Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa
File: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (raw, json)
Hash identifier: 4PxoYzD3CaAxIFD1zVCjS0SIlEMOZydpEKyI1cyYk28=
Subject key identifier: 43:34:69:8D:D5:6D:FA:61:FB:E6:3F:8F:CD:DE:66:41:47:A7:6F:76
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 2C0EAABDF2D969456F8E48E35106195B6B1B0601
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa
Signing time: Sun 13 Apr 2025 03:54:01 +0000
ROA not before: Sun 13 Apr 2025 03:49:01 +0000
ROA not after: Sun 12 Apr 2026 03:54:01 +0000
asID: 152672
IP address blocks: 176.126.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:0e:aa:bd:f2:d9:69:45:6f:8e:48:e3:51:06:19:5b:6b:1b:06:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Apr 13 03:49:01 2025 GMT
Not After : Apr 12 03:54:01 2026 GMT
Subject: CN=4334698DD56DFA61FBE63F8FCDDE664147A76F76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:35:99:98:25:b7:ab:99:ee:a4:06:89:f7:
d9:b5:82:59:c9:02:62:df:c8:7d:39:60:57:91:ce:
8c:6e:20:ed:b2:91:bd:de:9b:9e:a8:e1:f4:b9:06:
45:7b:af:3e:20:9e:a1:a1:ce:ce:9e:b1:d6:63:0c:
60:c7:28:fe:9d:8e:6d:0f:ce:e2:4b:08:75:de:bc:
71:da:b9:9f:0e:bf:c4:c3:ac:1e:15:97:25:bf:48:
7e:d6:c1:f4:86:2f:dd:43:94:4a:26:ca:e8:cb:40:
73:4b:11:68:b4:55:ad:5d:1b:4d:6b:13:75:d8:bb:
34:09:d9:97:59:6e:c5:1b:18:30:8d:23:3c:e8:f5:
6b:db:ae:d6:7b:9c:fd:88:7d:25:e7:df:ae:b6:5f:
63:08:95:7f:ae:83:61:c8:d6:b3:18:81:99:ec:96:
d6:49:d4:f9:94:74:21:44:86:23:f4:c9:e9:e9:d8:
19:5c:2e:8d:de:63:2a:64:01:8a:71:28:f5:91:cb:
a9:2f:2c:81:0a:b2:38:e7:b6:33:ea:83:68:ba:e9:
89:db:ed:88:46:9a:1a:ac:97:88:66:e5:38:ac:46:
61:6c:57:5d:91:a5:db:ca:6a:88:d5:ed:54:85:6d:
0e:d3:8f:04:76:d4:5a:30:69:5b:3a:8d:41:e7:d5:
1f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:34:69:8D:D5:6D:FA:61:FB:E6:3F:8F:CD:DE:66:41:47:A7:6F:76
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.105.0/24
Signature Algorithm: sha256WithRSAEncryption
87:dc:eb:84:c3:28:f2:45:44:79:44:d0:08:68:de:ed:b8:e8:
7d:1a:00:e0:44:76:3c:de:86:cd:dc:b3:b1:c5:47:78:c8:b1:
68:df:65:05:9e:28:0e:57:e1:c4:48:d1:1d:71:53:33:74:5e:
09:1d:6f:6a:28:91:ed:d5:24:c1:a3:fc:cf:ca:9c:ec:f5:4e:
47:2f:8e:05:f9:f7:dc:6a:16:96:57:f3:82:11:26:6e:3e:dc:
5f:87:15:51:c9:b7:a2:38:91:96:4c:82:6f:c0:67:0a:4b:60:
e9:74:d2:e0:1d:13:60:72:a4:a2:78:9f:35:e4:9d:f1:aa:b8:
dd:ac:59:1a:e0:fc:25:2b:90:5d:c5:9b:64:b1:44:52:5a:6f:
be:80:6f:10:7c:cc:4d:a6:21:25:16:02:06:e9:2a:e9:3b:f8:
09:14:82:be:1d:15:7e:9d:b4:ae:8f:6a:18:0a:eb:fc:d8:cc:
de:e7:9f:0f:0a:7f:43:6a:c1:c6:d0:6a:45:03:b9:6e:03:fa:
ec:b6:1d:ef:fd:ea:28:1a:64:27:27:f0:13:b4:5c:3f:e4:ca:
b2:e3:6c:a5:28:11:c6:c6:ec:91:6a:e9:62:df:44:ab:8e:a5:
c9:92:da:86:0e:d2:9c:2c:af:4f:70:3a:ce:b1:5c:e3:73:1a:
ef:a8:cf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net