Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136302e302f32342d3234203d3e203236303432.roa
File: 3139332e3234362e3136302e302f32342d3234203d3e203236303432.roa (raw, json)
Hash identifier: MxVd5TLP2DDRXk52YAV7qOu3ZHPnfzvBsQ5FodpmV38=
Subject key identifier: 97:2A:CD:C1:6D:BE:45:80:9A:18:D5:F0:56:A8:9F:F2:DF:F8:72:68
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 4C9E35AED62306376004C35EAE849906A14FEEE3
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136302e302f32342d3234203d3e203236303432.roa
Signing time: Mon 31 Mar 2025 09:38:54 +0000
ROA not before: Mon 31 Mar 2025 09:33:54 +0000
ROA not after: Mon 30 Mar 2026 09:38:54 +0000
asID: 26042
IP address blocks: 193.246.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:9e:35:ae:d6:23:06:37:60:04:c3:5e:ae:84:99:06:a1:4f:ee:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 31 09:33:54 2025 GMT
Not After : Mar 30 09:38:54 2026 GMT
Subject: CN=972ACDC16DBE45809A18D5F056A89FF2DFF87268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:96:48:b1:ce:cd:c1:6e:3d:8f:e7:e4:30:d6:
7a:01:c1:a4:8b:3c:62:94:1b:27:b8:a1:ee:0f:f2:
a4:5d:bd:c8:35:a0:02:de:6d:38:60:11:1c:ac:44:
7b:88:32:9a:6c:e9:2f:b7:53:fa:f1:67:d6:35:07:
e7:8b:eb:83:01:d4:85:1d:e8:0e:4d:d5:a6:a3:1c:
d1:93:0b:50:95:46:ce:42:d3:3a:7f:90:4c:0a:b8:
2f:80:5d:14:e3:49:56:9e:b0:44:da:be:4d:55:3a:
27:89:d8:c3:ed:44:c0:bc:ef:c0:7e:24:8b:5e:ed:
01:b6:a0:5c:23:35:e0:ff:1c:d1:e7:ed:7f:5c:e9:
dd:75:f8:aa:bd:a3:c0:cf:e2:17:b0:3b:53:a4:f2:
34:d4:71:f8:17:07:66:c9:5a:18:b9:91:51:74:76:
d9:e4:5a:2a:c6:e7:40:8d:6e:32:a8:c1:12:d7:1a:
cf:01:97:a0:f1:ad:dd:b8:f9:33:82:37:8e:25:e7:
a6:d7:0b:86:9f:f8:67:ad:62:0c:eb:0b:77:65:44:
7f:f3:22:17:12:92:bf:96:83:83:d6:57:79:d2:7b:
86:9e:9a:88:82:e9:4b:50:81:9e:6c:ad:65:97:c8:
e7:48:ec:df:a6:20:67:52:c5:53:d5:c5:d3:67:ff:
28:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2A:CD:C1:6D:BE:45:80:9A:18:D5:F0:56:A8:9F:F2:DF:F8:72:68
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136302e302f32342d3234203d3e203236303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.160.0/24
Signature Algorithm: sha256WithRSAEncryption
82:6b:68:6d:df:dc:2e:87:71:ff:45:26:ed:e2:05:50:7b:8b:
28:32:d2:fd:ca:80:9e:73:1b:b5:8b:88:a9:6f:f2:c6:4f:ae:
8d:c9:94:57:e9:53:dc:25:11:38:58:09:f2:97:35:c8:c1:3f:
6e:ab:6b:0d:6f:1d:17:35:f8:4c:91:5b:b3:15:32:df:34:14:
9e:e4:27:3c:c6:f1:d6:62:1d:d4:a9:42:94:c2:ee:78:ec:cb:
13:1b:89:c4:1c:97:61:85:de:54:5d:5e:40:19:c0:14:dc:5c:
b5:02:95:76:9c:3b:f2:fd:6e:f7:c5:72:62:52:ea:aa:2b:da:
ea:21:2d:99:43:d2:de:4a:db:17:fe:27:c1:79:5a:c9:62:66:
88:5b:24:39:e8:6e:da:19:39:66:4e:eb:2a:1a:89:07:25:da:
d7:4c:c2:00:c8:72:63:00:68:3d:84:8a:11:b8:58:36:e9:6e:
5c:a5:84:10:c8:e0:7c:9e:89:b9:68:0d:d2:64:32:a6:1d:46:
e2:30:c7:9d:42:8c:b9:22:5d:25:94:04:22:d7:e5:04:fd:db:
81:f8:26:f6:ad:95:4a:f7:89:d2:9d:15:d7:bf:4b:78:49:59:
3e:1f:f8:53:a8:3f:58:b6:00:0f:0a:44:c2:00:83:ee:25:b8:
e7:9d:98:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:29 2025 by rpki-client on console.sobornost.net