Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e392e302f32342d3332203d3e20313336373837.roa
File: 38362e34382e392e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: co4ynoYXcPnvOWNQ5AM1NZ3VejoSs8vuOKqXVduGTBA=
Subject key identifier: C8:65:A6:0C:33:CA:67:0E:DD:64:E4:19:0B:50:FD:79:ED:4E:1E:11
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4341691C33D63A1ED1AAF1F2214D38BBB8E75C70
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e392e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:45:29 +0000
ROA not before: Mon 27 Jan 2025 09:40:29 +0000
ROA not after: Mon 26 Jan 2026 09:45:29 +0000
asID: 136787
IP address blocks: 86.48.9.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:41:69:1c:33:d6:3a:1e:d1:aa:f1:f2:21:4d:38:bb:b8:e7:5c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:29 2025 GMT
Not After : Jan 26 09:45:29 2026 GMT
Subject: CN=C865A60C33CA670EDD64E4190B50FD79ED4E1E11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:b5:a2:e1:ef:5f:c2:7b:dd:fa:cb:2e:7d:
40:63:92:89:9e:a8:f2:3b:c9:9d:70:94:8f:7b:95:
7e:9b:45:9b:ab:53:b1:b3:63:ab:61:b7:9b:57:11:
8c:53:da:b0:1f:33:14:9b:a9:92:96:d1:dd:e3:60:
2d:6f:be:4c:18:41:d1:3f:01:ed:0f:be:0a:1b:97:
54:85:2b:27:ce:24:a1:ec:67:2e:b5:a6:81:8e:80:
1a:de:49:b6:c8:a7:e2:d1:97:62:c6:98:85:9c:25:
9d:8c:ca:06:e0:11:68:5f:e2:56:ba:5a:c7:e8:ee:
ba:67:3d:66:eb:4d:69:c1:2d:94:38:c9:46:d8:70:
b3:82:a8:22:8c:2a:47:15:9a:0a:a2:f9:6f:5f:e3:
3d:82:8f:99:9e:6d:51:8f:18:0c:93:c7:30:ad:9f:
14:85:06:d8:c0:d2:8e:c4:fd:46:31:a5:d2:22:73:
47:22:6e:22:59:f2:65:87:92:f9:ee:04:b0:08:e8:
e0:68:2e:e1:6b:f3:4d:50:14:ea:a2:04:20:bb:f0:
66:db:6e:16:d7:10:b2:4e:6d:0f:c4:23:5a:52:66:
c1:e9:fe:30:37:3a:a2:58:e1:b3:71:ef:98:1a:a9:
cb:ea:25:9e:95:19:46:08:4d:b5:08:5e:9e:d4:3a:
b7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:65:A6:0C:33:CA:67:0E:DD:64:E4:19:0B:50:FD:79:ED:4E:1E:11
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e392e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.48.9.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:22:3d:5b:91:d0:8e:2b:54:8e:e3:19:f0:9a:e6:6d:51:45:
ae:30:d0:33:64:08:61:e5:5b:47:1f:b9:28:b2:e8:09:19:7f:
d2:fd:ac:c5:2d:ad:6f:a7:62:f7:76:ef:37:b3:85:a9:0d:0b:
61:0e:ba:7d:fa:ec:9f:a4:81:8d:2c:a1:db:35:b0:99:fb:77:
da:61:9b:95:28:31:a5:05:e0:94:16:a2:cb:7a:b2:73:5a:95:
4c:4d:e7:f7:68:e6:7b:05:c8:dd:c3:6f:5a:88:35:4e:b6:92:
90:4f:7e:2f:bc:99:75:bc:78:07:fc:10:b8:5e:7e:30:39:85:
bc:83:0a:90:b7:80:b9:7a:fe:e0:df:7c:77:de:06:fc:2e:12:
81:42:6b:b4:28:6e:81:79:79:5c:98:aa:1f:41:d7:6a:2e:da:
8f:82:be:bc:e3:a2:7a:9d:a8:7b:41:3a:41:91:93:10:98:7d:
ba:95:3d:8e:c8:b2:d3:b7:99:a2:6c:9b:b9:10:96:be:8a:e7:
e3:b6:ba:7f:b2:c8:20:59:32:a2:af:08:f3:b3:3d:c8:f1:e0:
39:f5:a8:73:4c:76:c2:c6:71:85:71:f6:29:04:99:70:f5:d4:
6f:98:b0:1d:22:7f:07:a5:57:7b:d1:9e:00:8f:ec:55:7f:4c:
79:a8:8e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:07:11 2025 by rpki-client