Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3231382e312e302f32342d3234203d3e20323134313535.roa
File: 39312e3231382e312e302f32342d3234203d3e20323134313535.roa (raw, json)
Hash identifier: /i7K2KeepajNIxkn7ZBVaMG+t4T867UUd2+KOFx3LeY=
Subject key identifier: 11:11:6E:53:46:BD:9C:80:46:5F:03:65:DB:96:1E:CD:64:D7:FA:7E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 131B509B857E6B98564D1FC58F59D7EBCE24E85B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3231382e312e302f32342d3234203d3e20323134313535.roa
Signing time: Mon 13 Jan 2025 14:05:02 +0000
ROA not before: Mon 13 Jan 2025 14:00:02 +0000
ROA not after: Mon 12 Jan 2026 14:05:02 +0000
asID: 214155
IP address blocks: 91.218.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:1b:50:9b:85:7e:6b:98:56:4d:1f:c5:8f:59:d7:eb:ce:24:e8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 13 14:00:02 2025 GMT
Not After : Jan 12 14:05:02 2026 GMT
Subject: CN=11116E5346BD9C80465F0365DB961ECD64D7FA7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:0b:61:cf:5c:79:70:2b:ce:57:a3:af:bb:
59:02:8b:88:78:39:fd:54:3a:f3:56:cd:3c:35:e5:
8b:8c:2e:f8:88:63:26:0d:8f:3d:a7:55:a9:13:64:
3d:8e:04:de:d6:53:9b:93:6c:56:bc:cd:ed:6f:e3:
08:75:12:3f:68:59:82:a5:94:f2:f6:5e:a4:3d:bb:
96:0e:52:24:39:b1:d4:5a:d2:07:e9:5f:0c:49:bd:
83:1f:de:2f:ec:32:91:17:c5:91:7a:fd:7d:47:11:
9f:e0:40:45:7a:eb:34:7a:41:62:bd:3c:ae:38:d3:
d2:6f:36:1a:dd:05:77:66:1b:81:a0:f8:ac:ce:d2:
97:13:8b:9e:d1:35:58:8d:4f:bf:d1:14:00:58:14:
58:33:76:1a:25:a5:7d:c6:f5:ef:9e:c0:7e:88:d6:
61:a3:2b:8a:a4:78:e6:e3:d8:c5:f0:46:ca:7a:18:
59:0f:66:34:e0:bd:1d:a6:b4:ff:7e:fe:4e:4a:77:
41:2e:84:39:a5:56:ee:96:e1:f7:b5:22:03:be:6a:
b8:9b:04:5a:7b:ca:2f:33:f0:25:b1:e6:53:65:b4:
57:fc:2e:d3:ab:f2:b9:22:08:84:ba:96:57:15:6c:
a9:59:c0:7c:9c:01:83:75:28:96:f1:d7:64:77:3a:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:11:6E:53:46:BD:9C:80:46:5F:03:65:DB:96:1E:CD:64:D7:FA:7E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3231382e312e302f32342d3234203d3e20323134313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.1.0/24
Signature Algorithm: sha256WithRSAEncryption
86:2f:94:85:c1:bb:6f:18:7e:7e:45:08:3d:06:1e:a4:0b:67:
4a:78:90:41:a7:8f:1f:5a:0a:7e:64:30:df:d4:58:40:b5:fb:
aa:97:71:b0:40:1b:f4:0d:f1:3b:66:db:5b:9d:24:6a:11:cd:
2a:eb:0c:a3:1b:c7:d6:ad:ff:55:da:6e:d1:14:8f:f6:b6:f6:
fb:d5:2c:1d:6b:db:77:3d:ab:82:c7:18:35:6e:c1:51:49:aa:
3e:5d:52:95:da:c2:2d:c0:fb:a7:d2:c7:39:02:f7:6c:4b:56:
93:9c:7e:49:bf:02:32:da:29:d3:df:83:f0:d7:7c:91:8e:00:
ec:76:60:06:80:48:8c:70:27:fd:29:c1:ae:f2:84:0d:8c:9a:
59:f5:92:e9:5d:81:b2:51:a1:de:ee:98:2e:59:1d:66:30:a4:
46:3f:05:1d:ff:0c:cc:bd:de:c9:0a:64:1c:44:7e:37:b0:47:
fa:da:bf:ab:41:96:b8:78:78:a0:45:e7:71:02:15:88:98:c7:
9e:1e:9c:eb:76:13:8b:ea:1e:50:09:2f:73:4e:8e:f0:f3:a3:
1b:6c:52:46:35:00:b1:e4:17:11:f8:17:e6:ff:cc:88:38:eb:
c6:17:a5:81:9d:c0:6b:a3:26:e4:b5:38:8d:54:e6:f8:d7:e1:
a3:ea:cd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:37 2025 by rpki-client