Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132392e302f32342d3234203d3e20313531313036.roa
File: 3130332e34392e3132392e302f32342d3234203d3e20313531313036.roa (raw, json)
Hash identifier: Q+cdg9uP0RhRt9m8aCTanOBYRy+8tZGQj1Gbky6i6b4=
Subject key identifier: 1D:21:3E:F2:CC:36:D8:F0:32:28:1C:09:EC:22:D1:B7:9A:6B:F4:4B
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 02C4F8252BF9A369D9ADE2B1A6CF535FC11CBEA6
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132392e302f32342d3234203d3e20313531313036.roa
Signing time: Thu 10 Apr 2025 14:26:45 +0000
ROA not before: Thu 10 Apr 2025 14:21:45 +0000
ROA not after: Thu 09 Apr 2026 14:26:45 +0000
asID: 151106
IP address blocks: 103.49.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c4:f8:25:2b:f9:a3:69:d9:ad:e2:b1:a6:cf:53:5f:c1:1c:be:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Apr 10 14:21:45 2025 GMT
Not After : Apr 9 14:26:45 2026 GMT
Subject: CN=1D213EF2CC36D8F032281C09EC22D1B79A6BF44B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:6c:b6:c2:41:dd:f8:f3:c3:7c:44:2f:dd:
b8:67:69:e2:30:95:37:72:96:b9:51:f8:12:4b:0a:
3f:f2:e8:77:19:11:f4:9f:52:44:93:bc:66:2f:14:
d5:b9:e0:74:39:6c:ea:71:a4:5e:e7:38:b9:b1:81:
a1:ba:07:ac:5b:55:47:a6:52:d2:ea:66:ff:b6:f0:
32:60:fb:70:44:55:55:b2:6b:44:02:87:c3:ba:7e:
dd:64:e7:69:d1:78:b3:85:47:2f:0b:a4:b2:99:5e:
c7:7f:b9:e1:3d:d3:4d:b1:fc:4e:25:90:5f:ed:10:
c3:86:e2:f6:d6:ef:29:ec:8b:2f:72:22:cf:61:9f:
cd:ee:9b:87:b9:69:93:fb:61:40:88:b9:9e:76:fa:
f6:fa:fa:40:3f:af:c3:2a:55:07:36:f3:f3:11:2f:
e4:ac:3d:00:3a:09:7d:26:ad:54:3a:a7:93:d1:62:
20:07:6b:bc:36:d7:8f:e4:cc:1c:12:2b:56:39:50:
85:a3:d7:e8:ea:c3:83:93:2f:b5:11:a5:97:0e:e3:
b9:55:7c:50:9c:c8:9d:26:4d:be:7b:89:63:14:0e:
25:8d:c5:c4:a0:a9:79:b0:6b:b3:40:9e:40:9f:ed:
e9:0f:2b:db:bf:d2:33:60:86:a8:4b:56:62:93:1f:
a8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:21:3E:F2:CC:36:D8:F0:32:28:1C:09:EC:22:D1:B7:9A:6B:F4:4B
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3132392e302f32342d3234203d3e20313531313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:26:1e:68:f2:87:77:85:8e:33:8f:07:87:88:d1:05:3f:28:
08:89:ff:f8:ea:e1:c1:bf:39:98:c2:b0:bf:14:8a:f7:33:b1:
be:c1:07:9a:51:7a:31:43:50:a0:21:eb:8c:a0:c9:8c:b7:f7:
ef:80:19:7a:60:f1:b8:30:33:75:1a:72:ec:a4:c8:91:80:4e:
96:53:d8:1d:a2:08:5a:43:91:b6:c2:c7:da:cc:b8:6e:8e:fd:
46:83:93:ac:9f:c1:8d:b3:eb:c7:6a:6b:60:1d:35:5b:ea:59:
27:f0:a6:a2:34:dc:76:0d:04:7b:6c:e2:2a:0b:47:c7:9e:0a:
26:d3:58:26:5e:35:e1:6d:65:1f:6b:e3:75:1b:1e:8b:f9:5e:
a2:65:a5:ae:74:a3:62:1a:6c:e3:3e:ff:98:7f:e9:51:d6:78:
de:02:cc:63:1b:7d:c1:6d:61:d4:b5:38:e5:91:41:9f:73:98:
dc:b7:83:6b:09:1f:9b:34:ef:e8:a5:fe:74:72:37:71:75:7e:
fb:8e:b8:3c:d2:73:a9:52:5c:1b:6e:d8:40:81:f9:2d:0b:77:
45:85:56:ad:77:31:c7:6f:64:31:a9:19:6c:02:b7:8c:6a:ca:
87:d0:e6:50:17:44:cd:76:e2:b7:e4:1d:68:ee:f5:04:6e:fe:
93:0c:d9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net