Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3136342e36342e302f32312d3234203d3e203437353833.roa
File: 3139342e3136342e36342e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: 7PzcOi76oAMP9/6/Go9bE6tF0SpWz66nXwkS/bNVqlY=
Subject key identifier: EF:B5:0F:B8:D8:63:64:9C:62:60:6A:21:95:98:A2:B8:85:99:77:C2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6C7BA718D188498EE96749E2A864862E122FD343
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3136342e36342e302f32312d3234203d3e203437353833.roa
Signing time: Sat 05 Apr 2025 07:45:58 +0000
ROA not before: Sat 05 Apr 2025 07:40:58 +0000
ROA not after: Sat 04 Apr 2026 07:45:58 +0000
asID: 47583
IP address blocks: 194.164.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:7b:a7:18:d1:88:49:8e:e9:67:49:e2:a8:64:86:2e:12:2f:d3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 5 07:40:58 2025 GMT
Not After : Apr 4 07:45:58 2026 GMT
Subject: CN=EFB50FB8D863649C62606A219598A2B8859977C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b0:b0:69:7f:fd:e7:b9:f2:fd:31:27:63:d4:
ed:48:14:c5:1b:f4:03:1f:f1:10:0b:f5:fa:08:fe:
2a:98:53:c2:fd:19:4d:22:09:a7:96:e9:4a:c9:2f:
54:51:43:58:78:42:94:c6:d2:a5:3d:26:35:c9:ac:
d6:18:34:d2:b9:00:19:a5:8f:35:bc:fb:0f:8f:11:
5e:d0:26:98:4a:78:7e:2b:b9:03:7d:9f:78:e9:08:
48:36:6c:06:14:70:4b:c5:46:3c:ef:0e:da:39:e1:
76:a5:74:03:67:22:6c:48:b5:d3:81:88:8b:30:18:
61:bd:a3:76:22:f7:92:cd:69:f0:58:51:cc:8e:75:
0e:34:c9:80:18:89:f1:3a:55:1a:0c:b9:f2:fd:4e:
9f:66:ef:8b:b0:c7:1d:99:7a:c6:02:40:ac:6e:f9:
6a:8b:65:01:0f:0d:e4:24:b3:88:91:b5:b2:f4:8a:
32:b6:10:7c:f4:6c:95:78:9b:ab:56:6e:fb:45:48:
3e:70:81:f6:b8:c4:d4:46:9c:96:c9:94:de:66:f0:
e4:32:85:76:f4:cc:0a:50:f2:fb:28:bf:72:50:a7:
1a:b6:14:ce:ce:ad:70:68:4c:a9:fe:73:cf:fd:23:
2e:d9:d2:78:7c:c7:d7:7c:11:6a:d8:19:27:5f:e3:
58:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B5:0F:B8:D8:63:64:9C:62:60:6A:21:95:98:A2:B8:85:99:77:C2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3136342e36342e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.164.64.0/21
Signature Algorithm: sha256WithRSAEncryption
67:e9:c5:74:65:11:71:64:75:d1:9e:ec:a3:84:10:2a:ae:b5:
ef:b9:78:5d:d5:a2:40:3a:23:51:56:9c:e3:95:fc:9d:0f:cf:
7b:fe:c7:27:c6:11:78:13:5e:09:60:5f:16:2c:f5:15:73:09:
77:bf:db:fb:ff:45:75:f2:ca:d2:04:08:b4:1f:65:81:14:c0:
08:e9:6f:b9:32:f6:78:32:94:b3:d3:06:a1:f5:1f:0b:5d:56:
89:5c:a0:8f:5e:bc:8a:7e:f4:76:1a:5a:4a:62:da:92:15:16:
9e:08:d8:d4:4d:72:3b:cf:ed:86:c4:e9:f5:d0:61:c3:21:47:
75:4e:ec:e1:91:ac:6d:9b:08:f6:a0:88:2f:e2:0a:05:f9:c6:
b0:df:78:98:e9:c8:5e:10:0c:17:df:49:7f:94:22:78:ee:56:
24:80:68:e7:f4:51:16:c7:d2:5b:81:78:58:7a:95:76:6b:f6:
06:44:a4:85:6c:be:61:3f:bf:2e:9c:52:4e:39:b7:a3:54:04:
b6:91:08:79:a0:11:4a:87:42:f8:95:b9:a9:b1:7f:17:bd:59:
f8:89:8d:c0:b2:de:46:ad:62:55:51:6b:ae:ae:24:c8:58:90:
89:14:c0:0d:80:0c:4e:d6:5e:87:db:17:9c:10:c0:01:67:46:
ec:ce:b6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:33 2025 by rpki-client on console.sobornost.net