Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/33372e34342e3234362e302f32332d3234203d3e203437353833.roa
File: 33372e34342e3234362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: 8/8vgZ3TBgj4Ht0e8N4voewXQq71MbpeOoXVPpNXfTI=
Subject key identifier: ED:B1:B6:24:32:31:46:B8:34:9C:DE:D1:3A:49:A5:82:3F:92:7D:12
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 76186276DA68D86325015D571337F8309EE5C9A6
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/33372e34342e3234362e302f32332d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:44:46 +0000
ROA not before: Mon 27 Jan 2025 09:39:46 +0000
ROA not after: Mon 26 Jan 2026 09:44:46 +0000
asID: 47583
IP address blocks: 37.44.246.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:18:62:76:da:68:d8:63:25:01:5d:57:13:37:f8:30:9e:e5:c9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jan 27 09:39:46 2025 GMT
Not After : Jan 26 09:44:46 2026 GMT
Subject: CN=EDB1B624323146B8349CDED13A49A5823F927D12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:55:19:98:53:71:76:14:bd:bd:a4:d9:66:
44:9d:89:dd:48:d6:21:6e:da:b5:ea:5f:87:0e:a6:
df:b6:0c:66:e8:ca:35:d1:97:b8:4a:a0:3f:2e:bc:
ab:98:e4:5a:78:7a:b9:68:19:e7:16:cf:6c:30:60:
f4:ed:af:7e:23:a2:1b:db:e1:5c:5c:5e:af:0e:f0:
d6:dc:3a:0f:fc:50:f6:42:99:d0:43:f9:3f:fd:7d:
29:bb:44:92:eb:01:9b:8b:cd:52:e0:28:3f:79:c7:
e2:05:57:bc:92:d8:b2:ea:27:73:78:a8:b5:7d:e5:
3c:73:d7:dc:df:e1:3a:ec:f3:e2:be:6c:36:e8:69:
70:28:53:f7:8c:83:5a:ea:e4:a3:e3:09:5b:75:71:
7d:e2:93:05:4e:1a:bb:58:5c:72:ad:8b:07:1b:d1:
83:24:8a:7b:12:80:34:e3:d5:05:de:5e:58:a6:ec:
52:22:23:08:dd:27:be:e7:e4:bd:8b:b1:8d:92:d6:
e9:db:d9:55:81:6d:24:5d:97:65:64:8f:53:07:39:
ab:30:17:d1:c4:89:6a:7e:76:4b:40:cb:ea:02:f7:
6b:ae:72:05:11:d5:34:dd:7b:45:4b:e1:c7:7c:a7:
cf:a5:d9:cf:f9:c1:27:c3:e7:e9:51:e2:78:e9:a2:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B1:B6:24:32:31:46:B8:34:9C:DE:D1:3A:49:A5:82:3F:92:7D:12
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/33372e34342e3234362e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.246.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:5c:b1:90:f3:f2:f3:03:50:c2:e3:43:f4:c3:0c:e9:c7:e7:
5a:60:f7:9a:ee:4d:4b:60:93:a5:17:14:dd:65:e3:2a:b5:39:
50:2b:72:ae:01:d0:48:d4:34:bf:8a:56:29:fa:ed:b7:86:c2:
37:14:aa:5c:1b:c3:77:23:2e:af:1c:76:0c:3e:ea:93:f4:c5:
9b:a3:e1:7d:af:cb:55:41:ff:f8:3f:80:51:7a:ca:11:0a:cd:
f5:35:2a:92:96:d7:b5:68:1f:4c:56:49:50:26:1c:57:a4:8c:
7d:cb:4b:f4:94:79:ce:48:0c:cd:27:40:a2:fc:2a:cb:74:cd:
f9:15:03:17:53:6c:81:0b:4b:ad:50:4e:ce:17:2f:72:45:b8:
87:be:b9:15:51:ba:be:98:e1:60:0a:ab:58:24:c6:11:13:cc:
95:45:80:24:7b:1b:a7:18:9a:f6:51:0e:49:d6:cd:5b:4f:36:
65:cc:0c:db:13:13:c8:de:d8:e9:55:dc:61:55:82:6d:6d:6d:
62:8c:ae:0f:2c:21:cb:b4:86:5e:1e:e4:47:f3:6f:44:22:93:
61:bf:7e:c6:3b:41:1e:96:b9:f8:ec:dc:85:8c:b8:95:3b:86:
eb:53:b5:b0:fd:2b:69:f9:09:6c:6d:dc:1d:c1:74:7c:b0:70:
23:92:e0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:06:38 2025 by rpki-client