Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e31302e302f32342d3332203d3e20313336373837.roa
File: 39342e3134302e31302e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: pHTPI8VSwP/BjAJk7giN+K4HVThQaPO+ImBjIYQ0kLM=
Subject key identifier: 7E:37:2A:EA:9F:BC:C5:EF:C0:3A:99:BF:11:0A:24:87:45:19:75:22
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2600366C8D83137D291ABC3BDC53B17F98085405
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e31302e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:45:26 +0000
ROA not before: Mon 27 Jan 2025 09:40:26 +0000
ROA not after: Mon 26 Jan 2026 09:45:26 +0000
asID: 136787
IP address blocks: 94.140.10.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:00:36:6c:8d:83:13:7d:29:1a:bc:3b:dc:53:b1:7f:98:08:54:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:26 2025 GMT
Not After : Jan 26 09:45:26 2026 GMT
Subject: CN=7E372AEA9FBCC5EFC03A99BF110A248745197522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a7:b0:72:0f:88:af:50:9b:42:e3:43:29:c2:
95:96:05:16:f4:d9:c3:fc:1b:8d:2e:d7:c9:d1:7e:
4f:04:5e:fe:7d:88:d9:61:09:56:4b:5f:44:70:01:
9f:35:6c:7f:79:58:4f:fe:08:da:d9:12:7e:44:c7:
78:0c:21:d5:1b:ff:e2:be:6c:40:92:f5:ea:7c:f6:
a2:53:6b:66:fb:c2:96:ca:97:bf:af:53:50:fa:54:
d7:43:7c:47:cf:06:88:0a:86:d4:cc:be:68:2e:eb:
af:4e:ec:b9:57:bb:02:f0:44:a8:bd:4e:d4:b1:77:
2a:57:ec:e0:20:9c:4d:34:98:c6:77:3e:62:9a:69:
b5:fc:61:44:02:fe:f4:4d:b4:61:3f:e0:3d:e8:20:
3e:3e:ff:0d:ce:88:9d:f9:02:44:ad:3e:52:fb:07:
83:50:e2:f9:ee:9d:b4:3d:f1:5e:38:a3:1a:9a:9f:
0a:50:bc:c1:34:b7:e8:a6:cf:e7:44:68:b9:b9:43:
32:d3:a8:31:43:53:de:f5:72:af:2c:cc:25:99:0d:
20:0f:d0:c4:f6:f5:da:b5:dd:41:65:1b:49:39:4f:
08:5d:21:ef:24:e3:19:ea:24:90:4d:44:a6:ea:3e:
9f:82:c5:0e:d2:9e:1a:bd:4d:7f:01:f3:c9:73:86:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:37:2A:EA:9F:BC:C5:EF:C0:3A:99:BF:11:0A:24:87:45:19:75:22
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3134302e31302e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.140.10.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:29:72:79:44:88:80:3d:be:07:c7:05:ca:a2:33:d2:56:27:
62:36:6f:1e:5b:ea:d7:c3:58:3a:4d:a0:fd:64:05:95:df:8e:
60:54:44:a8:45:85:65:80:15:a1:22:24:a8:c6:72:85:58:9e:
b4:db:84:45:c6:1f:e2:ad:36:a9:5c:78:1a:47:40:56:bd:50:
70:14:ad:43:10:8f:c3:28:97:a8:d4:f2:67:82:a3:79:91:19:
52:8b:56:c1:8a:2c:6c:d5:93:57:63:ef:8d:67:71:67:4e:3e:
15:72:82:8c:6c:0f:3e:70:c2:91:59:89:6c:fb:4e:04:a7:5d:
63:de:f5:01:21:00:68:bc:08:9d:84:a3:db:8a:15:4b:d2:45:
e0:22:03:2c:14:d5:64:0d:1b:46:3f:f6:c5:7a:f4:c0:02:12:
25:fb:49:b3:46:73:a4:07:b9:62:00:e1:ba:2c:37:62:bf:87:
36:82:86:e5:26:0d:af:ad:b5:a0:0a:3e:bd:b3:1e:8d:8f:7f:
dc:20:33:75:7c:79:c4:6e:0d:07:b8:74:0e:f3:3c:59:4d:ce:
30:bd:18:4b:33:3f:80:25:33:d8:be:62:ba:69:a0:bf:29:f3:
83:23:4a:2f:c0:11:a6:37:b8:9d:9b:47:35:b7:e6:ce:a5:28:
70:b8:79:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:13:45 2025 by rpki-client