Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e302e302f32312d3234203d3e203437353833.roa
File: 3134352e37392e302e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: 4KyHvZgm2pmbsYAVBi5QBLl2fV7pnw4zAwrI/Gtv7/U=
Subject key identifier: 74:95:DA:B6:F1:C1:13:8A:20:8B:2B:30:18:CC:02:88:28:75:4E:08
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 51410343F28B908E39E46D69D212413B13B145BE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e302e302f32312d3234203d3e203437353833.roa
Signing time: Thu 10 Apr 2025 10:08:16 +0000
ROA not before: Thu 10 Apr 2025 10:03:16 +0000
ROA not after: Thu 09 Apr 2026 10:08:16 +0000
asID: 47583
IP address blocks: 145.79.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:41:03:43:f2:8b:90:8e:39:e4:6d:69:d2:12:41:3b:13:b1:45:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 10 10:03:16 2025 GMT
Not After : Apr 9 10:08:16 2026 GMT
Subject: CN=7495DAB6F1C1138A208B2B3018CC028828754E08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:de:fe:44:c6:6d:1e:01:a7:92:01:41:7c:
94:43:3f:84:07:14:be:72:9f:a5:f2:2e:bf:45:15:
f5:57:a6:70:cc:15:86:14:62:64:a4:45:08:06:5f:
40:08:b7:61:a9:dc:51:7f:4d:e8:6f:9c:2e:77:7d:
5c:43:f4:ad:fc:61:a8:88:ac:de:ab:38:ae:51:ce:
98:1f:d7:36:4a:8b:c5:60:b5:13:07:53:97:2c:22:
77:2c:ac:53:72:cd:69:ce:ac:1f:d7:ca:1b:58:2c:
99:f0:db:81:b4:68:d1:4a:dc:52:59:df:77:3a:82:
19:f7:f1:54:4e:3d:d5:d1:d4:c2:4f:45:98:e6:24:
e1:62:eb:61:14:c9:2b:eb:29:09:a7:ad:4f:83:2c:
9e:e9:62:76:ae:94:f5:34:b7:11:b8:f8:4b:fe:87:
f5:4b:b4:d3:11:58:d7:3e:c7:4c:1c:d3:c8:cf:23:
2c:61:5d:3f:f2:87:a9:b0:4c:3b:69:c6:0c:3f:8e:
ec:08:0f:4c:c1:b8:65:90:d0:3d:42:81:01:ac:81:
7f:64:1a:55:cf:2d:97:ed:ef:46:4d:a7:a5:eb:27:
bf:59:57:dc:c2:fe:78:ce:ed:39:12:a7:b8:4a:f0:
bf:ba:be:ed:00:5e:36:d0:8f:3d:fd:ff:97:94:8f:
c6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:95:DA:B6:F1:C1:13:8A:20:8B:2B:30:18:CC:02:88:28:75:4E:08
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e302e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.0.0/21
Signature Algorithm: sha256WithRSAEncryption
67:bd:bb:9d:f6:17:ab:5f:4b:5b:8f:ad:7a:8d:03:6d:5b:94:
db:12:5e:fe:f9:2c:f2:89:47:59:80:8e:33:81:d0:ad:3d:f8:
1b:d2:9d:61:5c:4e:ec:65:bc:1b:07:85:f5:d7:6f:36:6e:29:
f9:2a:05:e2:20:61:22:27:64:fe:e5:c7:87:f6:03:dc:0f:c4:
a1:62:11:5c:f7:54:d9:ec:fd:23:83:7d:03:fd:8a:52:cc:a2:
9a:68:11:38:40:a5:98:4e:29:ba:d6:ef:b4:44:0d:f8:d4:48:
52:c4:31:30:ef:a0:2b:5d:6e:10:d1:ff:b0:1d:ee:d8:bb:f7:
00:5f:f1:cb:21:05:4d:2a:05:18:82:a4:48:5c:1f:5b:1d:28:
31:2c:eb:b2:f2:51:0b:74:0f:6d:1f:7e:0d:d7:f8:f8:98:80:
5d:6e:e3:c6:ec:a9:20:6c:18:16:15:3e:cc:52:93:35:4d:59:
31:bc:7c:1e:7a:82:f2:57:14:07:c5:72:e6:c0:2c:1b:12:ef:
cc:07:9d:37:c5:34:3e:98:b2:f0:81:0d:07:85:a5:f7:d2:5e:
8c:c1:22:64:8c:02:e2:c7:56:8c:0d:90:78:49:4d:44:23:c4:
b5:e0:d4:d2:fe:94:5e:9e:23:dd:01:45:b2:c1:32:ad:4c:7b:
bd:f0:6c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:32 2025 by rpki-client on console.sobornost.net