Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/39312e3232382e3136382e302f32342d3234203d3e20383334.roa
File: 39312e3232382e3136382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: nqHnC637O6qFLQ+Y5go0rnVJZ+R/PLwb15VT5uDn19M=
Subject key identifier: 61:D8:C6:10:71:8F:FD:98:61:DE:BA:CB:16:55:89:43:2F:C0:FD:E1
Certificate issuer: /CN=06da19f4285eb04d0310733f4ac00107b73337ad
Certificate serial: 6F5A015CC3DD94C2F0F716EA3C6FBE3F4DC1B284
Authority key identifier: 06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/39312e3232382e3136382e302f32342d3234203d3e20383334.roa
Signing time: Sun 14 Jul 2024 00:01:22 +0000
ROA not before: Sat 13 Jul 2024 23:56:22 +0000
ROA not after: Sun 13 Jul 2025 00:01:22 +0000
asID: 834
IP address blocks: 91.228.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:5a:01:5c:c3:dd:94:c2:f0:f7:16:ea:3c:6f:be:3f:4d:c1:b2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da19f4285eb04d0310733f4ac00107b73337ad
Validity
Not Before: Jul 13 23:56:22 2024 GMT
Not After : Jul 13 00:01:22 2025 GMT
Subject: CN=61D8C610718FFD9861DEBACB165589432FC0FDE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fe:24:db:35:d0:02:78:e1:39:24:88:5f:ba:
13:71:2e:e8:16:0b:cd:97:95:3a:55:fb:19:ac:ab:
59:c7:10:77:0d:df:5b:1e:5d:7a:47:ba:3b:c2:22:
42:e2:7b:5f:3f:85:24:12:b9:77:3e:b3:11:7e:3f:
f0:45:34:1a:4c:d9:37:cd:00:a2:12:09:a4:3a:3c:
aa:64:33:a3:eb:f8:41:fb:0f:88:56:3c:bb:f5:35:
5f:71:40:82:54:26:d4:07:17:a0:21:2b:72:bc:da:
77:a5:4b:8b:25:0a:e1:49:d8:28:4a:66:d1:c7:4a:
f2:bd:39:1e:80:0a:d4:74:6e:27:50:67:0b:1d:45:
dc:45:d9:32:69:9a:d6:f5:e7:df:29:cd:21:63:d9:
30:a3:69:9d:e8:af:32:01:4d:26:95:b0:af:d6:97:
bf:1a:9a:27:85:a4:7e:ea:0c:f6:7b:f1:4a:2b:59:
51:3e:dd:95:3c:28:72:d4:7d:6b:25:76:57:7d:52:
b9:cd:38:0c:95:6d:2c:bb:3e:21:b7:47:e2:e7:10:
a0:39:2a:5c:5e:18:5f:7c:d6:ac:49:cd:63:5b:5d:
5e:b0:d5:eb:17:d4:ed:59:80:a8:0f:08:6f:02:3c:
c9:54:aa:da:49:9c:44:80:2f:50:c5:fb:1b:5d:bc:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D8:C6:10:71:8F:FD:98:61:DE:BA:CB:16:55:89:43:2F:C0:FD:E1
X509v3 Authority Key Identifier:
keyid:06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/39312e3232382e3136382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.168.0/24
Signature Algorithm: sha256WithRSAEncryption
48:4d:07:05:d2:c2:a6:91:08:b6:d5:9c:02:a7:04:6c:15:a8:
3d:34:8b:4d:62:9d:19:93:cd:df:0b:09:c8:29:db:5b:b3:e9:
94:76:d2:9e:95:c3:cd:a7:de:7f:d4:86:bb:ae:72:ae:e7:fa:
30:98:3b:29:62:b0:57:0c:77:c1:de:e0:31:3c:98:17:d0:8f:
fa:34:05:1b:68:ac:3c:fb:59:77:99:2d:8e:98:f1:68:c8:9a:
79:f5:10:2a:d8:c9:7f:26:f1:72:56:a0:4f:46:a1:4f:c7:10:
6d:6c:f8:32:fb:0f:9b:ac:6f:73:f8:47:cc:b2:80:cd:4c:9b:
1e:2f:4d:14:33:02:f8:4e:e0:8a:f2:b0:fa:0f:28:6c:19:a5:
87:c6:4b:97:3f:c5:88:4d:03:b0:65:8d:98:0a:4a:12:71:8e:
50:1e:92:31:8d:dc:c1:09:86:cf:d5:b8:f3:4d:63:2a:07:0d:
dc:28:1f:21:b7:6d:11:9f:d7:c4:88:30:c9:72:f1:5c:d5:1d:
de:15:41:43:bc:98:98:45:cb:53:0b:2b:d9:99:b9:c0:ed:9d:
0e:c1:f4:cf:e5:d1:e5:08:59:0e:56:07:55:1e:82:c0:d5:65:
d7:d4:bd:02:07:2f:9e:b2:71:3d:dc:0b:b0:7c:9d:57:de:f0:
de:e1:09:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:35 2025 by rpki-client