Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/39352e3137352e3134362e302f32332d3233203d3e203432363839.roa
File: 39352e3137352e3134362e302f32332d3233203d3e203432363839.roa (raw, json)
Hash identifier: 0tGiZp2f2FvBRgHFSbZyFuq+9x+OV3ZuHDTzDsfUEM4=
Subject key identifier: D9:F6:8F:F3:39:00:4F:3B:9C:FC:E1:E4:44:40:DB:E1:0A:63:40:1C
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 31713C24A271F1345D70AC3D731B8D50B3187BD2
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/39352e3137352e3134362e302f32332d3233203d3e203432363839.roa
Signing time: Wed 29 Jan 2025 12:43:33 +0000
ROA not before: Wed 29 Jan 2025 12:38:33 +0000
ROA not after: Wed 28 Jan 2026 12:43:33 +0000
asID: 42689
IP address blocks: 95.175.146.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:71:3c:24:a2:71:f1:34:5d:70:ac:3d:73:1b:8d:50:b3:18:7b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Jan 29 12:38:33 2025 GMT
Not After : Jan 28 12:43:33 2026 GMT
Subject: CN=D9F68FF339004F3B9CFCE1E44440DBE10A63401C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f4:3d:02:ce:1f:30:d0:b5:3f:06:97:ee:3e:
09:73:17:5b:62:fc:a3:29:88:82:17:c2:78:d2:cf:
61:1d:56:53:fe:af:f5:2c:0c:b1:7a:5d:b1:65:1a:
99:8e:14:15:1a:28:8e:b3:06:56:3c:b7:43:b7:5f:
03:bd:5a:22:2b:0c:3f:50:7e:b2:8f:a1:33:de:d5:
ee:fb:5e:7e:0b:18:d2:26:9b:8b:ee:f1:f6:80:1c:
60:6d:08:28:ca:4f:42:56:a4:81:ff:88:c4:98:99:
4f:40:9d:85:fd:27:8e:ad:da:35:f6:e0:9c:8b:64:
78:10:a2:6c:ea:61:7d:e1:7f:f1:c5:49:e3:dc:50:
8b:ee:74:b7:e0:9f:0f:1e:2a:74:27:4d:d7:5f:96:
40:90:b7:a8:b7:3b:d8:76:93:4a:de:8c:0a:d9:7b:
50:69:9c:3b:39:48:92:e2:83:97:6a:15:d8:11:8a:
5f:07:30:8d:b4:09:7c:74:e6:23:e3:47:c5:82:22:
98:de:9a:49:9f:d1:9e:25:a9:12:4d:8d:5c:64:fb:
a1:65:d6:a7:bf:b7:a9:d4:b7:28:16:8a:fb:12:a8:
e0:6d:25:87:b1:4e:0f:56:d5:fb:fc:aa:8e:bc:2e:
9f:66:58:6b:c5:0c:bc:03:d0:c6:e5:3e:ff:7f:f6:
0e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F6:8F:F3:39:00:4F:3B:9C:FC:E1:E4:44:40:DB:E1:0A:63:40:1C
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/39352e3137352e3134362e302f32332d3233203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.175.146.0/23
Signature Algorithm: sha256WithRSAEncryption
31:d5:3a:6d:4b:4e:04:ef:c3:70:28:97:0f:0b:0e:5f:d2:35:
f6:9d:b9:66:d5:41:9f:37:c1:bf:88:bc:f9:ef:5b:48:4e:cc:
a0:05:66:40:05:92:27:ce:1a:5e:7f:3e:0d:55:40:5f:5e:0c:
a7:a4:49:f4:9c:f4:c7:68:02:12:e2:59:ec:9f:50:10:b3:e9:
c2:b7:6d:3a:37:6f:42:1c:a4:de:5b:a1:8e:85:3e:0a:0a:2d:
26:be:85:4f:42:0a:9e:59:8b:a5:3b:40:1e:16:9d:5b:a9:46:
31:87:a0:40:a7:a4:b5:39:70:dc:24:bb:4a:91:8f:a9:69:b1:
a8:4b:98:6f:d8:6a:20:fd:98:45:97:6d:85:f8:e2:39:4f:4e:
4a:b7:77:dc:01:05:87:ed:1f:de:1c:de:5e:38:76:d7:df:ee:
0f:0f:69:c9:27:6e:d0:71:13:42:e3:4a:cb:ed:ca:c5:cb:d8:
18:11:3e:63:5e:9e:58:91:34:0c:3d:c8:69:9c:94:45:01:d8:
47:26:0f:9f:b5:1d:44:f7:2c:1d:c5:6e:25:c0:5c:d8:09:5c:
05:a2:02:e2:66:db:b0:fd:ee:c3:98:1b:80:3a:00:26:2d:25:
c4:45:ae:27:ee:ad:76:1b:ae:82:3b:7a:48:3c:98:d7:15:83:
ce:71:30:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:13 2025 by rpki-client