Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/550be275-2398-4a04-b1f5-40ed81b67ecf/0/3139332e38342e3131312e302f32342d3234203d3e20323039323630.roa
File: 3139332e38342e3131312e302f32342d3234203d3e20323039323630.roa (raw, json)
Hash identifier: 4yZhoe5Jd7YpdCgX6CxPmhCCh6Fe0u8pYpbBq1ywEIA=
Subject key identifier: 9B:AC:1B:C2:15:1B:4D:C3:01:1D:3E:BE:E0:E0:71:37:9A:35:07:AF
Certificate issuer: /CN=be210ddf313c86c06e3867b3c4d5d80121f0bbe5
Certificate serial: 4AC88A941CCDB57A6427A946104E93A206BA497F
Authority key identifier: BE:21:0D:DF:31:3C:86:C0:6E:38:67:B3:C4:D5:D8:01:21:F0:BB:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viEN3zE8hsBuOGezxNXYASHwu-U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/550be275-2398-4a04-b1f5-40ed81b67ecf/0/3139332e38342e3131312e302f32342d3234203d3e20323039323630.roa
Signing time: Thu 02 Mar 2023 06:10:28 +0000
ROA not before: Thu 02 Mar 2023 06:05:28 +0000
ROA not after: Thu 29 Feb 2024 06:10:28 +0000
asID: 209260
IP address blocks: 193.84.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c8:8a:94:1c:cd:b5:7a:64:27:a9:46:10:4e:93:a2:06:ba:49:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be210ddf313c86c06e3867b3c4d5d80121f0bbe5
Validity
Not Before: Mar 2 06:05:28 2023 GMT
Not After : Feb 29 06:10:28 2024 GMT
Subject: CN=9BAC1BC2151B4DC3011D3EBEE0E071379A3507AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:64:67:e2:d9:59:10:d4:fb:ea:f7:2a:13:9f:
ad:ef:2d:25:a0:13:7e:d4:ed:1c:a0:97:d8:e6:c6:
0e:b9:51:56:b2:51:c6:0d:ce:c0:e8:d9:30:cc:f4:
bd:5f:28:8c:4a:f8:bb:3f:2b:9c:85:07:f0:f8:21:
1c:e5:e9:10:b5:83:8c:c6:c9:66:fa:75:0b:44:ba:
26:8a:3f:a4:82:59:65:3e:b9:b6:4a:25:2f:05:5d:
7d:e8:e9:b7:41:ba:4b:49:8d:03:2b:1e:f9:db:a9:
0b:d6:6b:66:c2:19:cb:94:4c:7f:94:80:a8:cd:78:
8d:ae:45:fb:07:d1:4c:bc:d0:dd:9d:b8:78:1b:04:
5f:90:c9:80:e6:b7:7a:5b:a8:75:9f:4c:82:b4:d0:
1f:46:1c:2f:5e:08:31:41:c6:5a:c2:66:eb:84:48:
73:78:7e:ff:ae:e0:51:ee:d5:0e:be:db:03:78:1d:
3f:d3:c4:d1:b2:50:cf:90:87:2c:56:19:e3:28:2a:
28:16:ff:ed:27:31:e4:6c:01:66:a2:ba:ec:df:3e:
d8:b8:34:c3:75:5c:fd:f8:a2:06:bc:65:30:75:c2:
5c:57:b7:d8:da:62:1c:56:cf:81:13:72:4d:d7:06:
ab:13:47:19:d5:e3:1f:06:ec:08:ad:5a:02:a6:6d:
97:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AC:1B:C2:15:1B:4D:C3:01:1D:3E:BE:E0:E0:71:37:9A:35:07:AF
X509v3 Authority Key Identifier:
keyid:BE:21:0D:DF:31:3C:86:C0:6E:38:67:B3:C4:D5:D8:01:21:F0:BB:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/550be275-2398-4a04-b1f5-40ed81b67ecf/0/BE210DDF313C86C06E3867B3C4D5D80121F0BBE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viEN3zE8hsBuOGezxNXYASHwu-U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/550be275-2398-4a04-b1f5-40ed81b67ecf/0/3139332e38342e3131312e302f32342d3234203d3e20323039323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.111.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:6c:7a:24:63:b6:64:c3:27:c7:9b:48:18:57:9a:ab:e3:f9:
c5:ae:43:44:8d:32:e2:62:96:23:fe:67:f9:8d:c6:8b:69:2f:
96:10:14:f4:a9:4a:18:22:0c:b1:73:77:6a:ad:2a:69:8c:63:
9c:e1:9e:75:90:80:23:cb:e2:46:ad:39:00:a4:0b:c3:cc:b9:
cd:40:3b:a7:28:3d:5e:af:73:44:b4:3c:65:f6:60:3b:7d:41:
d0:35:70:14:39:2f:9f:6a:ee:17:ab:18:6d:df:80:b3:ac:5f:
22:25:a5:0a:de:cf:4f:ba:0d:7b:c3:18:d8:98:a3:4a:f1:94:
cc:a2:10:e8:a4:c7:e1:53:6d:04:05:97:ca:f8:00:cb:15:e3:
c2:d8:33:23:7a:aa:c4:35:e7:98:0d:1e:90:4a:54:fe:8b:5b:
b3:c9:4d:a1:e7:77:2e:eb:91:c0:42:75:26:2b:ab:5e:84:09:
fe:56:4d:a7:70:ef:3b:a9:31:4e:64:7f:04:92:74:75:10:df:
0e:22:65:35:cc:2f:54:f5:75:3e:e3:d3:9a:a6:47:01:67:0d:
a5:0c:d6:a8:3b:d0:3e:b2:5e:bd:12:d0:0f:70:db:bd:56:35:
e3:e6:4a:7a:f8:87:ef:1a:1a:cd:31:33:3a:82:a9:29:81:d3:
e3:e3:ca:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org