Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e34362e382e302f32342d3234203d3e20323037313337.roa
File: 38392e34362e382e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: qZYhVRxUTkRBts2OirYTa22mNNVBGfNMkkTsqwADaVM=
Subject key identifier: 4F:90:BA:69:09:B8:BA:A7:C7:87:09:5D:F4:AC:77:4E:47:29:13:E4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5F0DEC954F8911911887FA848B66B179236D3843
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e34362e382e302f32342d3234203d3e20323037313337.roa
Signing time: Thu 16 Jan 2025 10:05:36 +0000
ROA not before: Thu 16 Jan 2025 10:00:36 +0000
ROA not after: Thu 15 Jan 2026 10:05:36 +0000
asID: 207137
IP address blocks: 89.46.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:0d:ec:95:4f:89:11:91:18:87:fa:84:8b:66:b1:79:23:6d:38:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 16 10:00:36 2025 GMT
Not After : Jan 15 10:05:36 2026 GMT
Subject: CN=4F90BA6909B8BAA7C787095DF4AC774E472913E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:37:21:75:a2:53:a7:c9:db:b9:f1:58:f6:c4:
4b:ac:6e:59:ee:f4:2b:83:b7:1c:39:46:47:18:eb:
75:b8:69:49:20:0d:30:0d:94:a5:e9:2f:2c:d0:92:
64:3c:04:fc:60:14:36:75:f4:f2:d8:58:74:d9:b3:
99:8a:96:43:2d:b0:17:fc:61:5f:60:87:e0:84:4a:
0d:c6:aa:ce:cb:04:09:42:77:4c:01:5d:be:88:90:
b9:2e:43:42:e7:76:ae:5e:ad:b8:b8:c7:86:ce:3f:
e7:d0:de:c3:f5:ad:cf:2d:fb:ec:cf:c0:fc:88:22:
e7:14:7d:c9:63:8d:c6:36:31:e0:c8:fd:da:2c:37:
95:56:16:bc:19:75:f8:3e:82:fa:ca:86:67:12:ca:
e7:0b:6a:7c:91:db:25:ed:44:ac:e5:ea:c2:f8:3f:
22:d9:9d:66:d0:cf:08:e4:ec:7e:3f:14:17:3c:f5:
49:ef:b7:2b:9c:9e:ac:fc:c7:04:11:df:e6:08:98:
e7:35:b7:bd:db:81:fc:1a:0f:92:a3:a4:a3:5e:22:
86:c0:12:6b:b8:ef:f8:e9:c2:db:2d:e6:2e:0f:28:
50:06:2b:b3:db:6b:bc:9a:ae:11:17:f3:7f:01:76:
14:8d:76:20:56:d4:ac:a3:b0:b2:fe:00:51:d3:7b:
67:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:90:BA:69:09:B8:BA:A7:C7:87:09:5D:F4:AC:77:4E:47:29:13:E4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e34362e382e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.8.0/24
Signature Algorithm: sha256WithRSAEncryption
06:07:de:9b:eb:73:af:49:66:ad:cb:7d:de:17:53:58:52:27:
04:11:c9:11:8b:60:20:8a:07:4d:12:cb:83:6a:d7:34:39:d7:
dd:d6:b7:03:86:a1:fb:84:35:d9:15:33:21:4e:8e:3d:50:26:
ab:62:72:56:0f:95:99:de:fc:e0:df:89:c3:dd:a5:df:00:93:
16:2d:dc:7a:b4:94:a4:ac:89:81:2d:32:92:8d:22:3f:4a:cc:
6f:e7:48:ab:4f:bd:4a:91:a8:1f:2a:db:84:64:c3:e9:cb:71:
6e:29:b8:10:69:e3:15:c5:18:e7:4d:7e:2c:3e:54:b1:33:51:
34:a1:16:ec:ed:63:fe:33:87:d5:71:55:a6:9b:51:4b:fa:e9:
cc:86:5f:f6:0a:a8:cf:d6:87:bf:f6:4c:8a:22:51:05:ce:e7:
f5:b4:a1:23:3f:32:48:60:fa:0d:d7:99:be:6e:c1:79:31:96:
fe:04:f1:4c:53:2a:35:81:30:ac:e1:a0:6d:73:ec:27:a8:89:
1a:87:7d:bb:ff:6a:0d:dd:0f:da:09:23:ed:3b:1f:98:30:02:
cf:8b:06:de:92:f2:94:cc:11:aa:dd:02:09:63:82:67:81:47:
e6:89:ac:b6:01:88:1d:db:a8:ab:a6:19:65:7e:69:8f:15:b0:
a3:3d:57:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:05:56 2025 by rpki-client