Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39322e3131382e34392e302f32342d3234203d3e20313336373837.roa
File: 39322e3131382e34392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Y+rkBEoc7ULz9Tv4pQCtlsHbXIv4XvgpIkRnKgauwIM=
Subject key identifier: BE:88:C9:CF:C5:7D:B8:86:2E:74:ED:C3:62:E5:A3:BD:DC:66:8A:7D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 493107282CA5FA6A2C6EA833175B3B839A82E7A2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39322e3131382e34392e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 01 Feb 2025 22:45:37 +0000
ROA not before: Sat 01 Feb 2025 22:40:37 +0000
ROA not after: Sat 31 Jan 2026 22:45:37 +0000
asID: 136787
IP address blocks: 92.118.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:31:07:28:2c:a5:fa:6a:2c:6e:a8:33:17:5b:3b:83:9a:82:e7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 1 22:40:37 2025 GMT
Not After : Jan 31 22:45:37 2026 GMT
Subject: CN=BE88C9CFC57DB8862E74EDC362E5A3BDDC668A7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:6c:79:a2:cf:97:fd:f7:a9:c6:90:5b:f5:
f8:01:35:b0:74:0f:19:ad:cd:33:75:3b:74:72:1b:
4e:1e:72:31:67:57:27:35:b6:5e:ae:31:75:83:c0:
71:e0:19:92:07:6b:a6:97:94:ba:7a:72:03:36:20:
be:fd:04:90:9e:dc:38:04:4c:a0:bc:24:1b:27:f0:
f2:1c:db:21:21:c6:b4:69:f2:3d:5a:d2:08:5f:28:
a4:41:e8:5b:19:3a:3e:6d:0e:56:b6:a8:fa:95:27:
4e:f8:57:f9:33:16:7a:28:d4:f8:01:f4:81:0c:0d:
f0:5a:8e:0a:df:12:f2:b2:14:db:b0:cc:f8:d9:41:
f2:f7:96:9f:4f:55:6c:4f:db:67:df:e5:4c:27:2f:
fa:5a:04:be:33:7f:59:68:80:7b:f6:7c:b4:3c:86:
2e:3c:79:87:fc:ce:5d:58:32:03:6a:96:47:c9:d5:
f4:cc:bb:02:84:d6:77:8a:a9:47:d8:a2:f0:96:3f:
51:7a:89:97:71:34:71:30:c8:0c:41:b2:4c:c2:2f:
1d:9f:6f:5e:4b:db:ef:3d:d5:df:7d:a4:64:f5:aa:
2d:9d:31:b7:ce:a5:e5:aa:c0:a8:da:5b:06:ac:7a:
57:15:2c:5a:73:a5:a1:69:60:c6:0a:5d:5d:c1:d1:
17:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:88:C9:CF:C5:7D:B8:86:2E:74:ED:C3:62:E5:A3:BD:DC:66:8A:7D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39322e3131382e34392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.49.0/24
Signature Algorithm: sha256WithRSAEncryption
13:29:95:02:d0:fd:b3:b3:bb:17:80:d7:ce:b4:12:2f:b9:6a:
2d:88:08:77:72:79:be:b9:0e:b6:9b:00:9e:53:fe:26:cd:13:
29:f8:7f:16:15:8c:d7:01:4a:1c:c8:ce:12:f8:44:90:7c:cd:
ee:51:1c:60:b1:20:cd:9c:99:4a:8e:79:db:70:cd:b5:72:20:
09:0b:1e:9a:df:1b:60:b7:61:1d:ee:b1:f2:c1:76:73:12:59:
dd:38:19:18:c4:c3:5f:52:e7:7f:52:11:25:91:2b:c8:90:56:
bb:0e:6f:29:d8:09:11:12:c7:f1:94:84:79:50:09:d1:b4:4a:
1c:8f:ab:64:3b:b7:39:ba:79:a3:d5:af:ac:87:02:50:cf:fc:
fa:70:57:29:18:1d:c3:3a:46:92:60:66:65:e7:87:e3:00:b6:
8a:7c:ac:b2:22:7a:98:08:58:58:94:f6:4d:d4:a5:26:97:be:
b1:31:07:9f:44:d2:5e:9b:70:bf:99:1c:f7:e9:2a:d0:bb:21:
59:c4:26:67:b7:6b:93:f2:95:82:d7:93:bd:ba:04:28:04:a8:
f4:2e:66:ce:85:2c:4a:a3:cb:10:df:c3:ec:27:69:82:10:89:
a6:c0:1f:4f:17:0b:f8:b5:e9:50:ae:fe:67:66:5c:14:7d:c7:
22:f0:38:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:26 2025 by rpki-client