Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36322e302f32342d3234203d3e20323037313337.roa
File: 39332e3131342e36322e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: 5gsBTb+9BbLdzZ3SBCzIFIF08a8BMoy9RRiuMS3BdjQ=
Subject key identifier: 7C:DA:5B:5E:B0:83:1F:9A:74:BF:C0:42:1B:C3:E6:A0:9F:68:DE:9D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4BDC5FDBFFD49589C82C9C77CA6949940D076310
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36322e302f32342d3234203d3e20323037313337.roa
Signing time: Thu 16 Jan 2025 10:05:58 +0000
ROA not before: Thu 16 Jan 2025 10:00:58 +0000
ROA not after: Thu 15 Jan 2026 10:05:58 +0000
asID: 207137
IP address blocks: 93.114.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:dc:5f:db:ff:d4:95:89:c8:2c:9c:77:ca:69:49:94:0d:07:63:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 16 10:00:58 2025 GMT
Not After : Jan 15 10:05:58 2026 GMT
Subject: CN=7CDA5B5EB0831F9A74BFC0421BC3E6A09F68DE9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:b7:76:75:6f:87:67:62:63:b3:d3:15:24:
d6:28:c6:8d:ad:d8:8f:75:00:a8:95:5e:c0:da:94:
97:44:64:9f:1c:5d:49:ce:23:9e:2d:db:e5:2b:58:
ba:ca:d1:09:e9:21:b4:78:c7:35:80:0f:c6:a1:2a:
99:52:63:e2:cb:28:05:d5:e9:f3:0c:db:a8:e9:a0:
8b:42:6d:d9:a5:81:16:98:31:af:df:8f:85:8f:0c:
2c:b7:fa:c6:69:9a:4c:b9:44:2d:8a:1f:af:6e:fa:
0c:76:f7:96:59:72:9e:89:96:87:af:da:f6:e5:a0:
11:f3:4d:4d:20:95:a0:89:db:a1:20:b8:a0:49:ed:
7b:84:1d:87:8c:3d:c0:92:3c:a7:e6:9d:5d:17:de:
aa:e2:f5:80:5d:7a:9c:12:17:43:a8:03:ef:b7:6c:
3f:ba:15:6a:ed:f4:dd:3b:f9:49:42:e2:a9:33:d3:
53:ed:60:7a:d5:04:fb:e5:20:c3:c4:03:8b:11:7e:
8e:dd:8b:f9:a2:34:f5:21:9e:3d:a6:44:65:59:4a:
24:56:4a:7d:72:94:91:16:8e:a8:cd:bd:f2:c1:1b:
b9:08:ed:2c:5e:47:e8:fb:c6:c4:f7:e4:12:dd:d3:
07:97:0c:ce:2a:23:7c:b5:48:13:5e:b1:34:a3:8c:
e6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DA:5B:5E:B0:83:1F:9A:74:BF:C0:42:1B:C3:E6:A0:9F:68:DE:9D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39332e3131342e36322e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:58:cd:e7:dc:47:31:f3:7a:28:52:1f:a1:61:89:9b:ea:6e:
46:df:ef:c9:0b:97:9c:2c:66:33:04:23:56:bb:0b:ad:71:ce:
97:03:0e:dc:7b:e1:31:0c:05:e3:7b:45:0f:a9:08:80:1f:5d:
f6:56:10:f8:a0:2e:0f:c5:db:1c:b3:b4:7d:2c:ee:69:cb:87:
d6:3f:00:fb:10:74:31:de:32:c3:9a:6c:9f:1a:25:0e:31:f6:
dd:90:d3:2c:7d:39:57:17:76:82:9f:ce:aa:6f:ff:31:15:63:
4e:fe:8f:7a:97:31:d8:39:09:41:d8:7a:76:7d:19:35:e1:37:
1b:26:34:18:87:eb:62:ff:0c:c3:51:ab:35:aa:2b:d8:92:b4:
44:60:5d:a2:24:a2:39:ba:a4:b1:9e:fd:3d:7e:88:7f:fc:f8:
26:be:89:22:96:a4:a1:6b:6f:e5:55:55:e4:56:0c:ae:98:51:
5f:9b:6a:0e:ba:ca:f3:e6:3e:28:8a:03:7e:28:7d:7a:aa:5b:
eb:37:b2:a0:12:59:b0:b5:18:21:2f:cb:0f:70:c6:35:64:12:
4b:c0:8a:52:0b:5a:de:58:1d:4b:b6:df:19:4a:07:94:9b:df:
d4:45:68:3b:ba:58:b6:22:ed:82:ab:63:26:32:8a:5f:a5:69:
7c:92:5f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:20 2025 by rpki-client