Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/3139322e36372e33352e302f32342d3332203d3e203236353536.roa
File: 3139322e36372e33352e302f32342d3332203d3e203236353536.roa (raw, json)
Hash identifier: 6b1VpbvMsE50o/1KffApiCFgdzfb7zhZLiCWQ7W3KvI=
Subject key identifier: A1:CD:AF:EC:9D:18:67:17:C5:A5:22:B4:84:F1:84:8F:7B:BB:55:3F
Certificate issuer: /CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388
Certificate serial: 326BC9AD14CF15C51C5D888CA397805A5851A57C
Authority key identifier: 01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88
Authority info access: rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/3139322e36372e33352e302f32342d3332203d3e203236353536.roa
Signing time: Fri 11 Apr 2025 01:47:26 +0000
ROA not before: Fri 11 Apr 2025 01:42:26 +0000
ROA not after: Fri 10 Apr 2026 01:47:26 +0000
asID: 26556
IP address blocks: 192.67.35.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:6b:c9:ad:14:cf:15:c5:1c:5d:88:8c:a3:97:80:5a:58:51:a5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388
Validity
Not Before: Apr 11 01:42:26 2025 GMT
Not After : Apr 10 01:47:26 2026 GMT
Subject: CN=A1CDAFEC9D186717C5A522B484F1848F7BBB553F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:ef:e1:f6:92:26:e0:75:88:96:c2:bd:69:
1d:e3:b0:51:8c:8c:a8:e0:e3:98:8c:e7:a0:09:65:
c6:0c:44:52:13:ef:50:2c:49:18:ac:d7:23:c6:1a:
98:02:ed:b8:f5:59:50:fe:94:f0:1e:8c:11:db:b3:
ff:81:6d:c9:91:01:67:47:cc:b5:98:b0:8f:78:b1:
7f:7b:28:14:ab:d5:2b:31:bc:e8:15:89:bd:6f:11:
d8:fa:02:e2:a2:97:3b:7a:46:17:3e:a4:ca:9a:f0:
75:72:f6:cd:43:2e:c4:09:47:32:31:ad:86:6c:d0:
ff:ae:03:49:f7:ed:a9:3d:49:6e:5e:b2:80:7d:7f:
7d:f4:0d:33:ee:88:e1:6a:c2:4a:0b:f3:67:fa:ee:
50:f4:fd:de:c7:4b:25:b0:11:ed:c1:57:bf:f9:cf:
95:b6:8b:1d:5e:fe:05:8d:e0:bf:1a:90:e3:62:b8:
1d:0b:75:a6:bf:21:6b:13:72:50:ec:e0:63:6b:03:
e0:82:3e:ce:94:ee:61:94:09:78:dc:85:ea:32:4c:
2a:3a:ac:ab:c7:c8:67:b2:59:8a:55:1e:9b:53:ea:
48:f2:85:61:5e:bb:25:81:97:f1:08:f3:20:71:bf:
df:52:51:ac:b2:bf:70:b1:7f:02:91:8d:c2:bb:43:
49:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CD:AF:EC:9D:18:67:17:C5:A5:22:B4:84:F1:84:8F:7B:BB:55:3F
X509v3 Authority Key Identifier:
keyid:01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/3139322e36372e33352e302f32342d3332203d3e203236353536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.67.35.0/24
Signature Algorithm: sha256WithRSAEncryption
72:dc:e7:cc:dd:17:ad:7d:43:dc:cb:89:87:a3:bb:99:ad:a0:
af:5e:bb:33:57:ee:d4:fd:95:24:ba:73:42:4f:55:20:87:e7:
e1:c7:f0:68:09:d0:67:99:df:f9:97:18:e0:6b:99:96:8e:c0:
74:8f:0c:ed:ae:b5:84:96:8e:1b:d1:7e:81:73:5d:cd:26:45:
7c:df:24:6f:d0:f3:02:78:aa:9e:f5:ec:2d:c4:aa:9f:51:88:
c2:80:34:44:ba:1c:75:bd:22:37:49:b8:c2:16:89:af:36:bd:
48:51:7f:d1:01:dc:97:3b:42:dd:1c:23:d8:8b:3f:7a:06:7d:
9c:99:16:ed:a0:73:e9:f3:79:60:59:2e:6a:ec:49:5c:c6:56:
f8:12:4b:cc:d4:df:39:2e:09:18:12:9f:6c:c8:62:3a:af:d1:
d4:3d:25:c2:3f:4d:50:4f:56:e3:d6:40:e6:5e:da:bb:66:49:
32:2c:56:50:f6:dd:ed:28:02:c7:9e:05:99:b8:7b:a3:cb:73:
f8:ef:16:32:88:37:18:13:ed:87:67:40:2a:f0:2b:40:1f:20:
16:0d:9d:25:92:29:8e:ec:1a:09:b2:a2:df:7b:d4:2e:57:bd:
66:67:e1:7f:10:eb:f0:80:3a:aa:6c:bc:06:39:01:39:d7:15:
07:cf:d0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:39 2025 by rpki-client on console.sobornost.net