Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32342d3234203d3e20323032363733.roa
File: 3139332e3139342e31362e302f32342d3234203d3e20323032363733.roa (raw, json)
Hash identifier: vU2wbSjQVA2Vnm1o59zMfSkhUZ7+m4nxT8S5RP5oyx4=
Subject key identifier: 53:7D:75:6A:5A:8D:E7:87:C5:1A:E0:24:C6:D7:63:98:06:D0:0B:15
Certificate issuer: /CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Certificate serial: 27C1814F65B49975E5616D5631BA07477E620EE0
Authority key identifier: 82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32342d3234203d3e20323032363733.roa
Signing time: Sun 01 Sep 2024 16:33:58 +0000
ROA not before: Sun 01 Sep 2024 16:28:58 +0000
ROA not after: Sun 31 Aug 2025 16:33:58 +0000
asID: 202673
IP address blocks: 193.194.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:c1:81:4f:65:b4:99:75:e5:61:6d:56:31:ba:07:47:7e:62:0e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Validity
Not Before: Sep 1 16:28:58 2024 GMT
Not After : Aug 31 16:33:58 2025 GMT
Subject: CN=537D756A5A8DE787C51AE024C6D7639806D00B15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:c2:e6:0d:5e:e2:e2:92:3f:39:a4:59:c4:
7c:27:b9:b6:fb:2a:42:2b:27:20:7f:53:d3:bd:bd:
c1:cd:e7:ad:ce:dd:30:69:f6:4e:25:12:bd:d6:b1:
8f:22:49:bf:99:94:46:25:6a:ad:99:78:24:08:e8:
50:df:45:61:68:eb:00:6f:fa:e1:76:67:00:50:10:
af:0f:bd:12:ed:d4:d0:54:06:7a:fc:df:26:47:f8:
f5:b4:6e:89:60:96:e9:43:d3:3f:84:6b:f2:8a:f5:
27:12:14:a4:3a:e3:b5:5a:3e:71:44:e5:60:e9:2d:
02:25:10:e8:8d:a5:70:05:23:4d:d4:8f:8d:11:e1:
ab:1a:4f:45:73:d5:df:c2:0d:a5:84:0d:2b:ed:d7:
a8:15:78:33:c0:a9:48:8e:e9:c0:49:29:2b:d6:a6:
54:93:9f:f3:63:f7:9b:65:81:fa:59:96:ef:ca:b2:
75:13:66:63:03:f5:fb:b7:5d:01:98:73:64:02:6e:
8f:70:81:d3:bb:c2:e6:18:db:c5:cb:ec:ed:3b:2a:
be:6a:67:3a:95:e2:d8:dc:fb:53:c6:ff:60:e1:1a:
c4:ff:26:e2:a1:71:a7:17:68:30:e9:cc:69:d9:0d:
6b:c3:3a:c6:52:c6:26:60:b4:52:4f:c8:15:a6:e1:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7D:75:6A:5A:8D:E7:87:C5:1A:E0:24:C6:D7:63:98:06:D0:0B:15
X509v3 Authority Key Identifier:
keyid:82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/829FE39703497B809412AA7D9B53D10C5A0A86B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31362e302f32342d3234203d3e20323032363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.16.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d0:11:e8:c3:b6:8e:d7:33:48:95:f5:1d:1d:cc:8f:37:9e:
85:a1:7b:4c:5f:c6:93:45:10:9b:3a:bc:dc:2e:c8:4c:d2:40:
c4:32:26:75:a3:ec:a3:03:f7:80:4c:a1:4e:e5:f6:36:13:2e:
5d:79:1c:bb:74:e9:a6:fb:83:6c:79:b1:9c:39:e3:8e:e6:85:
df:a1:49:97:e2:9d:a0:67:9b:d3:2c:8d:53:25:cf:c4:98:61:
05:35:e3:a2:b8:72:ff:45:a1:58:ad:1d:9e:67:31:08:00:5e:
72:90:ac:70:51:2a:84:2c:89:7c:56:13:db:f6:95:a2:78:d8:
24:1e:71:ef:ae:a1:61:e4:ef:66:85:bd:ce:7d:91:14:d4:41:
24:96:7f:92:23:0e:98:6a:46:81:8d:1f:a1:e6:44:b8:6b:52:
72:77:57:11:92:2e:f6:3e:e7:df:2f:16:ef:0c:81:55:ca:52:
0b:e0:d0:58:30:99:82:d5:1a:3d:36:6f:6f:5c:fc:bc:a4:b9:
d5:18:d8:76:85:5d:38:0e:c3:6e:90:13:e7:a1:06:52:3f:a4:
bb:7c:dc:e3:26:c7:91:57:99:c4:b4:48:34:18:e6:fe:a4:e8:
d5:d4:0c:40:4d:ff:f4:2f:0b:53:45:d8:f4:23:34:5d:87:41:
03:26:53:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:47 2025 by rpki-client