Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/3139342e35382e36352e302f32342d3234203d3e20333937373330.roa
File: 3139342e35382e36352e302f32342d3234203d3e20333937373330.roa (raw, json)
Hash identifier: InhM34Dmb3sJqcOLafSmmmFS9YJK3J8Zdwo6bmOS8R4=
Subject key identifier: D7:8F:0F:9E:B0:9C:33:AE:D3:E1:54:BA:50:45:C3:87:EE:FB:29:AF
Certificate issuer: /CN=974E186C2E15C12700D0165ACC54D7A585EE383C
Certificate serial: 7B9CF5F15F08EDA43261066B4597F5AE9E32B73D
Authority key identifier: 97:4E:18:6C:2E:15:C1:27:00:D0:16:5A:CC:54:D7:A5:85:EE:38:3C
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/974E186C2E15C12700D0165ACC54D7A585EE383C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/3139342e35382e36352e302f32342d3234203d3e20333937373330.roa
Signing time: Thu 19 Dec 2024 18:43:54 +0000
ROA not before: Thu 19 Dec 2024 18:38:54 +0000
ROA not after: Thu 18 Dec 2025 18:43:54 +0000
asID: 397730
IP address blocks: 194.58.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:9c:f5:f1:5f:08:ed:a4:32:61:06:6b:45:97:f5:ae:9e:32:b7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974E186C2E15C12700D0165ACC54D7A585EE383C
Validity
Not Before: Dec 19 18:38:54 2024 GMT
Not After : Dec 18 18:43:54 2025 GMT
Subject: CN=D78F0F9EB09C33AED3E154BA5045C387EEFB29AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:69:a6:38:b2:38:eb:92:8b:27:9d:db:9a:
c2:12:37:3e:a6:48:a5:82:fc:62:13:8b:99:78:a5:
d7:46:53:aa:b8:2c:ed:1a:a2:89:c7:f2:e0:7c:dc:
3a:1b:e9:34:04:f2:d9:58:02:7f:32:9a:0b:01:40:
d1:7c:b6:33:c2:ad:7e:f9:66:b1:b4:8a:35:3a:c2:
c5:98:d2:05:fa:32:06:d4:4d:ad:87:a1:74:42:12:
01:b1:38:ee:d8:c1:ed:c1:ab:81:56:96:74:a5:25:
cb:d5:a0:c4:eb:73:32:ab:12:49:f4:d7:42:a9:83:
4b:34:8d:d1:00:ad:25:ea:f4:29:67:f3:e3:4d:47:
43:3e:25:a6:a1:ff:42:9c:16:a7:e7:f6:cb:bc:18:
28:00:bb:3f:e0:28:3a:1a:b7:54:5d:e6:33:41:fe:
af:eb:b6:c0:9d:7f:9a:ad:c4:ba:2f:65:d2:1f:c4:
e4:8b:f7:d8:52:c1:3e:78:30:30:fc:62:5f:62:08:
8f:5a:21:d5:e4:3b:f4:98:e9:ee:c3:d1:2c:10:27:
94:b9:84:f5:8d:98:ae:45:0e:d5:10:e5:a6:5d:fc:
8c:e3:5b:8e:4d:9c:fd:75:d0:03:13:03:9a:4a:2f:
85:2d:bc:9a:c1:19:b8:03:d6:13:b0:59:60:ea:f9:
ec:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8F:0F:9E:B0:9C:33:AE:D3:E1:54:BA:50:45:C3:87:EE:FB:29:AF
X509v3 Authority Key Identifier:
keyid:97:4E:18:6C:2E:15:C1:27:00:D0:16:5A:CC:54:D7:A5:85:EE:38:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/974E186C2E15C12700D0165ACC54D7A585EE383C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/974E186C2E15C12700D0165ACC54D7A585EE383C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/3139342e35382e36352e302f32342d3234203d3e20333937373330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.65.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a7:25:3c:ed:70:3e:9b:61:fd:34:eb:d3:d1:06:e9:d0:d6:
df:8d:10:c7:3a:2d:0b:e7:9f:42:a1:c8:26:89:ea:c6:03:47:
31:67:df:36:82:e0:57:c5:5f:cb:92:53:3d:30:b3:b8:66:7b:
6a:5e:64:85:1d:c5:6a:36:3e:ec:97:9f:cf:f1:1f:bb:0c:30:
01:2f:a9:03:e6:72:6b:ab:bb:a1:23:07:40:af:19:dc:81:c9:
db:d8:5c:b5:ca:24:eb:b2:8b:65:29:eb:a4:f9:9d:04:b4:3e:
f7:16:ef:ae:e3:38:74:7f:d2:61:5a:d3:43:f7:6c:b2:cd:42:
5b:7a:cb:ea:0e:94:10:f0:38:fd:0b:2b:8e:fc:97:18:7b:e9:
35:e7:d3:64:5a:5e:db:92:1f:e8:48:af:48:0f:ac:c9:9e:54:
d6:4c:75:bc:df:14:50:3e:e2:31:4c:73:da:e8:11:3c:f9:d1:
9a:1d:ed:bb:03:57:7a:06:69:a9:c5:29:74:0b:49:86:6c:be:
45:19:32:bd:92:2d:bf:30:33:e2:99:da:9c:aa:04:85:1d:27:
34:39:65:af:c7:f1:98:8e:42:f5:18:49:02:70:34:4c:63:c7:
5f:1e:c3:a4:66:e5:77:97:61:d5:fd:97:44:af:05:1b:68:e6:
54:ac:ea:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:37 2025 by rpki-client