Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/6/3139332e3139342e32302e302f32342d3234203d3e203630383538.roa
File: 3139332e3139342e32302e302f32342d3234203d3e203630383538.roa (raw, json)
Hash identifier: 8oEA1/vupWLf/a/1/MNWImJoB+vYf1tvDl3ebOQrtd4=
Subject key identifier: FB:BA:F1:2C:C0:76:AB:55:E3:6F:4E:74:7B:BB:D7:22:3D:52:5C:51
Certificate issuer: /CN=53bb2b93d467bf2e561ae522544a00eb73e4713b
Certificate serial: 6C8F054E3DB79D69758DAC7FFD242B19246ABC59
Authority key identifier: 53:BB:2B:93:D4:67:BF:2E:56:1A:E5:22:54:4A:00:EB:73:E4:71:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7srk9Rnvy5WGuUiVEoA63PkcTs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/6/3139332e3139342e32302e302f32342d3234203d3e203630383538.roa
Signing time: Tue 21 May 2024 14:57:21 +0000
ROA not before: Tue 21 May 2024 14:52:21 +0000
ROA not after: Tue 20 May 2025 14:57:21 +0000
asID: 60858
IP address blocks: 193.194.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:8f:05:4e:3d:b7:9d:69:75:8d:ac:7f:fd:24:2b:19:24:6a:bc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bb2b93d467bf2e561ae522544a00eb73e4713b
Validity
Not Before: May 21 14:52:21 2024 GMT
Not After : May 20 14:57:21 2025 GMT
Subject: CN=FBBAF12CC076AB55E36F4E747BBBD7223D525C51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:da:e7:7f:3d:e0:28:15:6d:2f:0b:f5:ad:56:
a9:d6:dd:03:c8:fd:2c:28:b9:04:aa:6d:9e:18:c2:
04:bf:a2:63:66:05:22:2f:21:8f:9c:47:88:95:68:
70:43:c2:04:75:12:c0:b5:d0:4b:b4:ab:4a:41:07:
17:b0:b9:f5:1c:ea:64:50:d5:28:d4:4b:25:85:57:
e0:e0:76:53:7f:86:8a:26:52:b3:6f:7c:eb:d7:04:
34:73:68:98:05:a2:15:21:f4:0c:e5:97:7c:ca:05:
01:3c:fc:9d:98:91:0b:d4:80:0b:ab:36:94:39:37:
df:1e:bd:ce:fc:d6:e7:3a:bd:29:fd:a6:07:a9:c6:
ef:2a:6d:fd:67:45:90:11:51:16:ae:13:a9:4b:f2:
3d:15:60:54:51:1c:2b:48:64:3f:5e:73:47:57:4e:
46:59:e8:c3:e8:fb:aa:bb:ec:0c:21:8b:97:cc:0d:
55:c8:fc:d2:da:b6:4e:2e:67:ff:33:dd:ee:63:3a:
18:e1:34:ca:1a:aa:02:01:7b:62:cd:eb:3a:c6:21:
0a:be:9b:d3:e7:c2:73:e0:ec:73:0c:cd:de:b4:ce:
43:6f:9d:28:4b:4c:ac:42:ed:ab:53:9b:3c:4e:06:
2a:d4:ad:17:a3:15:1c:b3:33:b3:7c:e4:36:12:9a:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BA:F1:2C:C0:76:AB:55:E3:6F:4E:74:7B:BB:D7:22:3D:52:5C:51
X509v3 Authority Key Identifier:
keyid:53:BB:2B:93:D4:67:BF:2E:56:1A:E5:22:54:4A:00:EB:73:E4:71:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/6/53BB2B93D467BF2E561AE522544A00EB73E4713B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7srk9Rnvy5WGuUiVEoA63PkcTs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/6/3139332e3139342e32302e302f32342d3234203d3e203630383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.20.0/24
Signature Algorithm: sha256WithRSAEncryption
24:69:81:fa:80:19:ad:1b:ac:00:64:e3:55:73:3b:51:f4:44:
01:39:bd:d6:4d:7d:8a:ce:92:7c:4e:46:18:c5:de:43:2f:9a:
05:bd:21:50:ac:09:03:01:e9:7b:7c:52:33:69:8f:a2:75:dc:
bc:f6:6e:43:76:8a:92:6f:1a:81:c5:7f:3a:63:d3:51:e2:54:
11:cb:2e:f0:e1:6e:7f:0c:6d:a5:9b:5a:f2:d5:d5:43:c7:c7:
12:9c:08:27:04:6e:e3:16:96:87:b3:72:b4:65:c8:be:5a:d1:
57:88:cf:5f:ee:1a:84:bc:21:46:c4:d2:4b:40:88:96:36:8e:
4c:34:a6:23:c6:24:88:d3:fd:b5:b5:33:02:bc:29:74:60:bf:
8f:09:b6:43:6e:df:d6:8f:d2:1e:a0:2e:d2:b3:b6:30:b1:94:
36:28:25:3a:c7:52:81:44:da:cb:ec:d9:5f:63:4e:3f:01:5b:
f9:14:93:d5:a2:16:75:0d:34:d8:3a:81:d9:a4:f5:5d:0f:02:
96:9c:dd:11:96:0f:3b:da:43:2e:69:d0:e1:1c:66:4b:de:8b:
cb:f7:0a:aa:cc:de:24:f4:3b:c7:39:6c:c6:40:99:5d:a7:b7:
22:4f:31:91:68:41:22:d4:26:ce:c6:d5:fc:4e:bc:7d:d9:4d:
24:d2:b1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org