Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3232342e302f32312d3234203d3e203437353833.roa
File: 38322e3139382e3232342e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: xbX6PlX4FLvVotTRb8nOJIHhpKuW7QogGi8/RCaTGUM=
Subject key identifier: F5:9E:BE:6D:EE:F8:40:38:0F:13:3E:4F:38:6E:F9:8A:70:5A:49:2D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 64DE56F0E57D3495EDF989B691A5358798B92A4B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3232342e302f32312d3234203d3e203437353833.roa
Signing time: Fri 04 Apr 2025 13:13:00 +0000
ROA not before: Fri 04 Apr 2025 13:08:00 +0000
ROA not after: Fri 03 Apr 2026 13:13:00 +0000
asID: 47583
IP address blocks: 82.198.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:de:56:f0:e5:7d:34:95:ed:f9:89:b6:91:a5:35:87:98:b9:2a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 4 13:08:00 2025 GMT
Not After : Apr 3 13:13:00 2026 GMT
Subject: CN=F59EBE6DEEF840380F133E4F386EF98A705A492D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:37:e1:48:91:b6:6a:ef:ec:6d:73:b1:26:
ba:59:a5:11:af:f8:31:17:b5:51:80:38:12:de:9e:
bc:f9:57:3c:26:6a:62:4d:de:4e:4b:4a:17:e2:cb:
89:5a:2d:8f:b6:3c:b2:79:bd:3a:f3:c1:f3:80:56:
98:b8:3c:4e:1c:83:96:89:bd:33:ce:5c:8c:d1:74:
bd:28:41:7c:8d:d3:98:e1:3d:99:de:d0:fe:e3:00:
05:08:fb:fb:cd:d7:68:4f:6d:cc:83:93:1f:1a:86:
9f:6a:89:ea:7c:9e:3c:0b:61:6a:c0:16:b0:96:d9:
bd:36:6e:b9:00:42:0d:9d:95:06:e8:45:31:b5:81:
d7:ba:df:72:ac:21:0e:ce:7a:33:7c:ae:84:1f:f8:
82:41:23:3c:8f:cb:18:de:1b:2a:66:f1:14:1f:26:
66:78:2e:4a:8d:72:28:86:04:c7:22:dd:be:92:a7:
08:f3:ba:82:9f:2f:78:cf:45:65:07:26:96:df:5b:
9e:11:e3:31:88:67:75:59:f2:c6:c1:48:c3:9b:24:
6e:2b:ec:ae:c6:ef:67:e4:9b:e3:e2:c3:95:2e:ee:
13:4b:30:ce:16:82:ca:c3:08:f0:f6:a8:91:80:68:
cb:39:82:94:75:ae:3d:36:fb:73:d8:7e:37:c5:80:
a4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9E:BE:6D:EE:F8:40:38:0F:13:3E:4F:38:6E:F9:8A:70:5A:49:2D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3232342e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.198.224.0/21
Signature Algorithm: sha256WithRSAEncryption
37:8c:25:9b:8b:44:1e:13:18:54:6a:2f:e9:cb:77:48:8e:ab:
dc:b2:71:6e:65:0b:83:97:2c:3b:84:59:eb:ae:bd:82:bd:67:
e3:d5:ba:bc:24:81:fd:b3:6c:9b:97:71:02:fa:59:90:87:38:
91:bb:61:4c:d7:b8:95:17:11:a1:7c:7a:48:73:76:34:6c:0a:
40:ef:9f:b5:ca:b7:2d:8e:40:5d:4c:e4:ba:8c:d1:a6:28:d0:
18:49:af:af:d4:0b:22:4c:89:02:bf:45:3f:cc:fa:cd:b9:c5:
35:01:c6:16:a0:89:68:6e:6f:a8:8e:12:f8:41:da:db:8f:50:
94:16:14:58:65:a7:c0:7b:fb:73:d6:6e:e1:cb:30:a1:f0:0c:
f5:a8:50:f7:b3:24:3f:76:10:1a:04:6b:ca:f6:76:30:9c:19:
59:18:58:a0:51:56:e9:2c:c3:42:a9:e4:41:94:c6:43:7a:3e:
0c:f3:c5:89:b3:a9:bd:f3:b4:8f:35:db:53:e9:02:5c:ef:5d:
37:dc:05:07:2b:75:86:d8:60:46:57:f1:dd:1a:f1:16:d9:fe:
1e:b1:38:6e:34:34:07:4a:9d:a3:05:f0:92:87:b6:d0:9f:62:
e8:8f:bf:a4:3d:81:aa:91:2e:f5:9b:0d:79:a1:d1:ac:cc:22:
e6:78:87:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:34 2025 by rpki-client on console.sobornost.net