Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa
File: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (raw, json)
Hash identifier: pWCIuSrDYwp+tan25QY6TeO9jMNRWP/W0zj94P0620Y=
Subject key identifier: D1:A2:48:B3:AE:76:DA:72:2F:D2:7D:69:B0:73:DA:7C:05:54:B6:A8
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 21B4B938731B65D378A53466E654F387C5161654
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa
Signing time: Mon 10 Feb 2025 13:45:45 +0000
ROA not before: Mon 10 Feb 2025 13:40:45 +0000
ROA not after: Mon 09 Feb 2026 13:45:45 +0000
asID: 44213
IP address blocks: 109.234.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:b4:b9:38:73:1b:65:d3:78:a5:34:66:e6:54:f3:87:c5:16:16:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Feb 10 13:40:45 2025 GMT
Not After : Feb 9 13:45:45 2026 GMT
Subject: CN=D1A248B3AE76DA722FD27D69B073DA7C0554B6A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:e8:47:45:4d:e4:14:32:8d:8c:44:f7:9d:
ca:f1:32:b6:d0:28:b0:d6:ca:d0:c5:3f:86:34:53:
a0:24:28:53:42:46:62:b8:43:9b:d4:24:87:45:af:
28:5d:d7:13:7b:cc:bb:af:12:cc:37:af:31:1e:92:
5a:ce:ad:b0:b1:a2:fd:91:55:86:80:36:14:6a:8d:
df:97:9f:2c:87:4a:76:f2:f1:64:98:f4:6b:5e:e4:
a4:f8:6b:ca:dd:ca:9b:cb:e9:5c:76:72:08:3e:72:
90:db:a4:d9:eb:59:3d:87:a1:63:d8:92:b9:2c:35:
35:6c:6f:14:d9:f0:4b:7d:a3:11:f1:7e:7f:46:1a:
10:df:9c:4d:c1:34:e5:ab:92:53:e6:0d:6d:cf:d4:
14:47:50:a0:22:05:af:2b:32:8d:dd:a6:69:a5:e1:
12:14:f6:ab:28:d5:fa:d4:ea:0e:23:7a:2c:b7:76:
90:e6:f7:88:87:09:b3:2d:af:16:ab:f7:bc:2b:2f:
b0:1e:ac:69:fc:c1:ee:b4:34:12:24:b0:dd:61:3c:
40:ac:32:05:18:02:bc:68:13:da:c3:bc:e4:5a:cf:
a5:7c:38:77:06:a8:83:9f:6f:d6:8c:68:ae:28:97:
96:42:42:fd:88:c0:fd:da:d4:3d:f8:c7:fb:f3:49:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A2:48:B3:AE:76:DA:72:2F:D2:7D:69:B0:73:DA:7C:05:54:B6:A8
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.213.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:5f:00:85:db:96:26:2a:ac:10:7c:e6:c7:f8:0d:a5:21:6e:
66:f3:27:88:0d:58:5d:78:ac:93:d4:cf:77:c0:6f:45:a8:57:
78:c8:31:e1:b4:12:cc:8a:7b:d2:4b:5b:31:ad:77:5d:cd:44:
1e:ba:40:f3:39:24:f7:97:66:37:7c:d7:73:82:fc:09:99:5d:
3a:96:1a:75:9e:11:ff:d0:f8:19:6f:5a:fe:87:c2:87:8b:0b:
5e:b2:cb:95:4f:77:35:b1:58:33:4a:0a:d8:43:27:80:c5:36:
fe:92:c1:f0:1e:38:01:78:ad:b2:bf:b7:71:84:2f:47:a6:46:
68:85:76:3f:98:57:d8:d1:78:a7:3c:61:93:eb:03:3b:03:c5:
88:89:c2:ae:7c:67:6b:76:dd:af:dd:29:df:1a:91:39:cb:d5:
77:e2:c0:29:6d:1c:0a:7d:f3:43:37:d3:d9:84:8f:7d:e0:03:
84:65:c0:2d:fb:f6:87:aa:81:a2:37:92:e4:4d:6e:26:e9:35:
ed:48:74:1d:3b:87:cb:57:20:fc:f1:e5:87:e3:56:e2:41:b1:
8d:54:df:eb:ce:58:12:0d:93:c8:51:ef:fa:35:8f:c0:5b:57:
c8:43:00:0d:c5:13:36:d0:32:38:df:7f:a9:82:b5:e3:a6:ca:
96:a0:dc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net