Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3231382e302e302f32342d3234203d3e20323134313535.roa
File: 39312e3231382e302e302f32342d3234203d3e20323134313535.roa (raw, json)
Hash identifier: uve7ssYDTjsXyrWJbTF8P/YBSNGyO3QiLzH06O0oDUs=
Subject key identifier: E6:52:C9:F2:F0:A7:47:00:70:9D:1C:DD:11:1B:88:4F:D6:2C:5A:FA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 255E6190A079B84B1F9F78E1D30A6A10541FA35A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3231382e302e302f32342d3234203d3e20323134313535.roa
Signing time: Mon 13 Jan 2025 14:04:39 +0000
ROA not before: Mon 13 Jan 2025 13:59:39 +0000
ROA not after: Mon 12 Jan 2026 14:04:39 +0000
asID: 214155
IP address blocks: 91.218.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5e:61:90:a0:79:b8:4b:1f:9f:78:e1:d3:0a:6a:10:54:1f:a3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 13 13:59:39 2025 GMT
Not After : Jan 12 14:04:39 2026 GMT
Subject: CN=E652C9F2F0A74700709D1CDD111B884FD62C5AFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:e8:bb:00:a6:19:c2:78:03:b3:1b:84:0b:
17:58:1b:16:e3:41:ae:99:34:5f:7a:2e:1d:ef:40:
c2:2d:32:dc:b4:43:68:f5:33:45:1d:0b:2e:02:e4:
86:f7:52:a6:2d:84:c5:4c:4d:0a:56:7a:e8:9e:f1:
4a:b2:84:5b:09:69:0f:11:a8:94:c5:20:c1:0a:1a:
e0:01:de:51:07:19:86:d9:54:7d:a2:bb:55:8d:22:
ae:1a:02:83:83:25:d5:c8:c1:7e:1e:78:11:2d:ac:
f3:a1:ab:05:0f:e1:18:e1:4c:6c:f2:31:ed:32:40:
9c:35:dd:ab:15:f0:6a:33:4d:3c:cc:a6:fe:db:d4:
bc:2c:29:7c:2f:71:d2:16:98:d0:c4:90:54:f5:10:
62:8d:c5:23:79:e6:5e:43:e1:50:5d:4f:28:07:61:
b6:c8:1f:e4:69:e9:11:a0:52:1a:9c:ea:27:44:22:
cc:27:b2:04:47:0d:dc:ac:8a:ec:64:d7:1b:49:52:
22:57:95:01:6c:59:0d:55:e7:71:53:16:c4:2a:13:
81:77:e4:64:11:ca:84:a4:8f:01:1a:98:13:50:b5:
82:5a:8e:70:34:ea:0e:e3:c9:5a:62:64:2e:51:b6:
9b:4a:56:be:66:59:ee:29:a4:48:56:a1:21:48:81:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:52:C9:F2:F0:A7:47:00:70:9D:1C:DD:11:1B:88:4F:D6:2C:5A:FA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3231382e302e302f32342d3234203d3e20323134313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.0.0/24
Signature Algorithm: sha256WithRSAEncryption
18:35:8d:7a:0b:a8:e8:17:43:c4:c6:ee:de:17:e6:62:ae:8b:
72:ff:b2:c3:96:50:46:2e:eb:c4:45:18:56:71:89:f7:64:7e:
c4:2a:be:a9:a6:88:1d:46:df:32:f9:73:f5:33:9d:72:69:c7:
a3:3f:c9:cc:e2:d9:a4:c9:32:87:a6:f1:24:f0:70:8f:b6:57:
95:fa:27:5c:72:32:72:32:92:5c:83:58:26:60:3a:8d:ad:90:
b9:18:2e:8b:3d:11:a3:aa:d2:21:8c:ad:e8:f6:7e:0e:69:43:
7e:e4:1e:88:8c:ca:b2:e9:29:d0:08:7c:c7:1d:79:80:98:a7:
26:f3:0e:b3:27:fb:af:08:a3:11:75:7e:4b:6c:69:5f:38:74:
89:ae:a3:00:97:74:76:e2:5e:72:b5:18:6f:a3:29:f1:48:d3:
62:c6:cd:36:76:ce:c7:b8:d1:9a:49:87:ea:20:b5:b6:dd:9d:
48:5f:86:99:8a:f1:4f:3e:16:de:26:23:0b:fd:9c:51:51:93:
71:b0:75:ac:4e:b8:48:75:73:e6:d1:8e:97:aa:e6:b4:42:d6:
af:06:46:ad:e3:8a:d8:6a:6c:81:b7:e3:7b:ea:38:f2:4e:0a:
78:a3:fe:a5:8c:8a:4d:50:08:07:5c:6d:58:0c:c8:07:e5:37:
44:df:ab:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:05:51 2025 by rpki-client