Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e32302e302f32342d3234203d3e203236353631.roa
File: 3139332e3139342e32302e302f32342d3234203d3e203236353631.roa (raw, json)
Hash identifier: 0kDoRVeVfZZu/bdPJ+yYMplx7JhWHm7w5C0DdgiTziM=
Subject key identifier: 5E:27:59:21:AB:E3:06:F5:06:4F:B9:AB:B3:F8:00:38:57:39:06:96
Certificate issuer: /CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Certificate serial: 4806F030E1BEA1EEBD3FAE063B3924F0E249B105
Authority key identifier: 82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e32302e302f32342d3234203d3e203236353631.roa
Signing time: Tue 03 Sep 2024 01:16:20 +0000
ROA not before: Tue 03 Sep 2024 01:11:20 +0000
ROA not after: Tue 02 Sep 2025 01:16:20 +0000
asID: 26561
IP address blocks: 193.194.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:06:f0:30:e1:be:a1:ee:bd:3f:ae:06:3b:39:24:f0:e2:49:b1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829fe39703497b809412aa7d9b53d10c5a0a86b4
Validity
Not Before: Sep 3 01:11:20 2024 GMT
Not After : Sep 2 01:16:20 2025 GMT
Subject: CN=5E275921ABE306F5064FB9ABB3F8003857390696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1e:2a:36:b8:33:ff:36:45:dc:60:95:bb:e6:
c3:ac:b2:75:d9:74:7b:98:eb:f3:02:46:06:ac:f1:
de:8b:54:32:87:2c:fc:ef:2c:02:33:4f:95:ab:21:
7c:77:e4:72:48:2f:9b:82:85:35:b1:81:84:3d:98:
eb:4b:1c:de:c3:4a:8d:a8:f9:74:18:1f:a7:75:a5:
ac:65:75:d4:36:ad:fb:53:8b:2a:38:15:62:83:90:
14:c3:2c:3e:4e:4f:84:68:07:69:72:e7:2b:59:30:
2a:fa:25:56:c0:ac:95:8f:40:3c:6e:e3:67:c4:8c:
73:34:78:15:25:d2:91:76:98:02:c1:c0:08:a9:d5:
95:7b:b3:ce:64:cf:7d:73:5f:f2:ee:a8:ec:5c:a1:
55:8e:9f:94:57:cb:7e:81:0e:fe:68:ba:36:fb:4f:
7b:a9:c9:b6:89:91:d7:6d:0d:d4:b8:1e:a7:ed:e5:
6b:32:a8:2d:3c:67:e7:8d:cd:b5:1e:9a:4d:a2:51:
cc:4f:bb:b0:17:27:da:53:c8:b7:ca:30:4e:e2:a5:
d8:e9:c4:92:d5:74:ca:ed:3c:7b:5d:c3:f7:b0:47:
90:ee:b5:05:17:78:4c:68:e5:26:28:0f:37:da:7b:
42:3d:11:d7:cf:96:a3:cd:fb:f3:bf:58:b1:00:29:
86:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:27:59:21:AB:E3:06:F5:06:4F:B9:AB:B3:F8:00:38:57:39:06:96
X509v3 Authority Key Identifier:
keyid:82:9F:E3:97:03:49:7B:80:94:12:AA:7D:9B:53:D1:0C:5A:0A:86:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/829FE39703497B809412AA7D9B53D10C5A0A86B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp_jlwNJe4CUEqp9m1PRDFoKhrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/6/3139332e3139342e32302e302f32342d3234203d3e203236353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.20.0/24
Signature Algorithm: sha256WithRSAEncryption
31:4f:49:f2:c4:28:58:66:0b:22:8a:0c:b5:bf:c4:a3:b9:0d:
71:41:1e:40:35:b9:be:b3:cc:3f:f5:3c:a2:ec:e7:b7:aa:ff:
5d:0f:0b:69:af:f9:7b:e4:54:71:8b:4f:47:13:45:91:30:b1:
c5:30:dd:35:c7:c1:96:99:2f:65:49:d8:f8:89:c7:f4:20:b2:
cf:23:7f:cb:23:61:a7:66:5b:42:2c:0e:2d:12:77:6f:3e:b2:
35:82:28:9c:2f:1b:b2:7f:30:72:2c:df:49:d8:42:54:af:24:
20:1b:32:40:8d:65:1a:90:d9:04:bd:ea:67:fe:40:37:8c:71:
11:1e:f9:50:8b:e3:e2:eb:3b:b4:c2:b4:91:96:43:ef:6f:01:
6b:cf:b1:37:c5:7a:60:81:66:8d:88:1b:4c:d3:04:b0:cd:70:
bd:4d:66:45:3f:f9:ac:54:3f:3f:6a:89:de:51:1a:9b:7b:0f:
5e:5d:fb:fc:b9:1a:3c:9c:a9:b0:ab:eb:a5:e0:79:f8:06:66:
18:26:cc:e2:ba:f3:73:b4:e3:95:7a:bb:8d:60:21:15:4c:5a:
99:b6:ee:20:ba:52:de:34:95:4b:6d:4f:b6:c0:39:00:d9:87:
35:63:ec:15:8f:77:fa:44:5b:23:ee:c4:9f:be:1c:15:0d:17:
20:c5:a9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:58 2025 by rpki-client