Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29f8c1a3-4e13-49d0-a639-5bb5219b8f5b/0/3139342e3134352e3233372e302f32342d3234203d3e203631333137.roa
File: 3139342e3134352e3233372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 31eXiWHAReBtYRrsFbuSWlvxyA5DxMWYVgvaa3VX9gM=
Subject key identifier: 29:BA:56:8B:9C:10:49:16:75:06:8F:8E:AE:25:A5:F6:77:FB:88:1E
Certificate issuer: /CN=dd3dade2770cfa06e07166668407095f08c274f8
Certificate serial: 6EE12765680177B66848361644FD9099259B9204
Authority key identifier: DD:3D:AD:E2:77:0C:FA:06:E0:71:66:66:84:07:09:5F:08:C2:74:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T2t4ncM-gbgcWZmhAcJXwjCdPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29f8c1a3-4e13-49d0-a639-5bb5219b8f5b/0/3139342e3134352e3233372e302f32342d3234203d3e203631333137.roa
Signing time: Sat 23 Sep 2023 12:20:17 +0000
ROA not before: Sat 23 Sep 2023 12:15:17 +0000
ROA not after: Sat 21 Sep 2024 12:20:17 +0000
asID: 61317
IP address blocks: 194.145.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:e1:27:65:68:01:77:b6:68:48:36:16:44:fd:90:99:25:9b:92:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3dade2770cfa06e07166668407095f08c274f8
Validity
Not Before: Sep 23 12:15:17 2023 GMT
Not After : Sep 21 12:20:17 2024 GMT
Subject: CN=29BA568B9C10491675068F8EAE25A5F677FB881E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:bd:71:f2:a7:c3:61:94:36:29:b5:8a:82:
90:03:17:17:f0:b8:d0:c9:31:0f:e8:50:41:cd:bf:
61:c9:53:a2:81:3f:57:ba:ce:8c:b1:b6:ea:f6:04:
12:66:10:d6:0b:c0:ef:a4:79:bb:c7:bf:ae:65:e8:
35:fd:e1:97:8f:71:91:92:d9:71:b1:34:c6:01:69:
e0:8f:15:9d:be:f2:f5:8e:c0:3d:76:e5:ce:df:3f:
5f:cb:b3:35:9e:ba:dd:e9:42:c6:b9:09:65:2d:fa:
93:01:fe:0c:b1:e0:19:a9:ad:6b:92:d0:2c:2c:24:
da:e7:c6:cc:be:50:ac:80:32:eb:0b:ec:92:9f:ab:
a4:4a:17:65:64:b9:51:cb:ae:81:74:ca:af:b9:d5:
e1:4c:81:20:3a:93:66:ac:92:fe:35:72:bc:19:bb:
5f:08:e7:b9:40:8b:e1:ea:93:b1:e0:e5:64:a9:68:
75:0f:49:f7:cb:88:c6:48:eb:31:6d:b2:79:90:61:
2d:47:9e:a2:70:5f:2f:56:29:cd:b4:42:d7:b2:4d:
c1:83:fb:79:a7:c5:6b:50:15:7e:1f:47:10:df:8f:
fa:33:b9:fe:50:94:7e:ca:ef:07:32:fa:8d:7a:ca:
05:1a:77:f9:7f:10:53:5b:0c:71:25:8f:be:d9:d8:
9d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BA:56:8B:9C:10:49:16:75:06:8F:8E:AE:25:A5:F6:77:FB:88:1E
X509v3 Authority Key Identifier:
keyid:DD:3D:AD:E2:77:0C:FA:06:E0:71:66:66:84:07:09:5F:08:C2:74:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/29f8c1a3-4e13-49d0-a639-5bb5219b8f5b/0/DD3DADE2770CFA06E07166668407095F08C274F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T2t4ncM-gbgcWZmhAcJXwjCdPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29f8c1a3-4e13-49d0-a639-5bb5219b8f5b/0/3139342e3134352e3233372e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
97:0e:45:cc:74:7d:9a:f5:92:66:fc:4e:fe:0f:5a:60:3a:41:
87:31:4a:0e:69:ad:5f:7c:07:2c:dd:4b:ac:44:f6:89:db:09:
74:d6:e5:38:c8:a7:a5:28:2a:9d:2a:20:a8:c7:dc:4c:ff:59:
03:b6:d1:cb:63:0a:cc:49:0e:3e:4a:d9:3e:02:68:4f:70:50:
ab:2a:f5:53:53:cf:70:f0:1f:c7:f0:5e:59:a8:72:47:25:bf:
18:95:3f:32:c2:69:c6:31:14:4d:8f:4b:f4:d0:f2:93:a8:04:
01:11:44:4a:61:3f:36:83:20:24:47:88:8a:01:8d:ac:3e:18:
d4:7e:7a:51:c4:8f:e6:5f:82:65:44:74:75:25:40:1e:99:00:
d7:f7:40:b5:10:4d:ae:6a:84:ec:18:d9:37:9e:20:f9:e9:d7:
ab:5f:88:28:7d:48:cd:13:8a:49:4d:a3:93:a7:e2:1b:36:eb:
a7:70:71:fe:26:0e:a2:ad:86:0b:4a:fa:9b:65:6c:5d:a7:af:
97:7b:82:c5:4d:e0:26:86:ef:b2:5a:a6:0d:ea:71:9a:5e:3f:
1d:97:8d:93:6a:61:75:14:ed:71:8c:d3:03:48:e2:3c:6f:fb:
56:f1:ea:dc:cb:75:ac:dc:75:84:0e:1d:a4:50:3c:d9:15:c1:
ef:1d:53:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:10 2024 by rpki-client on console-fra.rpki-client.org