Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37332e302f32342d3234203d3e20313336373837.roa
File: 3135382e3232302e37332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: +dCSaU8NAiyrsSnVFONVlY9W4oG44kl43UXkui0fVVc=
Subject key identifier: 13:6D:3B:86:45:5F:ED:EB:F5:D4:6C:A9:FA:15:F0:B8:77:B1:F0:5A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6924EE76D253A96C47472D54E5679209951F08D2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37332e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 13 Apr 2025 11:46:03 +0000
ROA not before: Sun 13 Apr 2025 11:41:03 +0000
ROA not after: Sun 12 Apr 2026 11:46:03 +0000
asID: 136787
IP address blocks: 158.220.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:24:ee:76:d2:53:a9:6c:47:47:2d:54:e5:67:92:09:95:1f:08:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 13 11:41:03 2025 GMT
Not After : Apr 12 11:46:03 2026 GMT
Subject: CN=136D3B86455FEDEBF5D46CA9FA15F0B877B1F05A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:da:21:a9:4d:57:2a:04:b8:d5:ed:82:51:b3:
b1:16:be:f3:07:ba:95:87:a8:5e:63:64:7d:ab:6a:
68:9b:db:06:9f:ce:8d:d9:77:40:3b:76:4d:68:15:
f1:4a:b1:8a:a4:f9:fb:4c:82:76:24:18:70:8b:7c:
0d:1f:7d:0e:7c:c3:1d:92:d0:a6:58:d5:b0:e6:03:
6d:e5:3d:e1:e3:40:26:0a:d0:a1:ab:16:3d:bd:d4:
9a:a0:1b:07:9d:cf:58:b0:7b:5b:f7:ab:d2:ec:16:
6b:24:19:a9:fa:40:03:eb:1d:8d:c0:29:f9:e1:86:
fe:93:5d:b9:e5:bf:ab:ae:28:8d:92:1a:2c:fb:3e:
1f:b4:51:94:0d:60:b7:6e:95:c1:ef:00:cc:2a:b4:
3d:63:65:b8:84:b1:f7:f0:45:1d:93:b6:52:c9:e4:
93:76:2b:ea:a7:13:f0:43:39:08:95:5e:cb:d4:b2:
0c:23:8b:c4:23:5d:18:78:4d:66:f9:64:f0:15:ca:
02:08:8e:73:bf:ad:54:55:e8:78:04:c0:df:1e:08:
79:ad:e6:23:33:7d:0e:29:6c:ae:65:28:03:9d:00:
27:00:3b:b4:df:58:0a:41:b2:f5:04:76:5f:53:fe:
88:1c:a7:98:5a:c2:0b:97:01:81:4e:fd:d1:82:46:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6D:3B:86:45:5F:ED:EB:F5:D4:6C:A9:FA:15:F0:B8:77:B1:F0:5A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.73.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:49:b1:ac:ae:58:3f:ed:fe:c8:c4:6a:42:16:98:d0:3a:fd:
22:db:c3:fc:fe:ea:03:aa:2e:d6:91:53:ec:cd:3b:3b:8e:9b:
01:55:3e:5b:60:4a:66:84:d2:14:3d:5a:8e:63:0b:e7:18:03:
3c:07:f4:1f:a6:05:71:eb:ec:f4:73:ef:27:a7:d1:28:c0:67:
70:65:a8:ed:5a:f9:cd:9d:f7:ed:2e:64:92:ce:d6:75:62:67:
cb:ba:67:5d:62:57:d1:cf:83:b9:f1:92:55:86:6a:8a:60:4f:
a8:ff:71:f4:40:52:72:56:9f:f8:34:fd:e8:44:3d:6a:b1:07:
49:47:ac:70:a6:45:c5:eb:27:09:00:aa:e2:26:cd:32:0f:87:
e8:d1:8e:24:cc:0b:3a:d7:e0:d9:75:23:25:08:e5:94:63:ea:
63:2f:54:af:7b:e0:5e:6c:da:83:93:7b:69:ba:b4:a4:12:d8:
1f:3d:75:30:4e:4b:48:e9:6c:9b:b7:07:ba:b3:c8:3b:6c:6b:
a2:e2:a8:5c:09:c4:65:be:01:89:23:da:2a:db:ce:08:cb:e3:
c1:f0:17:06:4a:03:60:cb:d2:5a:47:2f:2e:06:84:26:92:4c:
70:52:7c:d0:03:8c:76:92:85:19:ac:c2:ed:27:84:38:5a:e0:
d2:78:f2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:32 2025 by rpki-client on console.sobornost.net