Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/39312e3232382e3136382e302f32342d3234203d3e203231383539.roa
File: 39312e3232382e3136382e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: FdcpsyWyrTOTbqSLD54wVc2ZdC4x/cVAvtBeeAt1CSc=
Subject key identifier: 1F:D5:14:C3:F8:CF:94:4C:62:35:53:AA:54:26:EA:5F:CE:4A:45:4C
Certificate issuer: /CN=06da19f4285eb04d0310733f4ac00107b73337ad
Certificate serial: 79991ABABB5D5F6937558B3F5819ED33E3E8DD84
Authority key identifier: 06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/39312e3232382e3136382e302f32342d3234203d3e203231383539.roa
Signing time: Fri 08 Sep 2023 05:51:59 +0000
ROA not before: Fri 08 Sep 2023 05:46:59 +0000
ROA not after: Fri 06 Sep 2024 05:51:59 +0000
asID: 21859
IP address blocks: 91.228.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:99:1a:ba:bb:5d:5f:69:37:55:8b:3f:58:19:ed:33:e3:e8:dd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da19f4285eb04d0310733f4ac00107b73337ad
Validity
Not Before: Sep 8 05:46:59 2023 GMT
Not After : Sep 6 05:51:59 2024 GMT
Subject: CN=1FD514C3F8CF944C623553AA5426EA5FCE4A454C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:3a:f1:4e:a4:6d:68:84:27:40:29:6a:1c:
28:b9:a9:0d:17:ab:dd:4b:fb:d8:c5:95:f6:81:f2:
25:d0:88:b3:d2:59:47:dc:1e:67:0f:fb:ed:19:ae:
69:cf:8b:52:f3:a6:05:da:0d:97:5f:65:6b:a9:43:
ec:61:1e:34:48:70:18:cc:e3:08:a7:3c:26:7f:30:
bf:67:74:47:95:6a:5a:87:9e:1a:34:08:00:ab:23:
9e:38:40:a8:61:24:6a:7c:bd:9f:20:1b:22:3b:0d:
68:5b:d2:97:1d:ff:4f:d9:e8:15:6f:90:9c:7d:d9:
61:c5:7e:7c:de:d6:25:6f:75:d9:ad:df:a8:fb:12:
01:e7:b4:2a:c8:11:2b:04:6b:07:13:3d:5f:c8:d0:
cf:f5:8d:36:ef:c8:9b:cb:38:a3:ca:6d:b8:c2:7f:
d4:f5:f4:15:b0:8e:ad:b1:3a:c0:e4:be:f5:11:be:
74:36:a2:99:66:f3:e9:81:f2:60:e0:8e:cf:93:2d:
1a:11:01:9b:54:6f:41:1a:7a:ed:84:f1:cc:70:6a:
79:95:c9:b5:70:95:2c:57:fb:f5:7e:34:20:14:a1:
62:f7:36:cc:ae:c2:5e:b1:eb:06:ce:4f:6d:0b:cf:
c0:4b:2f:6f:17:bc:58:94:15:dd:55:b0:7a:a7:e1:
1a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D5:14:C3:F8:CF:94:4C:62:35:53:AA:54:26:EA:5F:CE:4A:45:4C
X509v3 Authority Key Identifier:
keyid:06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/39312e3232382e3136382e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.168.0/24
Signature Algorithm: sha256WithRSAEncryption
48:7d:3f:9c:fa:3a:32:31:c5:3f:f8:36:b7:6d:30:42:94:71:
3e:01:da:41:d2:24:47:a3:06:e1:99:e1:41:e5:6f:b1:2c:e0:
28:ed:7c:2a:7e:90:36:05:26:69:ef:cc:43:cd:74:2f:d5:d5:
0f:2e:bd:37:d1:ec:82:3a:53:f7:15:88:63:89:a3:07:b7:ec:
56:37:11:b4:b3:59:25:38:d8:61:61:a6:18:46:fa:fd:27:92:
b1:22:99:7e:72:27:03:dc:61:c9:68:2f:16:1b:05:7b:61:aa:
32:b6:60:fa:ab:5a:70:31:ba:79:b6:f2:f4:6c:82:1c:5d:a5:
fe:e8:ed:9c:d9:36:19:ab:42:fc:e7:6c:8f:9d:8f:49:cd:23:
d1:a9:01:91:c6:2d:53:b6:df:8c:f2:d6:1d:dc:51:db:90:56:
fd:de:d6:2b:50:99:e7:d7:06:48:cd:99:ba:ac:26:cb:4d:41:
23:55:4a:f6:cb:78:01:66:ca:58:ef:5d:eb:f6:66:42:59:13:
27:92:d8:d3:ea:7c:98:e9:0e:1d:37:d6:32:e3:9b:e1:60:7e:
de:8f:8b:d2:2a:2f:1f:7f:11:ad:d0:03:3c:45:3a:e2:5e:01:
6b:84:5e:df:1f:85:50:3a:02:a5:6d:de:12:91:f9:3e:5a:87:
f8:24:29:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:13 2025 by rpki-client