Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3231382e332e302f32342d3234203d3e20323134313535.roa
File: 39312e3231382e332e302f32342d3234203d3e20323134313535.roa (raw, json)
Hash identifier: kOyRzmj2uGnJkwehLpo6eFBq4tbYO7ueH4aiepCtA8I=
Subject key identifier: 0F:8E:5E:5A:03:AB:BC:B8:F4:9B:4C:A6:17:DB:A0:D2:71:B6:C3:D4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2109F824DE1825FA86D70E914A1B9EE81C4483A2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3231382e332e302f32342d3234203d3e20323134313535.roa
Signing time: Mon 13 Jan 2025 14:05:31 +0000
ROA not before: Mon 13 Jan 2025 14:00:31 +0000
ROA not after: Mon 12 Jan 2026 14:05:31 +0000
asID: 214155
IP address blocks: 91.218.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:09:f8:24:de:18:25:fa:86:d7:0e:91:4a:1b:9e:e8:1c:44:83:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 13 14:00:31 2025 GMT
Not After : Jan 12 14:05:31 2026 GMT
Subject: CN=0F8E5E5A03ABBCB8F49B4CA617DBA0D271B6C3D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:06:da:3c:0e:c1:b1:3c:33:fb:32:94:74:
f8:44:69:1f:ae:47:d9:3d:0b:10:26:4a:c1:d3:41:
1e:81:d5:f8:a3:4b:3a:29:f7:79:ed:6f:fc:5c:7b:
07:d3:82:d4:10:db:64:6a:45:9c:bb:3a:df:ec:ac:
ac:3b:9b:dc:eb:fc:33:ce:54:85:43:57:39:46:fe:
42:33:46:e6:42:d8:53:8b:42:23:79:7d:35:cc:9c:
08:38:fb:fd:bb:3b:86:40:78:dc:71:d5:af:da:2e:
cf:f5:28:0f:0c:82:fb:1e:d1:55:b6:25:05:fe:4d:
2f:fb:94:53:1e:df:51:a1:61:d5:f5:21:43:9f:3c:
3e:5c:10:45:30:fe:71:ab:b5:ae:b5:11:23:23:99:
bf:2e:fe:84:c9:5b:cf:a7:9a:29:37:06:4a:db:37:
b5:9d:ee:ce:9b:5e:c2:6f:98:9a:5e:cb:af:d9:b4:
06:2c:79:b4:79:c4:e3:ef:78:25:63:44:59:ac:ad:
dc:5f:b7:8e:b2:9d:af:86:5c:12:e4:17:0a:ae:24:
7c:79:26:40:34:86:41:46:57:f7:7b:e5:45:2d:71:
2b:2b:28:0d:28:dd:5d:d3:35:fd:27:70:a9:c0:9a:
65:6f:65:c4:db:5b:6a:a7:07:c2:c0:c8:b6:72:1b:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8E:5E:5A:03:AB:BC:B8:F4:9B:4C:A6:17:DB:A0:D2:71:B6:C3:D4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39312e3231382e332e302f32342d3234203d3e20323134313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.3.0/24
Signature Algorithm: sha256WithRSAEncryption
76:00:93:0d:c0:cf:99:ff:ee:de:63:88:67:52:7e:83:1e:53:
a0:25:d3:df:11:bd:96:48:eb:bb:41:09:e6:69:b5:fc:3c:56:
49:52:40:f6:95:a5:7b:69:e5:74:73:ef:e6:ef:ae:86:cc:0c:
7d:fd:bc:0d:c3:55:e7:45:98:72:88:65:14:98:d7:45:2d:e8:
a4:04:db:9b:07:99:5f:f6:ac:b5:04:29:ba:a0:b0:b0:f5:3d:
24:f0:e0:b5:c8:f3:8b:51:ec:11:aa:c2:c5:a2:6d:3a:d7:55:
4a:5a:02:13:b5:15:d9:83:d4:24:eb:a9:ba:46:7d:36:8f:a9:
1f:99:6d:9d:81:b8:e0:17:01:7c:98:a1:7a:95:06:ae:f0:25:
c8:d8:36:e2:59:31:3c:17:4f:33:88:9c:ea:e8:95:98:22:5f:
76:27:b7:9f:ba:1e:ec:04:de:05:30:98:91:6e:f1:7c:04:a8:
26:66:e6:13:21:1c:ca:be:ab:93:0b:eb:69:ef:a0:18:69:e9:
70:22:f4:f8:38:a4:da:a4:3b:ac:05:84:47:f3:09:3b:c1:ea:
f5:2e:e3:ed:f6:41:d8:e0:fa:ad:6c:cc:e6:27:84:96:79:74:
aa:02:18:8d:88:ec:07:f6:3f:4c:ce:2d:4b:66:c8:4b:10:8f:
0f:5d:d0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:02:54 2025 by rpki-client