Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e39302e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e39302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: r3ykYl2ntdME53baTa4rZhIGkw4yTLtZCFr8G/zP24M=
Subject key identifier: 53:20:AB:61:28:08:2E:2F:C9:B5:42:A3:EF:66:5E:37:7C:7D:B4:20
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 532410AD7AC59534AA188C32A0EB7FA5A974441F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e39302e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 13 Apr 2025 11:46:04 +0000
ROA not before: Sun 13 Apr 2025 11:41:04 +0000
ROA not after: Sun 12 Apr 2026 11:46:04 +0000
asID: 136787
IP address blocks: 156.67.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:24:10:ad:7a:c5:95:34:aa:18:8c:32:a0:eb:7f:a5:a9:74:44:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 13 11:41:04 2025 GMT
Not After : Apr 12 11:46:04 2026 GMT
Subject: CN=5320AB6128082E2FC9B542A3EF665E377C7DB420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f8:6f:4a:7a:98:ca:89:21:3f:c6:35:fb:64:
e1:ab:95:6d:46:bb:19:b5:8d:d5:19:f9:35:2c:4c:
51:9f:b1:34:ed:9d:d4:c5:65:eb:0f:74:89:97:ff:
2b:74:0e:fe:ac:6a:71:89:3b:91:2c:90:fc:48:ca:
85:0b:16:7e:fd:b9:f8:99:6d:8e:71:9b:d2:37:f4:
92:46:76:99:90:28:72:57:76:3d:b7:51:74:87:12:
49:b6:b6:38:4d:8b:17:e4:f8:ca:20:3a:c6:46:07:
b2:ed:69:cf:7e:46:29:bb:e4:1e:3b:ef:c9:1e:ca:
ef:17:42:13:79:be:dc:80:71:ed:18:89:12:e1:e7:
9b:02:19:5f:40:93:7a:53:12:da:bf:7f:ae:be:60:
4c:29:84:fb:ff:5a:86:da:1d:7f:09:bf:bc:c7:a8:
2a:14:c2:82:c0:a0:af:28:ac:cd:82:6b:8a:65:e4:
73:a1:8e:59:ed:b6:d6:b5:e1:09:9e:e1:e4:44:11:
d3:06:1e:72:dd:9d:9a:0b:e6:18:cf:a7:9c:eb:ed:
52:e5:91:ab:f7:6e:6d:1a:aa:5f:ed:19:cb:43:20:
c5:b6:fa:91:65:71:17:2e:d5:d9:3e:b2:2d:f3:7c:
cf:23:df:67:25:9e:52:b7:fa:fd:b4:1c:75:ec:18:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:20:AB:61:28:08:2E:2F:C9:B5:42:A3:EF:66:5E:37:7C:7D:B4:20
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e39302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.90.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:09:40:24:fe:ae:cb:2c:bb:55:eb:ac:12:7b:61:37:27:ba:
42:39:33:c6:31:5b:9d:05:e2:c0:ed:a6:25:62:59:ff:47:5d:
1e:6b:bc:98:3f:c7:8d:ab:eb:ce:3a:36:a6:46:ce:da:39:cc:
1f:1d:5c:50:71:6a:10:c4:17:c6:c5:d5:15:54:90:29:b5:c4:
b4:02:bb:54:35:d8:c2:36:91:db:0e:3b:74:d3:cb:7c:74:48:
15:14:a9:bb:25:c7:58:2d:b7:ad:a9:85:2d:56:65:df:c8:20:
cf:54:b0:1e:4d:f0:6c:77:2c:aa:8b:7e:c6:43:f2:43:f3:d9:
76:94:83:19:2d:7d:68:ae:86:93:9d:ba:f9:95:5d:86:36:90:
cc:09:1f:aa:20:0b:fc:15:7c:e3:f2:3b:bc:c5:c1:d6:66:da:
8d:31:ac:2b:8d:18:bc:bd:19:91:a3:72:a2:ea:b4:ca:53:e6:
75:21:77:b9:86:ce:e7:07:35:6b:8e:92:16:73:36:0e:d1:58:
f1:10:fd:b6:94:be:1c:e2:77:b6:5c:58:31:69:05:a4:75:31:
42:cb:8e:1b:28:ab:db:8d:84:73:e7:96:b4:df:9f:9a:36:dc:
37:d5:e5:b6:7a:09:0f:24:56:23:85:cc:6f:94:7d:ec:c3:8f:
63:50:2f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:32 2025 by rpki-client on console.sobornost.net