Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e382e302f32312d3234203d3e203437353833.roa
File: 3231322e38352e382e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: K0Qjf9am3SaZAt6zMCUnA388iG1yz7t7cNOZrYAm9n8=
Subject key identifier: 66:80:85:5C:0B:77:64:34:5D:E4:76:5C:BC:7E:ED:36:CA:D1:BB:46
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1DB6797BCDC081786FC1E0558B2EAE81C8964207
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e382e302f32312d3234203d3e203437353833.roa
Signing time: Wed 09 Apr 2025 11:44:06 +0000
ROA not before: Wed 09 Apr 2025 11:39:06 +0000
ROA not after: Wed 08 Apr 2026 11:44:06 +0000
asID: 47583
IP address blocks: 212.85.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:b6:79:7b:cd:c0:81:78:6f:c1:e0:55:8b:2e:ae:81:c8:96:42:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 9 11:39:06 2025 GMT
Not After : Apr 8 11:44:06 2026 GMT
Subject: CN=6680855C0B7764345DE4765CBC7EED36CAD1BB46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:ec:e9:d2:74:6a:ac:72:dd:a2:0b:ae:bd:
d3:5f:43:b5:7e:53:99:57:17:96:dc:db:64:71:79:
d2:76:93:7e:85:76:e0:ae:52:07:26:3b:e9:ca:b9:
43:c8:01:60:de:70:33:8f:51:da:cd:f1:d5:d8:36:
03:35:23:0b:49:79:7a:0e:e4:88:41:c7:35:63:0e:
93:9d:87:17:74:30:84:28:6b:af:36:0e:55:31:bd:
36:ae:fb:38:1c:38:e7:88:b6:8c:ca:3c:65:6e:27:
a5:35:c1:9b:8d:0b:25:0e:61:24:a2:b4:d7:48:7c:
94:27:58:eb:18:5e:7b:b7:a0:4a:fc:98:89:b3:7b:
a1:4b:4b:05:e9:34:bf:fe:4c:12:2f:79:30:af:aa:
59:1f:3c:9b:3f:b3:34:18:ea:d4:92:15:ce:ed:45:
15:be:dd:b3:dc:2e:9c:9b:20:4f:16:4f:46:61:23:
39:f0:66:2b:c9:6f:f7:03:d8:5a:f9:c4:0c:e4:8b:
f4:0a:b8:f7:0f:d3:62:f7:19:78:d2:bd:99:0e:a6:
a9:51:99:bf:fa:94:80:8a:e1:c8:0b:27:f0:fc:7e:
01:45:46:96:4a:88:52:ef:c6:95:77:c9:0a:4a:33:
6e:4f:0d:b4:82:25:61:61:ca:c5:1d:9a:84:84:27:
b2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:80:85:5C:0B:77:64:34:5D:E4:76:5C:BC:7E:ED:36:CA:D1:BB:46
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e38352e382e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.85.8.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:5e:4f:f4:ed:f0:75:ba:90:68:78:be:c3:ab:c7:b8:25:d0:
f8:88:c2:a1:0a:c8:bb:d1:03:a5:ce:a1:a9:ef:db:3d:1b:64:
a1:49:e7:98:88:39:09:2d:d7:0a:da:ac:41:fe:8b:b6:dc:91:
ce:f5:05:8d:69:e3:38:98:86:47:d2:09:07:dc:77:2b:13:ea:
2f:04:ee:e6:72:48:38:70:7a:ad:b5:84:d5:96:ab:15:12:d1:
2d:32:82:67:8a:79:d8:a6:15:9f:2b:2a:ed:a6:d8:3c:6a:94:
01:83:31:ee:17:56:10:bd:de:6b:a5:27:56:8f:89:a0:e5:92:
53:10:09:f6:4b:f9:36:55:25:82:d8:4e:31:dc:1d:09:9d:a5:
6d:44:fa:32:c8:46:8e:14:db:13:53:78:39:35:9a:6f:c0:3a:
fb:69:b1:c8:72:56:7d:d0:ba:11:55:a8:63:8a:8a:57:c6:28:
55:7e:42:ed:03:bc:75:15:15:f6:22:d0:59:ce:2f:a1:33:b2:
9d:52:0f:b1:87:07:c8:f4:55:e6:01:62:86:ec:77:8a:fc:25:
cd:af:2d:c4:5e:71:da:ea:1d:6c:7c:b8:6b:13:bf:3d:7a:12:
35:6f:8c:eb:5d:a4:81:1e:7b:21:e4:3b:ef:dc:9c:8c:c4:63:
74:42:da:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:33 2025 by rpki-client on console.sobornost.net