Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e31362e302f32312d3234203d3e203437353833.roa
File: 3134352e37392e31362e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: YKMDAIYiEKgUYR4+Qu219acLHy7UZP17FZPMbdNaBQc=
Subject key identifier: 28:E8:D2:AF:4F:D9:4C:35:DB:46:59:C3:91:E5:F4:38:36:C8:5D:AB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6E5B631AC93792B300A4A1EE0908B953125E2D38
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e31362e302f32312d3234203d3e203437353833.roa
Signing time: Thu 10 Apr 2025 10:08:34 +0000
ROA not before: Thu 10 Apr 2025 10:03:34 +0000
ROA not after: Thu 09 Apr 2026 10:08:34 +0000
asID: 47583
IP address blocks: 145.79.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:5b:63:1a:c9:37:92:b3:00:a4:a1:ee:09:08:b9:53:12:5e:2d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 10 10:03:34 2025 GMT
Not After : Apr 9 10:08:34 2026 GMT
Subject: CN=28E8D2AF4FD94C35DB4659C391E5F43836C85DAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:87:f1:ee:be:b3:99:42:12:81:ec:fe:83:cd:
e4:f8:38:25:36:d2:26:c4:22:81:0f:fd:c3:9c:35:
59:8b:78:86:27:48:13:13:f7:d0:5a:1b:1b:c5:9d:
56:ab:c6:90:be:96:18:9a:49:e4:52:bd:06:96:19:
0a:df:40:f4:f2:b9:21:2e:cc:77:cc:19:40:10:99:
b6:db:20:0f:10:85:5a:11:05:e7:b5:45:6b:fa:c4:
84:fe:c2:ac:20:71:07:ff:e6:b3:18:f2:11:95:a7:
7d:c4:7f:f1:a2:f5:78:b4:df:53:d3:72:6c:84:3d:
c1:88:d5:7c:3a:49:aa:72:18:64:4e:85:41:b3:77:
95:12:6e:b4:27:64:58:d3:39:b7:9f:3a:d2:89:24:
5f:97:01:ed:d1:37:e1:6a:6d:5b:16:ec:63:f1:e2:
db:f0:14:a3:e0:2c:4b:a9:b3:bd:51:7a:83:a0:98:
66:9e:04:0f:40:5a:32:0e:ee:9e:2a:91:4e:09:de:
f6:bd:57:3d:9d:55:8d:73:6d:1a:56:5c:87:af:3d:
01:76:c0:df:d1:21:75:15:5d:94:4d:24:cf:4e:3d:
23:f3:73:1c:f4:73:9b:3f:2c:b1:04:fb:f0:c2:72:
8c:58:51:f4:56:34:e3:5f:dc:1a:f4:93:e3:ff:04:
85:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E8:D2:AF:4F:D9:4C:35:DB:46:59:C3:91:E5:F4:38:36:C8:5D:AB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e31362e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.16.0/21
Signature Algorithm: sha256WithRSAEncryption
27:85:9d:0c:92:3d:20:a2:d5:5d:1c:97:5e:71:66:e8:60:31:
b4:99:0a:45:c2:d5:06:63:01:83:da:3c:ee:c3:c0:47:89:ea:
8d:a0:97:21:62:63:90:ed:b6:22:08:b2:99:1e:4d:2d:2f:b9:
6c:6c:0c:d2:ad:1c:60:42:6e:6f:72:4d:a8:d1:65:8c:72:06:
e1:06:54:08:dd:49:9e:e0:55:fb:a4:23:a5:e9:03:72:22:af:
f8:fa:09:e1:ae:45:98:b6:7f:b9:cc:dd:d4:8d:9d:f2:8a:be:
da:8f:27:e7:76:03:60:da:d9:47:bb:c0:d6:ac:73:62:73:a0:
be:c1:05:18:15:03:6f:48:0e:91:8e:6d:56:e7:ac:8a:06:db:
53:c9:d5:71:d9:a8:13:59:a4:ce:77:f9:ad:5a:96:03:38:88:
d4:de:d4:93:07:1a:5e:c3:ee:70:8d:6a:40:25:f8:c6:24:4c:
16:cf:f2:50:f2:e2:29:02:e6:de:5d:fc:8c:e2:83:f0:76:2d:
eb:2a:c4:46:9b:7a:d1:74:6d:fd:54:77:8f:27:75:47:b7:20:
b3:3d:80:93:d9:af:88:d4:1f:5d:73:33:83:7a:85:a1:3e:dc:
bb:4f:23:3e:a1:af:86:b7:92:05:6a:cf:e6:b2:cb:7a:e2:d3:
d7:f5:89:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:32 2025 by rpki-client on console.sobornost.net