Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e32342e302f32312d3234203d3e203437353833.roa
File: 3134352e37392e32342e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: 5zjmJuivVAq8yp8sYrPFAvbMN9Jfxk4P2JJS7ZD8jnQ=
Subject key identifier: 11:55:FB:3F:9A:2D:D1:FC:38:EA:97:E4:2B:14:4C:8A:0A:78:70:13
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 521D3261FD41A1701389AD33526BFE62675D68B9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e32342e302f32312d3234203d3e203437353833.roa
Signing time: Thu 10 Apr 2025 10:08:42 +0000
ROA not before: Thu 10 Apr 2025 10:03:42 +0000
ROA not after: Thu 09 Apr 2026 10:08:42 +0000
asID: 47583
IP address blocks: 145.79.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:1d:32:61:fd:41:a1:70:13:89:ad:33:52:6b:fe:62:67:5d:68:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 10 10:03:42 2025 GMT
Not After : Apr 9 10:08:42 2026 GMT
Subject: CN=1155FB3F9A2DD1FC38EA97E42B144C8A0A787013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:27:e6:ed:78:60:2c:1e:51:6e:ff:5d:cd:
a5:ee:1a:bf:ae:b6:93:78:6c:c0:d7:a4:b9:fe:96:
72:28:d0:68:4c:ea:4a:50:90:c8:08:1b:b8:f5:99:
05:39:21:4c:81:bb:a1:7a:b5:05:95:2d:76:8c:4e:
c0:7c:e0:3e:5f:13:fc:64:0f:10:2e:c4:ae:ec:6b:
63:eb:7f:b2:96:a3:aa:7b:b4:85:dc:68:75:da:4e:
3f:b6:63:fc:29:9d:c1:49:da:c3:08:04:7c:52:a1:
b1:88:c4:8a:52:a9:92:88:d7:ca:52:f9:72:7b:ef:
e1:60:ec:ff:b7:46:1e:ac:56:2b:b1:d1:cb:a3:a2:
8a:8d:50:5c:c6:62:81:1e:57:c5:ae:cd:b7:48:8a:
23:91:bd:6d:a3:2d:e6:a9:13:90:95:b8:46:9b:d8:
25:c4:39:fd:9c:e2:35:a4:a6:04:39:ee:0c:8c:ad:
8b:63:71:5d:40:ee:77:72:ec:bf:11:1f:84:49:3e:
43:e3:1f:51:68:0e:31:d3:99:db:15:e0:8f:d1:c0:
36:18:fa:86:2c:88:dc:23:22:d1:7c:8b:8b:9a:83:
be:b9:eb:98:7b:ad:85:d1:c7:2b:bc:a0:72:ae:bd:
09:db:71:b7:45:67:d5:de:6f:3a:db:7d:5c:63:5f:
9e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:55:FB:3F:9A:2D:D1:FC:38:EA:97:E4:2B:14:4C:8A:0A:78:70:13
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e32342e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.24.0/21
Signature Algorithm: sha256WithRSAEncryption
10:2d:41:28:d0:b0:4b:fa:64:6b:30:ac:99:4e:28:e7:e2:03:
50:43:97:6d:cd:4a:12:f1:8e:a6:01:ae:a6:1c:3e:51:4d:ff:
1a:29:4d:d5:b0:e4:ef:7c:c3:3d:41:d3:5a:7d:5e:c7:05:2a:
89:d2:b2:22:74:27:96:9a:7f:ff:90:27:cf:77:54:6e:7b:46:
e5:14:8c:65:e6:ba:27:00:55:19:76:93:f2:88:e8:fd:e8:f4:
10:ff:89:1e:9f:82:b8:e6:21:e6:07:94:6f:b6:bd:af:0e:e2:
5f:74:f8:53:f8:a1:d0:f6:91:c3:ef:fe:ff:87:c9:76:a9:b3:
b1:55:c8:d3:76:82:db:33:54:93:c6:b4:7a:9a:9d:5b:34:0a:
d7:d6:88:1b:1a:f6:05:86:48:24:a7:4f:0d:31:43:31:93:d5:
a5:52:75:14:bb:69:45:bf:25:73:05:55:83:c1:2b:cf:1f:1b:
0f:3c:d2:e9:c9:ba:a7:f9:0a:0f:93:1e:78:24:82:66:79:b4:
b1:64:70:f3:94:00:fe:67:af:e1:db:45:4a:ff:72:2e:b2:1c:
88:dc:b2:1a:8d:ca:ff:29:fd:b6:d1:b2:b2:3c:9f:5e:84:be:
91:66:ff:ce:f4:91:5c:2a:bb:e0:c2:70:67:79:94:90:83:de:
46:26:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:32 2025 by rpki-client on console.sobornost.net