Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139322e39392e302f32342d3234203d3e20313336373837.roa
File: 3138352e3139322e39392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: tMPbZ6u0jT1KLKMaVS+ppSC5JNGEVrFCfPlki6M2c3M=
Subject key identifier: 7B:B4:19:B9:90:05:FB:E4:AE:6F:8C:7D:EA:39:84:7A:65:BE:BE:24
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2948C83F631F7AB9369DFEB60815E683883A14DE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139322e39392e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 13 Apr 2025 11:46:04 +0000
ROA not before: Sun 13 Apr 2025 11:41:04 +0000
ROA not after: Sun 12 Apr 2026 11:46:04 +0000
asID: 136787
IP address blocks: 185.192.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:48:c8:3f:63:1f:7a:b9:36:9d:fe:b6:08:15:e6:83:88:3a:14:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 13 11:41:04 2025 GMT
Not After : Apr 12 11:46:04 2026 GMT
Subject: CN=7BB419B99005FBE4AE6F8C7DEA39847A65BEBE24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:a0:29:d2:06:c7:1f:93:86:31:73:43:b2:
a0:13:e4:64:52:3f:ea:76:dc:4a:95:a4:95:26:e2:
14:af:76:b0:f4:f7:f2:e9:e2:54:db:c2:1d:ac:60:
fa:1c:34:d1:dd:98:a4:1b:e0:ff:c8:a2:27:76:fe:
0b:74:a4:1a:63:3c:14:d4:a2:73:8b:34:87:84:20:
c9:a6:8b:1b:3e:45:27:37:f2:6d:94:7e:74:3a:10:
24:66:b4:90:74:2f:9a:49:21:4a:ea:34:6d:7e:91:
77:d7:5d:d1:ec:58:e6:c8:1f:cf:93:a2:fb:32:f7:
73:f0:af:01:02:ff:44:e1:ba:2e:d5:88:52:24:3c:
fd:e8:bf:b8:52:50:a0:7f:1f:5d:c8:ca:08:fe:b3:
7c:60:e1:24:cd:d5:24:44:66:a7:14:d3:69:17:ed:
02:d4:3b:44:1d:45:db:b9:fc:15:67:e6:17:69:da:
d0:38:f4:77:ba:72:51:43:1d:35:cb:37:e7:59:07:
c6:50:62:15:b8:7f:f2:2b:44:77:0f:ff:9a:aa:ae:
23:ea:b5:f1:c3:e5:42:42:e5:52:a1:e1:2b:a0:86:
b4:c4:de:d0:3b:94:e9:d5:a1:3a:7b:41:aa:6b:37:
64:c3:5c:0c:2b:e0:4c:a1:77:5a:0a:e4:c3:0c:ff:
9a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B4:19:B9:90:05:FB:E4:AE:6F:8C:7D:EA:39:84:7A:65:BE:BE:24
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139322e39392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.99.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a2:dd:49:6f:19:a2:87:45:ef:0d:aa:08:c9:da:b4:c3:5b:
1d:1d:0b:68:c4:c5:93:4a:81:03:63:58:e0:7d:0b:2c:4d:8b:
7a:8f:0d:be:4e:76:45:60:29:2d:fb:13:79:83:1a:c7:9f:fd:
89:79:05:d8:eb:ab:eb:02:1b:82:b0:af:af:29:fc:d6:ba:b6:
c3:77:d1:11:bb:a7:d3:02:e0:d7:d8:93:05:43:c5:f5:1f:59:
21:13:f3:e8:3b:9a:fe:04:63:96:09:1a:62:be:55:e9:b9:a2:
08:c7:55:f0:82:2a:22:0a:72:c2:f4:54:38:e4:21:a1:ff:9e:
2d:ab:84:13:2c:1e:c1:93:9c:cd:df:18:e2:70:f8:79:f0:09:
bf:75:c8:08:66:43:92:02:34:4a:be:d3:2c:db:c4:54:ff:2d:
45:ad:c0:9a:55:93:93:26:b2:f5:f2:29:69:1c:56:34:ad:ef:
57:c9:04:c2:98:db:21:10:2a:38:85:5b:13:14:73:dc:51:bc:
b3:24:a9:08:4c:5e:2d:14:03:ac:3b:52:c4:a0:27:e7:b1:24:
28:57:85:98:23:2e:d9:5a:1b:4d:88:94:98:f1:90:e5:01:c3:
86:c1:09:d6:aa:c3:02:f4:f3:0f:85:de:60:07:62:86:be:a9:
f1:18:b1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:32 2025 by rpki-client on console.sobornost.net