Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131332e302f32342d3234203d3e20313336373837.roa
File: 39352e3231342e3131332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: InTG0YlYU18Nq7xwygW4vHx04QW5G7cxrRfeDrW9k+w=
Subject key identifier: 85:32:D8:E1:CC:F4:9D:FC:C8:A5:A3:4C:66:7F:8A:E8:2F:D7:B3:27
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 44E5CE8F8BF45CF6E94E62DBF4E795B6BE7A930F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 19:44:41 +0000
ROA not before: Fri 27 Dec 2024 19:39:41 +0000
ROA not after: Fri 26 Dec 2025 19:44:41 +0000
asID: 136787
IP address blocks: 95.214.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:e5:ce:8f:8b:f4:5c:f6:e9:4e:62:db:f4:e7:95:b6:be:7a:93:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 27 19:39:41 2024 GMT
Not After : Dec 26 19:44:41 2025 GMT
Subject: CN=8532D8E1CCF49DFCC8A5A34C667F8AE82FD7B327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:e0:b6:62:7a:e1:23:f8:41:89:a6:24:ec:
a4:a0:b0:b8:ef:10:71:8a:22:43:12:4c:02:52:6a:
36:fd:9c:94:81:ea:21:5d:98:ec:ff:da:3c:67:ab:
4e:6b:a8:d0:81:d3:80:b6:8f:cc:8e:97:db:be:1c:
df:99:16:3c:d7:de:8f:9b:ae:8c:20:cc:2b:2d:20:
11:80:82:f9:99:92:58:e9:ce:1c:ea:33:a8:c2:11:
da:d9:1f:8a:85:a3:57:f8:ed:e1:93:63:1c:85:7f:
ac:57:c8:29:b2:1d:a3:d2:f2:43:90:5a:4a:0a:ed:
cb:c2:d3:42:08:bb:04:2c:32:b6:35:d7:50:fa:a7:
3c:d5:25:1a:e3:25:ea:e8:cd:30:8f:3b:c3:9c:18:
6e:6f:75:11:8c:68:f6:e5:03:46:a8:ae:48:cf:27:
1d:fd:9e:17:e1:ef:53:18:d2:4e:d0:6f:c1:7b:59:
fc:39:c4:01:f2:6a:a4:9b:77:ee:0b:19:55:fd:38:
45:61:22:74:63:21:fd:1e:62:b9:37:59:4a:93:74:
ed:df:86:cc:9f:f4:05:ec:fa:c2:ba:b6:2f:23:d6:
4b:58:39:4a:59:38:63:00:ac:f8:7e:0f:67:59:8e:
6a:cc:a8:bb:54:53:6c:20:22:04:69:d7:f5:75:b8:
fc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:32:D8:E1:CC:F4:9D:FC:C8:A5:A3:4C:66:7F:8A:E8:2F:D7:B3:27
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.113.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ce:24:3d:49:a3:bd:29:f0:1b:d3:5a:1a:a6:47:32:05:06:
d0:1b:f8:ae:8c:43:71:9a:c6:9c:47:9c:4f:09:71:ce:fb:6f:
0b:3e:ba:87:f5:72:6f:25:53:42:c7:d9:9c:47:48:bf:92:70:
9f:23:da:f4:50:5d:dc:74:5a:1e:5e:ae:95:b2:4d:fb:75:3b:
71:eb:2a:a1:aa:03:89:82:87:9e:52:4b:0d:f1:a3:9a:87:c9:
fa:66:0b:a5:a9:6f:20:7b:77:ab:5f:eb:e8:c7:ce:f4:cf:79:
02:87:01:be:13:65:7d:87:82:33:bc:d0:b4:50:d3:10:4e:d9:
ba:05:52:15:51:64:a2:6d:9d:0e:c1:20:f9:10:fa:d5:8c:06:
da:ef:cf:ef:54:1c:b5:05:94:d5:46:ca:9d:40:bf:8d:a6:cb:
df:e3:fa:b2:24:a8:73:91:73:27:ab:95:ec:63:49:7b:a7:3d:
4e:5a:fb:17:65:92:55:ee:b8:d5:4a:34:da:cd:f9:57:fe:e6:
bf:fe:09:55:1d:50:2d:4b:af:aa:2f:61:78:f4:ca:0c:4e:5c:
97:5b:ef:a5:bb:f7:66:00:28:b8:e2:0b:e5:2e:f8:ea:9f:1c:
2e:c1:7e:2c:76:1c:4a:22:3b:2d:3d:a6:8c:8e:1b:f6:17:13:
56:fb:d6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:33:57 2025 by rpki-client