Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/08fd9179-4ef9-4b01-ae08-a50baa6ea49b/0/39312e3139342e3230312e302f32342d3234203d3e20323132323338.roa
File: 39312e3139342e3230312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: hgcWN6zVgnYjqaqxLz+ZpE2Vj1StxJ1hD0gIK/hU4go=
Subject key identifier: A8:3E:9F:7B:3A:9C:FB:0F:9D:26:6F:91:91:43:7F:71:27:24:0E:9A
Certificate issuer: /CN=303b5f3197342813299cce0a66dfea38b3f52426
Certificate serial: 5FC259482E51BC6FD6FCF4122BC36251E7089834
Authority key identifier: 30:3B:5F:31:97:34:28:13:29:9C:CE:0A:66:DF:EA:38:B3:F5:24:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDtfMZc0KBMpnM4KZt_qOLP1JCY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/08fd9179-4ef9-4b01-ae08-a50baa6ea49b/0/39312e3139342e3230312e302f32342d3234203d3e20323132323338.roa
Signing time: Wed 22 Feb 2023 14:26:19 +0000
ROA not before: Wed 22 Feb 2023 14:21:19 +0000
ROA not after: Wed 21 Feb 2024 14:26:19 +0000
asID: 212238
IP address blocks: 91.194.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:c2:59:48:2e:51:bc:6f:d6:fc:f4:12:2b:c3:62:51:e7:08:98:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303b5f3197342813299cce0a66dfea38b3f52426
Validity
Not Before: Feb 22 14:21:19 2023 GMT
Not After : Feb 21 14:26:19 2024 GMT
Subject: CN=A83E9F7B3A9CFB0F9D266F9191437F7127240E9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:12:f4:7c:3c:56:5c:41:61:47:65:26:cd:
1e:19:1f:97:aa:67:e5:e5:88:ff:f7:a8:45:59:e7:
df:d9:42:cb:2e:8d:0c:22:a5:8f:6e:aa:d8:e5:d3:
f5:d1:b2:d8:d2:e6:72:d4:ef:5a:58:fa:fb:45:20:
29:46:46:d9:43:c2:b7:f5:ba:5f:ab:b7:2c:0d:6f:
0b:33:42:1c:31:cb:c2:da:d8:e2:c9:d1:88:3d:36:
54:93:dd:ac:bb:d4:01:37:8b:cc:5b:9e:04:16:f0:
14:f2:61:c5:e0:8d:72:fe:8c:2f:90:5f:e0:ca:e4:
4d:b0:32:aa:f2:c9:95:ad:80:d8:9b:14:6b:14:57:
09:f4:bd:ba:39:e3:4c:a5:f8:d0:0d:a8:b8:b7:d3:
32:4a:eb:6b:b4:5d:3f:8e:33:a5:a0:7e:7c:c7:20:
34:13:c0:29:37:30:eb:87:6b:d9:f1:3d:32:fe:b2:
2d:e4:30:1a:4b:e7:47:35:29:c1:52:82:2c:a7:e5:
93:93:11:80:31:de:c6:40:84:49:ee:cd:cc:38:8b:
68:4f:7b:80:3c:6d:59:2c:c6:8c:d7:2d:26:77:67:
f4:31:40:34:8b:2d:fe:c0:7d:d4:66:a5:1e:a5:19:
32:f9:d5:ef:9b:c0:6a:16:83:37:ed:21:3c:f5:ae:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3E:9F:7B:3A:9C:FB:0F:9D:26:6F:91:91:43:7F:71:27:24:0E:9A
X509v3 Authority Key Identifier:
keyid:30:3B:5F:31:97:34:28:13:29:9C:CE:0A:66:DF:EA:38:B3:F5:24:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/08fd9179-4ef9-4b01-ae08-a50baa6ea49b/0/303B5F3197342813299CCE0A66DFEA38B3F52426.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDtfMZc0KBMpnM4KZt_qOLP1JCY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/08fd9179-4ef9-4b01-ae08-a50baa6ea49b/0/39312e3139342e3230312e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.201.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:39:ea:0a:85:18:f6:6d:1f:a7:77:07:c4:c4:77:78:94:d2:
1e:98:2f:69:24:35:88:e0:2d:95:b4:4c:a3:28:fb:fe:ad:fb:
d7:51:65:a0:43:d3:f0:18:67:39:1a:52:44:03:48:b1:37:99:
82:bb:54:a6:ae:74:4d:15:a1:5b:41:c9:8b:7f:0f:6f:0f:e9:
8f:02:cc:60:c4:ed:7d:df:07:3a:53:0d:23:94:1b:2f:d0:8f:
60:48:71:1d:ee:e6:7c:97:6e:cb:cf:a6:8d:67:d4:80:01:50:
9e:ee:a6:58:e7:f6:ae:09:13:d1:12:3f:89:60:0e:56:f1:47:
db:83:d0:50:53:b6:f8:ae:82:f1:2b:bc:e3:e8:af:c9:e6:af:
87:9f:72:14:25:5f:2b:24:c2:35:86:a9:ed:a2:49:00:9d:4a:
cc:52:6d:53:80:89:16:7d:82:cb:52:ad:d0:52:38:0e:2a:13:
b7:e1:fa:fb:49:4e:95:f3:2f:62:46:72:41:77:67:a6:c1:08:
ef:56:9e:cc:1b:f6:44:63:cd:b3:c3:25:0b:cb:1d:13:84:a7:
91:a8:5c:93:36:e4:4f:b6:0d:cb:d7:ee:6e:44:cd:16:bb:74:
89:74:83:8d:95:3f:ea:bf:4a:76:c8:1e:3e:c9:fc:46:de:45:
43:7d:f0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org