Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36312e302f32342d3234203d3e20313336373837.roa
File: 39332e3131342e36312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: sBEJT/IVSaKJ1vuf5UCyZjfP4efS+3LGdM9odp4R/Ic=
Subject key identifier: F4:67:50:25:D1:22:28:4F:48:00:78:06:52:80:CD:FA:3E:01:D2:6F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 051CD4EB7C951F4E6FC536AF48F8A2A82FC23D6A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 24 Jan 2025 13:34:47 +0000
ROA not before: Fri 24 Jan 2025 13:29:47 +0000
ROA not after: Fri 23 Jan 2026 13:34:47 +0000
asID: 136787
IP address blocks: 93.114.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:1c:d4:eb:7c:95:1f:4e:6f:c5:36:af:48:f8:a2:a8:2f:c2:3d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 24 13:29:47 2025 GMT
Not After : Jan 23 13:34:47 2026 GMT
Subject: CN=F4675025D122284F480078065280CDFA3E01D26F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:73:e6:6f:63:78:a4:d9:ee:0a:e7:7d:08:5d:
a3:84:27:a4:fd:b0:00:d8:f6:a7:d3:4b:bb:9d:1a:
e5:1e:b0:49:82:8d:5b:9f:53:94:b1:59:0a:81:9c:
b7:ca:1c:aa:e5:69:bd:66:c0:c0:69:65:c1:39:35:
b4:7d:e6:df:e8:69:fe:cb:15:e4:f0:07:da:84:c7:
09:10:cf:9a:22:ae:a0:e4:dd:19:2b:f3:9c:53:52:
d1:ac:70:f1:bc:59:6a:4d:d6:db:08:38:5d:33:07:
3c:32:de:eb:fa:0a:96:72:5b:8b:72:1f:47:f5:f3:
87:6d:bc:d1:4b:81:67:ea:f0:22:fb:a6:99:2d:32:
8d:10:da:4c:43:ed:90:b1:f2:c4:07:10:46:9a:b4:
5e:8a:a3:83:d5:b1:9c:01:02:8b:11:c6:0e:93:b6:
ef:64:e8:ce:af:c1:a7:35:49:e2:6c:89:05:09:de:
dd:68:c4:4c:eb:4f:86:c6:29:f9:d1:21:7c:ec:f6:
6e:4d:ff:28:9f:82:1c:cb:33:bc:1c:16:6b:d7:6a:
67:3f:16:90:07:94:17:73:02:c0:30:6a:f9:e9:58:
e9:16:8a:45:94:9c:a0:c5:46:f9:f2:b3:8c:de:2c:
b0:ef:97:30:0a:5f:58:fa:53:2f:40:2d:76:d0:91:
26:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:67:50:25:D1:22:28:4F:48:00:78:06:52:80:CD:FA:3E:01:D2:6F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.61.0/24
Signature Algorithm: sha256WithRSAEncryption
76:47:4c:b4:14:90:d2:40:b2:86:24:70:ce:b2:b1:36:0e:8c:
61:2e:49:6c:3e:c7:d2:a3:f6:0e:33:f4:99:f1:4b:ef:c5:4e:
d2:e9:c0:58:4f:fa:2b:88:57:c4:fc:26:98:69:3a:79:1a:7a:
49:90:e6:a7:0e:99:f9:96:39:07:59:fa:e2:f8:8e:b4:23:c4:
fe:2f:70:76:1a:5d:53:32:84:79:92:69:55:87:5b:ba:2f:2c:
a1:41:5e:ff:5e:6a:4d:f6:21:97:86:21:d2:6e:c7:67:f1:c6:
54:e7:1d:9b:dc:5f:bf:d2:ce:3d:d8:97:cd:07:de:66:0c:92:
e8:7e:78:15:78:43:78:11:0c:17:fe:b1:c8:f9:9f:d4:4d:6b:
2c:3a:a8:2b:68:8e:6d:b7:13:ef:82:85:9e:c5:e1:e0:ff:aa:
a2:da:bc:ab:0c:14:49:e3:21:34:7e:ff:c6:ec:b6:49:2e:fb:
04:f4:a0:cc:6c:d9:96:4f:97:30:9a:2d:a3:fd:5c:fb:ba:9b:
e2:df:25:71:1e:d1:3c:4b:eb:57:d9:0c:5b:51:66:c5:8e:80:
3e:40:67:1e:95:0c:27:11:04:27:4b:4c:50:20:cf:59:12:99:
a5:bc:16:15:03:8b:12:e9:41:f2:be:fc:6c:d9:8e:02:79:8c:
bd:55:bf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:29 2025 by rpki-client