Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0727e632-ac9d-4ae0-a720-9a5884b0b029/0/39312e3233332e3139382e302f32342d3234203d3e203631333137.roa
File: 39312e3233332e3139382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: Pd0o/9S5T9DeI3DTlEQhKKBn4wHO4Q92O87hDC6YjPE=
Subject key identifier: B8:58:CF:B6:DF:5E:F7:EC:9D:DD:5E:28:9C:05:A4:5F:70:34:8F:B6
Certificate issuer: /CN=a396faa0b07a3c7c49575b8c31ebec377b86f77e
Certificate serial: 72B930C2FBA6F817602DF6A5E49F18D67D60E0A4
Authority key identifier: A3:96:FA:A0:B0:7A:3C:7C:49:57:5B:8C:31:EB:EC:37:7B:86:F7:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5b6oLB6PHxJV1uMMevsN3uG934.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0727e632-ac9d-4ae0-a720-9a5884b0b029/0/39312e3233332e3139382e302f32342d3234203d3e203631333137.roa
Signing time: Mon 06 Mar 2023 06:57:24 +0000
ROA not before: Mon 06 Mar 2023 06:52:24 +0000
ROA not after: Mon 04 Mar 2024 06:57:24 +0000
asID: 61317
IP address blocks: 91.233.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:b9:30:c2:fb:a6:f8:17:60:2d:f6:a5:e4:9f:18:d6:7d:60:e0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a396faa0b07a3c7c49575b8c31ebec377b86f77e
Validity
Not Before: Mar 6 06:52:24 2023 GMT
Not After : Mar 4 06:57:24 2024 GMT
Subject: CN=B858CFB6DF5EF7EC9DDD5E289C05A45F70348FB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:58:c2:5b:e4:0a:21:0c:7b:0a:83:32:ab:1a:
18:77:2c:b3:f2:28:b8:db:ef:22:c0:79:ad:45:39:
95:b5:7b:59:23:0d:e4:39:c7:4c:89:88:2e:4a:f2:
bf:63:eb:7d:c8:6f:49:7e:bd:76:2b:fa:45:9b:5e:
78:4d:9c:ea:ef:10:9e:69:b9:8f:87:c6:28:b5:ed:
7b:bc:e5:47:3d:28:61:b0:07:df:b6:d1:a0:02:15:
7e:09:88:35:8d:4e:a4:f4:69:36:da:ea:ec:c8:cb:
a1:f3:05:ae:02:c1:ba:c1:55:f2:5f:dd:35:f7:f7:
7f:a5:fa:f3:f0:ed:d0:bb:3e:84:a2:73:45:0a:7d:
d4:36:5a:88:62:1f:bd:9f:f0:50:5c:36:db:5e:51:
2a:c3:5e:ee:e6:55:4d:55:33:a4:03:4d:ca:88:b3:
8d:a2:3b:4b:3d:48:7a:7b:22:46:f7:09:8b:df:a6:
33:d8:43:fb:ef:f2:f3:82:90:87:d7:cc:9e:2f:a8:
e4:8e:ee:31:d8:fb:43:f7:dd:a6:2e:ae:58:1b:51:
38:57:57:02:d5:9c:f1:80:5e:32:e0:cf:e9:3e:86:
52:c1:18:aa:3d:30:ef:6f:6d:74:58:0c:23:72:7d:
33:56:e7:e9:57:19:9e:4e:34:49:12:f6:f6:ce:fc:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:58:CF:B6:DF:5E:F7:EC:9D:DD:5E:28:9C:05:A4:5F:70:34:8F:B6
X509v3 Authority Key Identifier:
keyid:A3:96:FA:A0:B0:7A:3C:7C:49:57:5B:8C:31:EB:EC:37:7B:86:F7:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0727e632-ac9d-4ae0-a720-9a5884b0b029/0/A396FAA0B07A3C7C49575B8C31EBEC377B86F77E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5b6oLB6PHxJV1uMMevsN3uG934.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0727e632-ac9d-4ae0-a720-9a5884b0b029/0/39312e3233332e3139382e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.198.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a0:19:5a:ea:c2:1c:73:40:44:60:5d:74:96:ba:34:48:d3:
44:1f:64:e4:e5:4b:5c:47:e3:d7:df:4e:5c:2f:b6:41:35:7f:
5d:97:01:7f:b0:48:75:f5:b0:89:48:01:88:5a:fb:57:4d:2a:
0f:16:2f:62:be:73:23:9f:0a:dc:b4:84:7d:33:36:22:44:96:
c0:2c:87:0f:a1:c2:65:cd:12:16:25:6d:d7:be:77:68:9c:72:
c0:af:84:3a:df:51:89:59:65:c1:49:fc:33:d0:b5:38:1d:80:
87:ea:e1:52:19:08:c0:2e:1e:b1:a9:52:2a:51:e3:1e:0a:f8:
e8:d4:d1:c3:e2:55:6d:ad:69:3b:a3:49:9f:87:a3:8a:99:a0:
04:33:f1:4c:df:28:ba:9d:99:dd:93:b0:f0:bf:e6:63:c3:51:
87:fa:be:a8:35:8a:db:80:39:4c:22:47:f6:97:66:8e:93:ee:
0d:86:2c:a6:b3:14:21:bd:39:5e:38:4f:f7:57:85:e0:77:ef:
d3:66:6a:6a:a3:e9:95:b5:87:50:08:1b:fc:82:da:d5:cd:17:
b4:a5:53:48:c1:78:57:71:c3:9c:f9:35:80:65:51:9b:2e:0e:
ab:23:9c:f3:b0:24:6b:0b:cd:6a:32:8a:24:e7:dc:99:2b:85:
1c:cf:3c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:32 2025 by rpki-client