Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31392e302f32342d3234203d3e20323032363733.roa
File: 3139332e3139342e31392e302f32342d3234203d3e20323032363733.roa (raw, json)
Hash identifier: KMw45XN8HAeSOBhp9Pow3xQLVdxaDzG+D+j9z3YafIk=
Subject key identifier: 8B:E1:C3:74:63:87:0D:08:AA:43:AE:B9:4C:26:7D:26:72:BC:90:71
Certificate issuer: /CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Certificate serial: 7480B843098681DF0F7F019E4A853D4F43533E1E
Authority key identifier: 82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31392e302f32342d3234203d3e20323032363733.roa
Signing time: Sun 01 Sep 2024 23:00:12 +0000
ROA not before: Sun 01 Sep 2024 22:55:12 +0000
ROA not after: Sun 31 Aug 2025 23:00:12 +0000
asID: 202673
IP address blocks: 193.194.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:80:b8:43:09:86:81:df:0f:7f:01:9e:4a:85:3d:4f:43:53:3e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Validity
Not Before: Sep 1 22:55:12 2024 GMT
Not After : Aug 31 23:00:12 2025 GMT
Subject: CN=8BE1C37463870D08AA43AEB94C267D2672BC9071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:80:c3:f7:64:a6:b6:02:6e:fe:0a:94:0f:0a:
3f:55:15:c1:0f:2c:87:a7:55:f0:ba:7e:10:8c:3d:
71:57:8d:d3:43:cd:cd:36:0e:d7:42:e6:c5:12:c3:
fc:17:3a:23:0c:3b:72:78:c0:5b:6b:3c:f1:fd:de:
36:06:05:01:f5:d4:c2:3f:15:e1:8a:2e:87:19:a0:
95:e4:aa:52:a7:89:a2:65:93:f7:1e:e1:3e:1b:b7:
e0:3f:48:68:9e:76:dd:7b:a4:11:45:5c:cf:44:a5:
2c:3c:0c:ab:4e:e2:ac:05:e0:3d:a8:f1:e1:d4:41:
c8:48:a6:8d:b9:43:9f:1d:8c:76:49:5d:41:a9:07:
30:52:70:28:33:23:89:d1:47:19:d2:81:57:28:47:
36:03:99:3e:da:68:7e:75:5f:1e:a8:b0:77:19:b8:
95:6f:c4:06:e6:89:cb:e4:48:85:da:c4:89:80:bf:
79:05:60:e6:89:87:17:18:cc:fb:be:4a:e9:6a:bd:
6e:ac:5c:fc:16:de:2c:35:80:22:50:9c:90:ed:5c:
88:8d:b3:25:e7:2a:b1:76:bf:e1:02:8b:7b:c3:6a:
87:71:78:b7:9d:1a:ee:41:62:e1:e0:27:d1:a4:e9:
06:4a:f9:bf:d8:3c:14:b7:31:c4:72:6a:a2:6c:bb:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E1:C3:74:63:87:0D:08:AA:43:AE:B9:4C:26:7D:26:72:BC:90:71
X509v3 Authority Key Identifier:
keyid:82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/829FE39703497B809412AA7D9B53D10C5A0A86B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e31392e302f32342d3234203d3e20323032363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.19.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:b4:44:02:9a:26:75:13:26:c4:f3:30:02:6f:ad:ce:49:f5:
0b:5d:19:56:f1:76:64:38:15:f0:a1:48:ec:7c:cf:2b:32:f6:
9a:62:ea:86:81:59:ce:1c:37:0c:64:31:40:de:40:bc:bb:51:
63:20:ea:26:e9:f4:89:aa:f9:b2:a5:40:1a:fc:37:0f:7d:54:
87:63:a8:82:29:46:1a:07:3d:1e:7f:79:4f:e8:9f:ce:f1:fc:
3b:6d:74:08:b6:e9:8f:f2:d4:06:90:7b:e9:30:9b:bd:64:82:
f7:34:f9:cf:e3:ba:5b:bc:e2:62:a2:c2:13:83:6c:89:70:33:
da:2f:4d:d5:bb:d4:7b:2e:92:16:f0:6c:23:55:e8:82:db:dc:
26:18:a1:bc:d5:15:d3:4d:b6:74:69:f7:c3:20:64:e0:60:5d:
89:49:f7:02:24:87:41:64:74:62:7a:92:82:11:29:61:0a:a2:
ab:9d:79:df:af:cc:7d:5c:cd:8b:87:21:de:28:a2:78:aa:95:
7e:6a:09:3f:66:b7:ee:d4:7c:0a:16:d1:f9:a7:ef:b0:a1:6d:
b5:e2:10:a7:12:40:7e:e3:03:e4:89:ad:a6:83:a6:59:9e:e3:
78:68:4b:d3:c8:55:f9:18:9a:3a:1a:3f:37:34:83:06:ea:f8:
64:35:d8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:24 2025 by rpki-client