Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32322d3234203d3e203236353631.roa
File: 3139332e3139342e31362e302f32322d3234203d3e203236353631.roa (raw, json)
Hash identifier: 8mb3ALVUAJC6iAhG/KnJDmiXxk2tgWLIZFTN0ek2jVM=
Subject key identifier: DE:70:FE:9C:02:48:17:69:2F:20:E8:C4:ED:1D:17:C0:B1:28:3A:86
Certificate issuer: /CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Certificate serial: 29539512FFEF4B3D65612653B6B1D697B0303446
Authority key identifier: 82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32322d3234203d3e203236353631.roa
Signing time: Tue 03 Sep 2024 01:15:58 +0000
ROA not before: Tue 03 Sep 2024 01:10:58 +0000
ROA not after: Tue 02 Sep 2025 01:15:58 +0000
asID: 26561
IP address blocks: 193.194.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:53:95:12:ff:ef:4b:3d:65:61:26:53:b6:b1:d6:97:b0:30:34:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Validity
Not Before: Sep 3 01:10:58 2024 GMT
Not After : Sep 2 01:15:58 2025 GMT
Subject: CN=DE70FE9C024817692F20E8C4ED1D17C0B1283A86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:8b:f7:0b:18:54:dd:8e:60:70:7a:ba:1d:
65:62:02:01:77:b9:65:d7:91:74:33:04:06:e4:3c:
cd:40:5f:0e:d9:f5:aa:67:c9:eb:77:e7:f4:56:50:
8f:ae:e0:54:cb:c2:28:f0:51:d8:95:35:3d:f7:5f:
7b:68:37:42:39:84:d0:5c:5c:82:22:f4:ab:33:ec:
28:19:22:26:c6:91:0a:42:b8:c4:1f:4a:af:d9:00:
44:4b:5a:1d:a9:cb:47:3a:74:c8:33:2c:5e:2c:be:
49:72:95:6d:f5:b4:a5:cd:ec:dd:42:01:8e:da:45:
53:a2:6d:5c:7b:5c:92:97:e7:3b:ce:c3:39:d1:5d:
a1:27:51:76:90:b8:47:47:b8:e4:8d:2d:77:f6:e2:
12:6f:f7:58:c6:9a:72:f2:c8:b9:e4:a4:7b:d0:cc:
63:bb:cd:24:2c:04:c4:11:7e:9f:ce:bf:1b:9f:16:
ce:10:f2:74:de:eb:3c:0b:11:6c:c5:63:3b:94:fe:
da:bb:01:4c:3b:9c:cf:29:1b:63:3d:69:bf:82:75:
7f:d3:bf:5b:b9:b6:f4:91:d0:1a:a5:df:78:0f:b0:
4f:40:5d:f0:ae:8c:c3:91:a0:00:9b:ae:55:46:1f:
74:03:24:69:de:cd:7f:73:0e:64:d9:7c:a3:70:f6:
e9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:70:FE:9C:02:48:17:69:2F:20:E8:C4:ED:1D:17:C0:B1:28:3A:86
X509v3 Authority Key Identifier:
keyid:82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/829FE39703497B809412AA7D9B53D10C5A0A86B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32322d3234203d3e203236353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.16.0/22
Signature Algorithm: sha256WithRSAEncryption
17:2a:b2:40:1a:54:6f:34:c1:11:d1:3d:fc:e9:02:c8:d4:e1:
c9:7c:12:be:d4:ff:66:06:0b:7d:06:7f:80:23:59:9f:71:51:
ab:aa:84:14:2d:23:64:df:8c:b9:ef:a4:60:c6:50:ec:16:01:
3b:b8:d1:d1:96:f1:56:d4:96:48:1c:99:81:f2:f8:3d:b2:fb:
a2:d0:a3:1d:f3:d8:cf:5a:fd:bf:cb:2d:8b:7c:ef:a9:d0:54:
66:f5:e6:df:1d:22:7c:5d:2d:5c:39:0f:7b:08:74:84:9a:a9:
e3:18:44:84:2f:b9:ac:95:c2:a9:16:a5:8f:28:f6:0b:ea:61:
c0:2d:5a:df:1d:45:21:c7:d5:54:a7:0d:f7:b1:70:40:32:e8:
e1:7f:b4:16:06:a8:32:18:c9:e9:d1:bb:24:1e:ec:a0:0a:49:
d0:0c:8f:bb:a8:fc:46:fe:32:1b:98:6b:b3:2f:16:d2:4c:11:
6a:c9:dd:df:63:79:8e:2f:56:55:f2:0e:bf:3e:e5:bd:49:09:
60:c0:cf:e5:80:bb:8c:f2:b6:c7:ca:2f:f8:b7:08:b1:17:57:
7c:51:d6:a3:e4:6f:8d:aa:7a:ac:05:8f:d3:9c:30:64:65:0a:
9e:0c:15:8a:86:9e:43:eb:8d:cb:e6:c8:83:a8:14:6b:40:72:
e2:e6:53:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:33 2025 by rpki-client