Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20313531313036.roa
File: 3130332e34392e3133312e302f32342d3234203d3e20313531313036.roa (raw, json)
Hash identifier: /tFw1lzpQWvvpuYCQnIjFSZLwGcls1xoTiwGuGyPuCE=
Subject key identifier: F9:2E:72:A3:3D:17:17:96:4C:28:F4:F5:33:84:61:D6:6B:97:D0:3F
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 5FF968266A19662F85DE06A4EEF632C713E2DCD8
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20313531313036.roa
Signing time: Thu 10 Apr 2025 14:26:46 +0000
ROA not before: Thu 10 Apr 2025 14:21:46 +0000
ROA not after: Thu 09 Apr 2026 14:26:46 +0000
asID: 151106
IP address blocks: 103.49.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:f9:68:26:6a:19:66:2f:85:de:06:a4:ee:f6:32:c7:13:e2:dc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Apr 10 14:21:46 2025 GMT
Not After : Apr 9 14:26:46 2026 GMT
Subject: CN=F92E72A33D1717964C28F4F5338461D66B97D03F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:08:ef:ad:33:dd:eb:be:0f:53:b7:c2:fc:
40:55:3a:24:b3:2a:52:d6:77:0d:de:de:44:9f:25:
8a:e3:3b:9f:7c:de:f0:f6:d9:c2:51:62:5b:ad:bc:
84:3d:ce:f6:26:9f:58:65:a2:89:46:a7:9d:74:36:
77:dd:6c:f4:5b:05:e2:4c:62:bc:72:bc:95:f2:36:
98:f9:e0:f7:a7:d8:d8:ed:f9:96:d9:91:48:18:28:
92:e2:91:20:b3:61:de:58:ab:70:59:31:c4:b0:8e:
9d:2e:93:82:f7:d4:ba:29:bd:22:bc:14:9d:73:56:
e9:37:01:7b:37:a7:b1:1b:64:f1:49:7d:cb:a1:2b:
8c:9a:2d:54:5f:5a:77:35:2b:3e:c7:5c:60:7c:8e:
c8:ee:b7:fb:0c:51:5d:28:c4:b7:b1:ab:55:76:0c:
cd:dc:61:68:a4:42:5c:24:2a:03:3d:d0:2a:7c:df:
5a:98:e7:62:d3:50:59:9b:97:33:d6:8d:b6:61:62:
30:15:f3:f4:6d:b3:d7:df:b1:19:5b:d2:03:ce:3f:
dd:8c:05:cb:5f:34:b1:18:d7:08:8f:27:cc:12:d8:
8d:2e:bd:06:44:9c:e1:07:cf:b5:ed:16:ce:5b:45:
3a:1d:69:33:30:ef:ff:7c:d2:b6:4f:4c:98:41:29:
74:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2E:72:A3:3D:17:17:96:4C:28:F4:F5:33:84:61:D6:6B:97:D0:3F
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/3130332e34392e3133312e302f32342d3234203d3e20313531313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.49.131.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e3:54:32:f6:9a:e4:db:c8:d0:4e:81:c5:cf:5e:da:ac:a6:
fa:9a:f5:d2:1c:14:ed:47:87:8c:b6:bb:3a:92:f8:a4:da:a1:
c6:7d:7c:d5:91:f4:d4:ff:de:55:39:ae:e0:07:d2:e4:ce:0c:
b2:c7:63:57:8b:0b:18:88:79:3b:ae:0d:34:92:7a:d6:d6:ef:
9f:96:cf:1c:3a:87:c2:1a:56:6d:26:bf:c1:16:a7:be:85:c1:
ff:af:ac:85:d0:07:90:70:fd:4f:ed:dc:bf:a7:0d:77:bc:9b:
8c:b6:30:c3:44:df:59:0f:11:4d:d8:91:c2:5c:a7:22:c0:03:
ca:72:32:74:f8:0f:ec:a2:13:cc:d1:81:b4:c2:39:e0:e4:4f:
43:59:21:57:6b:13:8b:64:f4:00:6b:5d:92:70:21:da:18:60:
f5:3a:4a:d3:37:36:05:19:22:82:ed:5a:b9:8f:e5:a2:27:77:
c6:c6:96:64:3a:67:4a:93:2b:c6:c8:9d:ec:cf:46:74:1c:75:
b8:78:80:e8:89:d7:5b:2a:73:6f:49:1f:25:f9:2f:10:90:86:
72:1e:ad:82:93:82:79:7f:47:43:1d:9f:3e:74:81:9a:c3:0f:
91:ca:cb:4f:15:2c:0c:e4:96:cc:6e:f1:73:bc:0d:cc:fa:0d:
8d:60:5b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net