Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/469194fe-c1da-4f4b-966a-6cee6302666d/0/3139332e382e3230332e302f32342d3234203d3e20323131353835.roa
File: 3139332e382e3230332e302f32342d3234203d3e20323131353835.roa (raw, json)
Hash identifier: pMX4ynQMOAtkkKbQRtDQJvGTFJDs/3l68OxV+XeYbuY=
Subject key identifier: A8:1F:B2:FA:31:B4:60:19:E4:60:FE:D0:15:37:6E:61:9F:E5:83:4D
Certificate issuer: /CN=81657b6a579ca306a926b953274e145bb7a36ffc
Certificate serial: 2CE702775A0E48A6B3FDC765DF5D6BC67C35D22A
Authority key identifier: 81:65:7B:6A:57:9C:A3:06:A9:26:B9:53:27:4E:14:5B:B7:A3:6F:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWV7alecowapJrlTJ04UW7ejb_w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/469194fe-c1da-4f4b-966a-6cee6302666d/0/3139332e382e3230332e302f32342d3234203d3e20323131353835.roa
Signing time: Tue 06 Dec 2022 13:52:26 +0000
ROA not before: Tue 06 Dec 2022 13:47:26 +0000
ROA not after: Tue 05 Dec 2023 13:52:26 +0000
asID: 211585
IP address blocks: 193.8.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e7:02:77:5a:0e:48:a6:b3:fd:c7:65:df:5d:6b:c6:7c:35:d2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81657b6a579ca306a926b953274e145bb7a36ffc
Validity
Not Before: Dec 6 13:47:26 2022 GMT
Not After : Dec 5 13:52:26 2023 GMT
Subject: CN=A81FB2FA31B46019E460FED015376E619FE5834D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:29:8b:b8:77:f2:de:39:4f:18:25:e0:ff:
cd:ea:10:7d:ee:0c:35:e2:18:09:2d:1b:b4:41:9d:
84:da:37:63:1e:18:2d:76:05:96:98:df:5b:79:ce:
b2:6d:23:ee:ee:0e:19:bf:46:c7:e3:fc:1f:cd:68:
62:2e:60:5f:9f:2d:41:80:94:6f:31:74:7a:78:19:
20:16:78:93:2e:30:53:ec:3c:59:80:5e:f0:ba:4b:
b1:05:dc:73:47:82:28:04:98:22:10:e3:8f:c4:ca:
da:91:23:19:1d:0e:36:56:3b:72:38:fa:06:b8:3c:
de:40:b6:54:d1:ce:fe:40:3c:68:e8:71:7f:4f:0f:
d5:c9:55:ba:c5:18:26:f8:2c:c9:69:b9:43:2f:88:
1b:55:67:1b:f1:fe:b1:cc:8b:da:9c:a8:90:31:c8:
37:68:c6:1c:7d:2b:6b:ab:c8:43:72:ed:ec:54:28:
f6:c2:1d:7c:9b:b5:74:53:a2:44:83:0c:26:73:84:
60:ed:b8:81:55:7c:1f:b3:cc:2b:07:34:1c:37:29:
6b:e1:26:a9:dc:8b:e4:82:c8:44:9e:b3:ed:27:b1:
19:ed:bd:57:14:33:dd:e1:c1:ee:d2:ab:a3:16:1a:
48:0b:bd:3f:c8:5e:ac:24:58:60:ee:29:49:9a:10:
42:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1F:B2:FA:31:B4:60:19:E4:60:FE:D0:15:37:6E:61:9F:E5:83:4D
X509v3 Authority Key Identifier:
keyid:81:65:7B:6A:57:9C:A3:06:A9:26:B9:53:27:4E:14:5B:B7:A3:6F:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/469194fe-c1da-4f4b-966a-6cee6302666d/0/81657B6A579CA306A926B953274E145BB7A36FFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWV7alecowapJrlTJ04UW7ejb_w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/469194fe-c1da-4f4b-966a-6cee6302666d/0/3139332e382e3230332e302f32342d3234203d3e20323131353835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
90:46:15:fa:0a:0f:27:03:11:e9:49:d2:4b:d8:7e:c9:84:bd:
58:90:9d:dd:a6:ce:e0:16:64:2c:4a:ae:1f:d4:e3:a7:dc:73:
c4:56:90:63:46:39:13:74:f9:9f:0b:91:5c:3f:80:3f:75:d4:
f8:86:fd:ec:37:f2:4b:9c:d0:7a:73:d9:a5:45:ee:bb:f3:ce:
ec:16:3a:ca:7e:54:70:30:48:d3:19:84:71:da:5e:2a:61:1a:
14:79:3c:4b:09:1f:78:7b:c5:10:99:d3:54:f5:ed:ff:7d:f6:
5a:55:38:66:7b:ed:7a:30:5e:52:3a:4a:e2:cf:ad:6d:1f:6b:
07:1d:c5:fe:5a:89:0b:7f:9c:0b:c7:33:52:57:5a:29:2e:23:
57:89:dc:51:33:ce:df:c4:76:7b:50:1b:24:b8:b1:f7:f6:8f:
3b:d1:33:23:36:8c:80:ca:a3:9c:f9:ff:90:8b:f0:e3:8a:ba:
89:00:7c:8e:37:57:cd:77:fa:85:d4:e8:15:e8:47:3f:ab:20:
24:4c:4f:b0:97:5d:49:62:f5:2b:ef:1c:7c:b8:f0:6a:52:fd:
fa:7d:e2:42:1d:b3:a7:56:d4:31:27:f8:13:9f:ad:d0:b9:47:
76:69:34:76:39:84:d8:11:62:6e:d7:d3:2e:a7:9f:56:2f:1e:
23:f6:d3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:00 2025 by rpki-client