Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01aa738f-59da-4a81-84fb-b7c7c38e3d44/0/3139332e3136332e3132372e302f32342d3234203d3e20323132323338.roa
File: 3139332e3136332e3132372e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: Jukpaq/XDws2L8LmMgc8msOV4Dxk6z+PkLPbG4Dd+8s=
Subject key identifier: 17:A3:A6:8E:31:51:26:DD:19:8F:CC:17:38:FB:B9:DC:11:D0:EB:7B
Certificate issuer: /CN=de1232412edaff34b5d80ad18bd8a8719e5c8dce
Certificate serial: 5FFA85DF0BA44243B8B07CB7819293AD232313DE
Authority key identifier: DE:12:32:41:2E:DA:FF:34:B5:D8:0A:D1:8B:D8:A8:71:9E:5C:8D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hIyQS7a_zS12ArRi9iocZ5cjc4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01aa738f-59da-4a81-84fb-b7c7c38e3d44/0/3139332e3136332e3132372e302f32342d3234203d3e20323132323338.roa
Signing time: Thu 23 Mar 2023 16:49:03 +0000
ROA not before: Thu 23 Mar 2023 16:44:03 +0000
ROA not after: Thu 21 Mar 2024 16:49:03 +0000
asID: 212238
IP address blocks: 193.163.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:fa:85:df:0b:a4:42:43:b8:b0:7c:b7:81:92:93:ad:23:23:13:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1232412edaff34b5d80ad18bd8a8719e5c8dce
Validity
Not Before: Mar 23 16:44:03 2023 GMT
Not After : Mar 21 16:49:03 2024 GMT
Subject: CN=17A3A68E315126DD198FCC1738FBB9DC11D0EB7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:a4:0e:86:73:92:4f:8a:57:9a:66:24:a7:
e4:1c:bf:bf:85:fe:e3:68:c0:2f:52:4d:99:24:69:
63:c3:04:61:76:1f:fe:1c:1e:1e:64:b6:0a:d1:96:
51:c4:61:70:1b:39:d4:81:60:05:53:f2:fe:17:b2:
b9:66:28:1f:d7:90:6c:28:b9:49:ee:07:05:6b:58:
8f:f5:7f:c8:5d:ce:9b:ba:be:18:6c:15:f2:18:23:
0d:3f:74:8e:a8:72:eb:8c:a9:cc:39:6a:7d:0e:f3:
37:86:e6:6e:6e:54:a1:c1:37:0c:26:62:73:7b:7b:
11:5e:1b:2e:ce:8f:94:19:ab:ed:cc:8e:02:1c:ac:
c8:22:41:7e:22:53:d6:80:30:18:70:75:71:1f:35:
19:9b:93:18:45:cd:e0:51:3a:15:15:5e:56:39:75:
59:03:95:b2:cf:71:c6:6d:ea:3b:00:d5:6e:4a:06:
75:4f:3a:63:3b:55:b3:af:2b:70:72:05:ec:cc:54:
9b:3e:76:a4:aa:86:f2:d8:d4:d1:71:6e:f8:d7:af:
a4:05:b2:21:2a:20:fd:2a:d4:b3:91:d5:ba:ed:a1:
5d:9f:da:57:5c:0d:7d:a7:e8:48:2a:a9:b8:01:eb:
3c:18:36:ba:57:7b:75:08:8f:e6:e1:78:85:13:6f:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A3:A6:8E:31:51:26:DD:19:8F:CC:17:38:FB:B9:DC:11:D0:EB:7B
X509v3 Authority Key Identifier:
keyid:DE:12:32:41:2E:DA:FF:34:B5:D8:0A:D1:8B:D8:A8:71:9E:5C:8D:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/01aa738f-59da-4a81-84fb-b7c7c38e3d44/0/DE1232412EDAFF34B5D80AD18BD8A8719E5C8DCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hIyQS7a_zS12ArRi9iocZ5cjc4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01aa738f-59da-4a81-84fb-b7c7c38e3d44/0/3139332e3136332e3132372e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.127.0/24
Signature Algorithm: sha256WithRSAEncryption
72:bd:3f:f2:cf:84:33:32:71:83:9f:98:3f:2a:08:e7:9a:90:
a2:7e:fd:a7:02:c5:94:1d:b4:a1:1d:d3:17:a2:4e:6f:cf:6f:
65:b9:8f:b9:b2:a6:b1:c0:33:12:ae:00:fd:47:3e:51:b7:c3:
c7:18:a4:e1:c9:77:3c:eb:0f:12:b4:60:6e:b7:76:7a:c0:8a:
6c:9c:07:32:bb:68:14:54:bf:9f:5f:37:01:c1:41:b8:48:44:
64:ff:b4:a7:34:60:7b:f4:d4:59:77:7e:9d:da:6a:bf:c6:37:
b6:73:05:74:10:00:73:44:a9:19:4e:f7:b9:3e:51:4f:6d:43:
7e:90:02:02:da:60:81:59:16:70:29:eb:19:3a:a0:d9:a2:5c:
25:a1:a2:ec:82:6c:f6:bc:a2:ed:d6:ba:a0:0f:61:15:1d:01:
c3:97:76:3a:8c:c9:27:da:6e:bf:49:33:8e:12:57:a6:d0:a4:
4a:8e:1a:91:b2:8f:03:7e:a8:4f:85:d9:af:0e:95:c7:74:09:
61:65:13:21:28:86:6c:ec:f1:6b:83:a4:58:4e:53:b6:de:6c:
63:3c:4b:17:93:2d:ed:14:1e:d3:2e:72:7c:5f:94:27:03:af:
7f:a5:e3:f5:7a:4f:b6:4d:a4:fd:a1:a3:6d:d5:ff:27:31:1c:
10:b2:2b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:33 2025 by rpki-client