C78C03D424B11A9CC6C92E7B5BA29414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:17:bc:1e:aa:6b:a7:1a:ad:8a:89:d2:38:
92:c6:bb:b0:4f:7d:2c:cd:31:64:74:42:7c:94:42:
db:e9:a3:8a:eb:60:4e:3b:82:0c:1d:6c:0c:cf:07:
2a:33:2f:b3:46:ab:ea:71:7f:c8:34:79:62:d3:69:
c9:ec:e4:44:39:d3:d9:cf:a7:7b:11:09:35:70:7d:
49:2f:14:cc:d4:a8:15:a9:91:79:4b:0d:c9:08:5b:
1b:83:f3:48:0b:cd:0b:a8:ad:1c:6b:fd:3d:f5:ea:
65:fe:76:87:0f:d9:4f:78:f8:06:ed:b8:f8:c6:b5:
bf:ef:37:55:ce:51:17:9a:5c:ed:ee:45:15:a6:ba:
c8:f2:49:f0:d6:53:33:f1:44:34:fc:67:72:8d:d0:
f8:de:dd:28:e1:c3:1c:f2:f5:0f:87:7e:ad:4b:d3:
69:75:cb:9f:06:ee:5c:9c:28:22:da:72:b7:32:94:
80:65:9a:f8:c0:77:c5:c2:c1:d6:a6:09:86:12:71:
5b:dd:59:8d:28:ba:22:9a:86:66:6d:b5:18:2c:0c:
f4:c7:67:41:bb:29:42:62:47:6d:28:bb:76:ea:3f:
8d:0b:be:d1:bc:96:82:44:63:3b:89:0c:a8:db:cc:
b8:b7:d4:a5:3c:4e:37:d3:84:7a:eb:83:1c:02:10:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:30:F9:D7:C7:8C:03:D4:24:B1:1A:9C:C6:C9:2E:7B:5B:A2:94:14
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3233302e302f32332d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.230.0/23
Signature Algorithm: sha256WithRSAEncryption
55:f7:c4:72:51:0a:fb:b5:9b:0e:28:3f:92:ad:06:69:11:eb:
58:43:ed:d7:9b:a5:40:c4:2d:5f:ec:8b:05:d7:bf:92:3e:7b:
77:9d:59:51:0e:4f:73:4e:c9:18:81:47:22:7b:50:98:95:05:
c0:b7:3a:c6:35:16:f5:1f:41:14:da:fe:ce:a3:a1:4f:b6:53:
b4:df:0c:98:f8:ae:0a:9e:9c:21:6a:ce:1a:aa:b0:72:a5:22:
0a:af:d7:2a:85:26:2f:a7:ef:29:53:02:29:79:bc:f3:cb:a2:
0b:3b:05:91:ba:04:14:95:fe:02:f6:ba:73:6c:70:66:28:57:
23:42:18:46:d7:d4:dc:b7:14:85:af:df:cb:95:47:83:0a:46:
83:87:fb:f7:40:cf:7f:78:86:58:96:8c:54:c7:34:87:05:94:
78:a2:ea:06:be:11:c3:40:c3:9c:28:47:65:92:12:5a:c3:d7:
c6:15:d3:0a:34:f6:86:9d:c4:2f:8d:2d:6c:59:f7:54:f7:d9:
2f:48:a6:f9:e8:8a:59:75:16:da:97:12:d5:10:65:0e:f8:02:
2c:d8:37:52:24:57:cf:93:13:93:89:ef:e7:23:06:17:f0:64:
2b:2a:54:04:be:33:d9:d1:21:c8:66:b8:b7:2e:54:70:0a:68:
ef:3b:b0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:27 2025 by rpki-client