Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e20313532373030.roa
File: 3139342e33312e3139372e302f32342d3234203d3e20313532373030.roa (raw, json)
Hash identifier: NP8wPJ4GVwW7ZkYkg/oUATft9DDm4nQYhb5n8phaFpo=
Subject key identifier: FD:F3:BF:69:56:FC:A0:ED:68:49:4B:0C:08:5F:87:4A:A2:15:83:40
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 22A96FC9DEABCFE8A54E8CE8A1FE1D18B2EBA9AF
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e20313532373030.roa
Signing time: Wed 10 Jul 2024 08:59:55 +0000
ROA not before: Wed 10 Jul 2024 08:54:55 +0000
ROA not after: Wed 09 Jul 2025 08:59:55 +0000
asID: 152700
IP address blocks: 194.31.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:a9:6f:c9:de:ab:cf:e8:a5:4e:8c:e8:a1:fe:1d:18:b2:eb:a9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jul 10 08:54:55 2024 GMT
Not After : Jul 9 08:59:55 2025 GMT
Subject: CN=FDF3BF6956FCA0ED68494B0C085F874AA2158340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:f9:e5:43:e6:4e:79:1a:78:5b:27:80:65:
24:32:03:6d:c4:c4:d6:fd:bd:e0:32:7a:4b:f7:27:
65:53:0b:22:b7:34:bd:a6:a8:0f:ef:40:fa:b4:72:
06:52:75:5e:d9:04:1c:a8:21:3b:4e:a8:e4:ec:08:
39:5f:21:7a:77:92:4a:4c:bf:a6:ce:cf:cd:ba:5f:
fe:c1:3f:c2:10:23:a7:6b:31:2c:5b:99:dc:de:c5:
65:08:ec:e1:d4:c5:ef:0c:ba:ca:94:e2:04:df:97:
82:79:e6:d8:08:aa:db:06:53:ea:1a:6e:bc:61:fb:
a2:f5:fb:b1:2b:96:76:74:14:09:9b:53:54:5f:86:
7d:aa:87:09:d0:9e:65:3b:51:ef:b4:cc:d4:9b:5b:
b5:8e:89:9e:6b:93:fe:84:f7:70:70:b0:68:8a:34:
ab:85:1b:84:e6:85:e8:9c:f6:a3:f0:69:d2:38:80:
23:23:6c:70:b8:a9:2f:85:fb:2a:e4:a4:31:d1:ec:
cf:92:fb:a3:94:5f:1d:39:68:b0:74:47:34:51:ee:
17:fa:8a:41:0e:f9:2a:09:15:53:67:37:c4:ae:c6:
4e:b9:d7:c6:b9:fb:1a:ea:df:8c:a2:2d:c5:74:22:
05:cf:ec:8c:b8:a7:c5:38:ac:9f:d4:1f:98:70:30:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F3:BF:69:56:FC:A0:ED:68:49:4B:0C:08:5F:87:4A:A2:15:83:40
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3139342e33312e3139372e302f32342d3234203d3e20313532373030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.197.0/24
Signature Algorithm: sha256WithRSAEncryption
43:0c:de:b3:21:43:ee:fd:75:6b:bc:38:49:ec:79:12:fa:d2:
04:69:8f:f1:80:cd:da:7e:ae:8c:bc:af:b6:1f:5d:b4:11:bd:
9c:4a:09:a2:3b:88:5e:a8:c3:cd:fc:6b:8f:ed:58:88:88:53:
93:05:75:74:97:63:19:e3:4a:87:64:55:12:0c:be:f4:b6:e7:
d4:1f:a7:66:4f:94:77:18:24:6a:ce:b2:ae:88:97:86:cd:96:
a3:1a:a2:70:92:d4:33:08:22:37:90:99:59:7d:36:46:00:bf:
06:26:99:52:cb:95:cb:7d:6d:da:aa:de:d7:a6:51:74:1b:92:
ea:20:d1:c1:41:ad:29:e0:10:0a:0e:14:53:43:42:c3:66:57:
41:7a:3a:76:d8:28:5a:a0:31:50:e4:0e:b3:18:53:c6:f1:49:
0c:5d:0d:6a:ae:91:e9:b5:48:c1:21:b2:de:4a:19:b0:11:9a:
36:b2:45:ef:60:a7:10:6c:53:ee:73:46:28:e3:50:0c:88:7c:
cd:e9:c7:e7:e4:10:fe:89:54:8f:0f:ca:27:5e:19:d2:d0:41:
a2:bf:e5:95:4f:c0:12:9e:2d:9c:27:45:31:20:07:86:74:a9:
88:e4:a5:1c:2c:e4:14:60:36:28:f6:01:dc:6a:17:79:b0:08:
8f:de:17:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:31:31 2025 by rpki-client