Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e35362e302f32312d3234203d3e203437353833.roa
File: 3134352e37392e35362e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: LcmHnxcD6NFhGjkMKfukmHo7VQIalS+aiiGz7DNiRCQ=
Subject key identifier: 32:D3:95:B9:18:8C:54:F2:12:04:F7:DB:43:BC:92:88:E8:90:0C:2B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 16AE10A1223BC8A42C9A639BF224C317F195EFAA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e35362e302f32312d3234203d3e203437353833.roa
Signing time: Thu 10 Apr 2025 10:08:50 +0000
ROA not before: Thu 10 Apr 2025 10:03:50 +0000
ROA not after: Thu 09 Apr 2026 10:08:50 +0000
asID: 47583
IP address blocks: 145.79.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ae:10:a1:22:3b:c8:a4:2c:9a:63:9b:f2:24:c3:17:f1:95:ef:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 10 10:03:50 2025 GMT
Not After : Apr 9 10:08:50 2026 GMT
Subject: CN=32D395B9188C54F21204F7DB43BC9288E8900C2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:48:25:7d:59:17:7f:f7:44:c8:26:50:df:1b:
57:30:20:46:54:c0:ed:03:04:6b:a4:8b:5d:ea:60:
c9:db:21:97:55:00:ff:f7:6b:60:7a:24:4b:4e:23:
3d:1d:a0:be:fc:af:2b:00:ab:fb:a7:1d:c6:78:b3:
76:e6:40:2f:46:3c:dc:f7:a4:d8:1d:0d:17:3a:cd:
c9:b6:60:13:06:6a:ba:75:72:e7:47:f8:71:bc:ea:
c0:e3:f5:42:e6:f3:66:bb:e6:58:a3:7f:42:aa:ac:
a7:a9:4a:e1:ed:05:d0:36:59:73:25:be:c7:66:8f:
37:da:a1:32:6a:d2:75:00:51:c3:ec:6f:4b:51:7f:
21:45:17:d2:a1:59:1a:04:92:ee:0d:00:ac:60:e1:
60:8f:c6:d9:e7:99:69:54:46:cf:64:d8:c3:db:38:
37:e9:6f:a5:a9:dc:c3:8f:b8:2e:78:d8:e5:aa:6a:
e9:24:ea:e7:27:73:e8:d1:b9:24:8c:84:9e:71:e4:
ac:31:63:86:df:51:54:bf:36:bf:6b:d7:10:7c:4b:
46:43:e0:19:90:f0:b2:94:ca:cc:ff:71:62:a8:92:
9b:cb:45:97:c8:2e:ec:47:7f:21:b9:17:b6:1a:64:
9c:2e:9e:86:40:8c:fb:2c:22:c0:d0:46:db:40:7a:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D3:95:B9:18:8C:54:F2:12:04:F7:DB:43:BC:92:88:E8:90:0C:2B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e35362e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.56.0/21
Signature Algorithm: sha256WithRSAEncryption
47:93:4e:f1:4a:5e:f0:eb:cf:74:25:20:8c:6c:6a:56:b8:9b:
9d:a3:30:40:4a:84:ec:93:d2:41:88:7b:c1:81:56:af:04:ff:
e8:6f:20:25:81:a2:9e:5f:66:6d:00:d5:c8:f9:a1:76:bb:9c:
89:c3:c8:26:9a:0a:9d:3e:66:bb:a8:a4:8f:ca:ee:bb:5e:4e:
f6:91:08:52:d5:ac:15:3c:c1:14:e3:99:01:8e:6e:69:23:1c:
33:32:ab:d3:90:5d:3a:fb:92:92:b9:48:1f:fb:c2:6c:24:2e:
32:5d:0a:b5:0d:85:72:cf:5f:f2:f5:6d:af:ec:0f:b3:39:ef:
f2:3a:27:55:55:7c:e9:b3:3f:48:ce:94:5b:f5:d8:8e:10:6c:
9c:1a:ec:8f:12:78:84:f2:e5:a3:6b:35:70:39:c0:84:4d:ed:
ac:65:2a:ad:b7:94:87:ce:27:db:5c:2d:2f:b6:ca:0e:ae:0e:
7a:e9:35:ac:8a:5e:5c:8f:41:28:ef:03:a1:4a:a1:06:e7:f8:
fe:fe:32:70:19:ca:18:15:64:5b:b7:92:5d:dc:53:a2:ca:c3:
f9:b4:48:64:82:37:b6:22:ce:0f:36:21:5e:6c:b6:ff:58:aa:
98:a0:d6:e8:df:0d:e0:64:de:12:c5:aa:e5:e2:a9:0d:00:90:
b4:b7:83:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:32 2025 by rpki-client on console.sobornost.net