Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3136302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: synOrhOyJsLRWK8mtVhjU3mBnaoeUCX2NTH2qlkTXFo=
Subject key identifier: 78:F0:71:5A:B6:F1:81:17:E5:D1:3F:9C:12:D9:DB:E5:4A:63:FF:EC
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 67F8BFDCC3AC64976C5B6C277B61AA2E6F48AD77
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e20383334.roa
Signing time: Fri 17 Jan 2025 07:44:32 +0000
ROA not before: Fri 17 Jan 2025 07:39:32 +0000
ROA not after: Fri 16 Jan 2026 07:44:32 +0000
asID: 834
IP address blocks: 109.110.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:f8:bf:dc:c3:ac:64:97:6c:5b:6c:27:7b:61:aa:2e:6f:48:ad:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jan 17 07:39:32 2025 GMT
Not After : Jan 16 07:44:32 2026 GMT
Subject: CN=78F0715AB6F18117E5D13F9C12D9DBE54A63FFEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b6:d9:a4:4f:3b:4b:97:85:9d:ab:11:2a:d8:
ee:f5:f9:7e:0d:92:d2:87:23:66:6b:e7:c1:05:c3:
5f:da:49:a6:be:0b:21:58:39:2c:49:0f:d7:c7:35:
60:8f:24:f3:b7:61:7f:2b:ec:7b:95:f5:16:9a:a0:
19:a5:b1:29:27:28:18:f9:f8:df:c9:cd:cf:7f:e9:
55:ae:79:bc:3f:8f:0a:82:26:d6:16:db:e1:00:52:
58:57:51:2f:b7:17:b4:3d:31:fe:3d:26:d2:ca:f1:
40:45:14:10:3b:30:b7:9d:88:6c:60:4e:1d:2b:b6:
2a:ce:2d:7e:78:37:df:38:80:49:93:76:67:3d:d7:
1a:28:f9:4d:07:47:85:59:e2:bd:c5:57:2f:4f:89:
29:4d:03:94:b5:d2:bb:60:6d:79:fc:fe:d1:96:41:
43:b2:06:06:21:6e:af:ca:8c:5d:70:16:f3:a6:b8:
45:c5:ad:4b:7c:90:08:68:19:3a:ff:c7:1d:a7:10:
45:92:90:7c:f6:df:25:ae:b4:1e:2e:53:bf:bb:86:
da:bc:21:71:db:04:ac:47:1c:99:d2:7a:1c:a4:c3:
03:d6:45:81:99:dc:76:95:f7:4c:67:cc:84:6e:d5:
ad:07:90:df:ee:c4:09:48:0a:63:64:d1:0a:91:96:
43:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F0:71:5A:B6:F1:81:17:E5:D1:3F:9C:12:D9:DB:E5:4A:63:FF:EC
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.160.0/24
Signature Algorithm: sha256WithRSAEncryption
26:55:67:a1:e9:71:13:a3:7c:71:22:af:e0:cc:a4:6b:da:3b:
13:cf:17:e1:4b:0e:bc:aa:1b:0a:fe:ce:d6:0e:97:0a:ee:63:
ca:b5:0d:ca:01:67:46:43:07:bb:b4:df:ed:d2:a3:3b:13:d0:
16:b9:17:4b:1e:1b:b9:f4:a3:84:14:6a:98:74:98:28:85:8c:
21:2c:de:76:f4:2c:07:74:10:43:3b:8e:bc:17:c5:4d:8f:4b:
ad:af:6c:46:81:5a:1b:68:16:88:c4:00:9e:6c:9e:4c:6e:1d:
84:75:a3:f3:74:e1:8b:80:66:91:f3:bf:16:d8:99:f7:61:99:
7e:86:93:8f:1f:b2:5b:38:6e:56:d2:e5:75:2f:97:a4:45:58:
be:99:72:c3:17:01:f8:cc:8a:58:01:2c:45:20:12:e7:21:76:
cb:ec:a8:1f:25:d2:c4:aa:f3:83:ac:17:3c:b6:71:ee:e3:8f:
1c:e5:cb:d6:30:3f:06:e5:ca:cd:b9:6d:bc:2e:f6:b5:dd:bd:
97:7a:9b:dc:9b:49:01:ab:06:63:12:f4:f5:d3:63:62:d5:dc:
03:8c:49:d8:1d:b3:ed:ff:15:6e:b7:cd:b7:92:ca:a7:c8:cd:
82:6e:5c:66:57:f1:fb:62:74:fa:08:b8:0c:bd:57:c7:d5:56:
8b:c5:c2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:15 2025 by rpki-client