Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e35332e302f32342d3234203d3e20313532363732.roa
File: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (raw, json)
Hash identifier: gstSQe8hViowEjQTTf4SRPbSc3NVx6iubnx1NRq3ZX0=
Subject key identifier: 4A:A3:48:80:99:C5:CA:9D:52:2B:6E:70:38:38:C6:10:9A:23:EA:FC
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 7CB9D4BCCAF8FFDF5543409A17F067EA60177A57
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e35332e302f32342d3234203d3e20313532363732.roa
Signing time: Sun 13 Apr 2025 03:54:01 +0000
ROA not before: Sun 13 Apr 2025 03:49:01 +0000
ROA not after: Sun 12 Apr 2026 03:54:01 +0000
asID: 152672
IP address blocks: 146.19.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b9:d4:bc:ca:f8:ff:df:55:43:40:9a:17:f0:67:ea:60:17:7a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Apr 13 03:49:01 2025 GMT
Not After : Apr 12 03:54:01 2026 GMT
Subject: CN=4AA3488099C5CA9D522B6E703838C6109A23EAFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:f7:eb:b5:af:39:fb:10:4c:b6:00:5c:74:
e4:7d:a3:10:72:9d:66:ac:33:c2:bd:85:84:de:21:
89:73:55:bf:65:f2:e5:96:3a:d0:b7:f0:a0:fd:9e:
ba:68:8a:6d:32:24:68:89:63:a8:0c:43:33:83:4a:
54:60:f8:15:cb:99:bb:0d:73:7a:77:3e:01:aa:2e:
45:0f:95:68:b0:0a:84:cb:d1:71:52:28:e7:5c:00:
1e:23:94:02:95:e4:34:9d:4e:00:66:af:07:9e:89:
21:30:94:a7:a6:44:2b:be:25:27:1e:d0:6a:9a:7b:
27:90:e5:ad:81:79:4d:51:5b:f7:b7:d7:7f:2e:9b:
10:6c:f8:86:9c:43:02:02:df:69:24:8f:5e:51:98:
90:8e:33:a7:39:4e:a0:a4:0c:3b:5c:71:02:4c:1d:
c5:c8:c2:93:28:87:b0:3c:15:05:1d:4f:e6:d3:6a:
8d:c5:e5:e1:49:ac:7b:67:9c:a4:60:25:d0:19:4c:
92:02:ef:03:d9:66:9c:01:c1:c5:25:8b:30:34:90:
da:f1:b8:b1:cb:17:70:16:63:06:2a:54:56:c2:1e:
30:a8:a7:ba:61:03:ce:f9:61:a7:5a:4b:ce:22:c7:
52:6c:59:81:d2:ed:7c:92:69:0e:d3:c7:bf:3f:20:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A3:48:80:99:C5:CA:9D:52:2B:6E:70:38:38:C6:10:9A:23:EA:FC
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e35332e302f32342d3234203d3e20313532363732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.53.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ed:7a:01:bd:9f:96:a9:c2:18:1b:25:5b:1d:71:2b:cd:db:
09:ca:a4:8d:a0:18:1f:86:45:bd:45:fc:91:27:f4:69:b2:84:
a0:46:31:d8:7a:43:ca:27:fe:6a:f0:e4:d3:2a:71:c2:d3:a2:
31:12:98:8b:88:40:1d:0e:04:d7:92:89:ab:0d:a0:d5:1f:e8:
25:83:37:b1:2b:4c:34:78:8d:59:c4:1b:b3:be:2b:ea:12:84:
6c:f6:bb:52:dd:7b:4f:60:27:f5:32:cb:16:55:56:3a:e4:af:
a7:be:18:0a:a0:36:5e:2f:e5:c9:df:b6:ea:72:40:7e:f5:dc:
e6:d3:44:20:2b:29:99:b6:5f:64:47:ab:dc:07:be:55:ac:ff:
02:b0:d1:25:e0:68:38:a1:af:7c:68:9f:dd:2b:8b:5a:04:4f:
a5:c6:ce:80:22:e5:93:5a:c4:c6:93:a6:50:a3:d8:29:24:ab:
ba:01:05:92:cd:6b:5f:91:48:fd:11:9c:f5:46:85:5d:53:65:
0a:26:43:85:6a:33:c4:ab:eb:33:82:8c:d8:68:e0:e4:9d:40:
c7:e4:cd:ed:5b:ab:1a:4e:c8:19:9c:9e:2e:37:46:a5:d8:78:
58:4e:ba:ab:b8:72:03:e6:fc:f4:38:c0:ce:68:a5:a8:97:c0:
27:03:28:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net