Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3235302e37322e302f32312d3332203d3e203531313637.roa
File: 38392e3235302e37322e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: NeHQX2GAtWdK7TNE42zya2eLPD7vZkdHe0fHaacoai8=
Subject key identifier: 8F:64:5C:F6:9F:EC:89:36:FA:C9:F5:49:79:9B:9F:28:5B:8E:C7:43
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2C6B68FAB41E3C30CD7F66B33F6A3471E298B9CE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3235302e37322e302f32312d3332203d3e203531313637.roa
Signing time: Thu 12 Dec 2024 17:17:52 +0000
ROA not before: Thu 12 Dec 2024 17:12:52 +0000
ROA not after: Thu 11 Dec 2025 17:17:52 +0000
asID: 51167
IP address blocks: 89.250.72.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:6b:68:fa:b4:1e:3c:30:cd:7f:66:b3:3f:6a:34:71:e2:98:b9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 12 17:12:52 2024 GMT
Not After : Dec 11 17:17:52 2025 GMT
Subject: CN=8F645CF69FEC8936FAC9F549799B9F285B8EC743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dd:94:ec:55:60:74:04:9e:96:29:74:6f:b9:
f2:b5:9d:1b:82:6d:62:51:ad:3c:70:a3:f1:ca:4e:
30:ed:52:f6:61:a5:af:65:c7:e4:b9:c8:1b:6c:86:
2d:9e:e3:0e:38:53:f2:24:d6:9c:cb:48:fd:f4:40:
19:4c:62:79:b7:3a:30:fe:b5:4c:74:84:b5:a5:33:
6b:66:aa:0d:a2:d0:65:67:8b:b3:a3:0b:87:17:96:
d6:b3:42:56:62:b3:2d:fc:51:0b:b5:c2:7c:f5:33:
51:6b:5f:d0:71:e7:84:68:ee:9f:e7:74:bf:34:6b:
9c:4c:b1:63:55:60:dc:94:6f:20:bc:0c:67:0d:47:
50:c1:b2:68:45:e4:08:98:02:af:9b:61:e3:23:c8:
0a:ca:36:bd:00:af:24:f4:5a:10:cf:50:c1:fe:19:
dc:e0:db:a7:4b:01:39:b9:95:73:3a:07:75:f7:50:
bc:ab:c1:90:bb:6f:4e:b6:3c:1b:7b:49:e8:ee:8c:
e3:b1:29:71:c9:da:f0:60:41:ac:78:90:27:50:28:
0f:c7:43:f6:2d:34:08:15:ad:ff:68:e8:77:5f:fb:
a4:bd:51:d2:70:37:88:44:e8:fc:b7:2c:5e:58:63:
e9:13:1e:81:27:61:42:93:d8:81:f9:36:40:20:7f:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:64:5C:F6:9F:EC:89:36:FA:C9:F5:49:79:9B:9F:28:5B:8E:C7:43
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3235302e37322e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.250.72.0/21
Signature Algorithm: sha256WithRSAEncryption
88:aa:10:dd:29:be:7c:c3:d7:58:b2:b8:62:8a:8e:83:72:62:
6c:4c:df:c3:22:40:84:42:1d:d7:e8:a0:9a:97:77:34:ba:25:
1e:82:d7:31:7d:72:2c:ed:20:5f:5d:37:06:92:8a:37:41:06:
d1:10:18:47:f1:e3:af:fd:36:24:08:37:92:43:81:3d:42:c8:
cf:2e:56:b0:2e:a8:eb:80:f4:a0:95:fa:27:8a:cd:46:a3:e1:
3d:59:2c:61:ed:3e:94:9b:4f:a5:c2:eb:72:5a:fc:6c:ab:e0:
5a:88:5b:2a:27:f0:ac:c4:30:aa:60:43:1b:46:3e:30:7c:76:
71:e4:04:82:5e:10:93:6d:cc:48:73:e1:cb:59:13:83:eb:b4:
ef:3e:76:4e:46:76:27:e1:6e:53:e1:3f:71:95:77:5c:c5:f0:
de:0f:c6:91:52:c8:fc:b1:07:28:31:5b:c7:77:4f:1d:a8:4a:
58:bb:fd:1e:1e:cd:14:bb:84:07:52:ee:2e:3d:d7:0e:0a:30:
83:c8:5b:8c:90:9d:cf:2a:a7:bd:ae:96:94:0b:e3:13:41:d9:
13:65:91:43:a9:b7:8e:76:d3:f4:be:db:19:30:e8:d3:7e:d3:
bd:80:5a:4f:91:5d:c9:82:1a:e6:40:bc:d1:a8:42:cc:97:ff:
9c:e1:69:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:16:31 2025 by rpki-client