Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131352e302f32342d3234203d3e20313336373837.roa
File: 39352e3231342e3131352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Kh1qbICFf/rzHEZfYc3ipuP4LRC6oUIhv1ZnlJvGyCA=
Subject key identifier: 2F:8B:16:FF:8F:B4:22:24:52:93:21:A0:AD:5D:BC:4D:CB:BF:D8:D7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3C892D0D993DA2C380D6FDE12497E72175B9C57B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 19:44:40 +0000
ROA not before: Fri 27 Dec 2024 19:39:40 +0000
ROA not after: Fri 26 Dec 2025 19:44:40 +0000
asID: 136787
IP address blocks: 95.214.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:89:2d:0d:99:3d:a2:c3:80:d6:fd:e1:24:97:e7:21:75:b9:c5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 27 19:39:40 2024 GMT
Not After : Dec 26 19:44:40 2025 GMT
Subject: CN=2F8B16FF8FB42224529321A0AD5DBC4DCBBFD8D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:b1:f1:e6:98:02:76:61:15:80:47:41:04:
73:3b:b7:91:3f:ca:6f:2c:07:c8:cc:a2:0d:1e:a9:
92:20:e6:a7:49:23:78:3b:2e:b9:02:98:26:75:ca:
6c:2f:7f:52:29:4d:43:8d:54:1f:a9:80:c8:b8:0d:
67:f6:75:d5:26:8e:b5:ee:f9:0b:0d:7a:4c:f1:be:
f0:d5:c9:da:6e:64:18:96:74:f4:a9:e5:03:af:21:
e9:7a:62:41:20:79:23:e3:91:ff:d5:fe:eb:be:d5:
5d:6a:4c:79:4f:9d:21:81:9d:d2:80:20:b2:65:8d:
8a:41:09:5b:7a:98:6a:74:72:06:16:e3:a8:b7:66:
0c:fe:5e:52:72:23:d2:59:78:72:e0:a6:5d:f1:41:
9f:aa:a1:84:01:62:4a:dd:f1:04:d0:d2:f9:1a:10:
05:99:e1:3b:da:63:50:66:eb:dd:81:2e:15:4f:91:
a3:ce:6d:8e:97:0a:fb:cb:27:22:f0:cc:29:27:3d:
90:bb:db:b8:de:a4:f8:06:17:cd:0d:1c:09:a3:0a:
b7:cd:75:49:8d:9b:9f:ad:2c:0e:25:8e:cd:66:67:
9b:89:69:95:8d:4a:b5:29:a3:d6:7a:36:e5:77:8e:
2b:48:07:97:7c:82:84:f5:f7:e7:5a:66:1c:97:ad:
23:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8B:16:FF:8F:B4:22:24:52:93:21:A0:AD:5D:BC:4D:CB:BF:D8:D7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.115.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:48:82:6f:d6:76:bb:f7:40:d4:dd:5b:9a:96:1a:90:3e:8d:
30:93:a8:09:98:14:4c:57:95:1a:33:68:c4:18:09:43:bb:40:
54:18:df:f0:1c:e4:10:9b:ba:4d:fc:4c:36:23:a9:36:06:7d:
df:3f:fb:3d:cd:a0:13:76:36:78:da:b6:6d:5c:3c:84:9e:26:
4e:fb:23:0e:5b:2f:45:3f:2c:ce:c0:66:9c:79:9a:f2:a1:5a:
7b:82:8c:36:cd:c3:61:f4:bc:bc:f7:c2:41:01:a7:ef:a7:38:
eb:85:d8:8a:6f:e5:3c:ea:89:18:04:cc:9b:86:2f:63:a1:45:
f3:2c:1b:97:68:be:23:e4:97:14:01:ae:55:6c:5a:5b:38:c7:
06:92:73:3b:d0:32:de:30:7f:89:3b:01:63:7f:c0:cf:22:e5:
21:c1:04:cb:e7:b0:0b:0e:cf:e7:df:c4:f0:1e:39:e2:57:14:
42:26:3c:f1:b2:4a:2b:05:9c:df:00:e0:21:52:d1:81:0b:b8:
e5:38:34:c8:2a:0d:1d:19:bc:82:bf:6f:47:27:f7:53:46:ca:
40:fa:1d:ff:b5:f2:49:6e:e9:d9:20:6d:5f:c2:f7:7b:25:7d:
fc:ff:81:9d:79:ae:2a:2b:90:22:43:d0:4b:52:8c:9b:05:8d:
cf:e0:18:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:57 2025 by rpki-client