Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32342e302f32322d3234203d3e20383334.roa
File: 37392e39392e32342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: aDbiR/gcYMc8+039likIb7le9Um5lwcOHFTe8LQG3Mo=
Subject key identifier: 23:7C:2A:F2:2D:02:E6:64:06:6F:18:29:DB:BF:18:61:7A:5F:60:A5
Certificate issuer: /CN=d7be9d3520750ef280e734f41346d051c8b2f524
Certificate serial: 52CA89D11F1041F774602756E4497701811C4867
Authority key identifier: D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32342e302f32322d3234203d3e20383334.roa
Signing time: Tue 11 Jun 2024 00:04:22 +0000
ROA not before: Mon 10 Jun 2024 23:59:22 +0000
ROA not after: Tue 10 Jun 2025 00:04:22 +0000
asID: 834
IP address blocks: 79.99.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ca:89:d1:1f:10:41:f7:74:60:27:56:e4:49:77:01:81:1c:48:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7be9d3520750ef280e734f41346d051c8b2f524
Validity
Not Before: Jun 10 23:59:22 2024 GMT
Not After : Jun 10 00:04:22 2025 GMT
Subject: CN=237C2AF22D02E664066F1829DBBF18617A5F60A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:5c:52:93:e2:6b:df:33:41:f7:ff:f1:04:
c3:46:43:cf:1d:2c:a2:c6:f4:20:b1:77:bb:8f:1e:
13:7d:0f:38:16:ed:b8:9a:33:a6:be:a4:36:ad:f9:
2e:f1:91:56:a7:f7:51:d1:9a:b6:95:03:c4:7d:45:
a3:d6:4f:26:23:a8:d0:f8:91:59:be:6a:44:fb:ea:
02:51:c8:9a:1b:8c:40:34:d4:43:0a:bb:a0:19:19:
fd:97:d1:03:ca:f3:a4:f7:64:8a:cb:f8:20:76:f2:
ab:f6:9e:ec:1f:6f:ab:99:32:ce:d5:76:b9:ba:fa:
cb:48:cd:1e:20:b0:ed:d9:91:49:f4:b0:21:b7:86:
98:0b:29:7b:af:7e:ad:d9:7e:e5:70:41:7e:dc:f2:
94:7f:56:be:a3:98:dc:a6:c3:87:04:f4:62:2f:7b:
ca:a1:7a:6d:01:0a:54:dc:dc:91:9c:28:1d:7b:18:
bd:1b:2a:08:ab:11:cc:3c:55:1c:90:6e:41:c4:87:
7d:3b:53:d8:e0:f0:2f:cf:f8:5c:c8:dc:62:75:f4:
dc:83:c6:fe:e6:5e:a5:d1:83:e3:ad:c0:a5:c7:9b:
6c:28:e5:c6:ad:31:9e:8a:bf:bc:20:81:08:b9:2b:
99:d1:f6:23:98:58:45:b5:97:22:51:5f:1f:7c:61:
03:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7C:2A:F2:2D:02:E6:64:06:6F:18:29:DB:BF:18:61:7A:5F:60:A5
X509v3 Authority Key Identifier:
keyid:D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.24.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:0b:d7:f3:4e:10:09:9d:16:17:b0:55:bf:2b:e9:c7:93:99:
c5:25:3d:f5:0e:6d:5e:33:bb:0d:77:12:a8:cd:61:ce:08:3d:
8e:90:91:e4:55:c9:cf:d6:72:67:77:8e:bc:f1:97:59:44:14:
5e:73:e0:5e:f9:55:50:a3:66:41:2e:27:bf:63:0c:a6:24:35:
8e:7a:68:43:b9:a1:77:9d:83:73:6e:82:63:da:9a:3e:17:52:
c3:43:06:32:d4:90:87:e9:e1:ae:3c:09:55:33:ab:a5:97:31:
69:25:f6:e4:e1:d1:c4:b2:f1:29:65:ff:ba:4a:88:4c:14:b3:
a3:55:00:9a:7c:bf:90:70:97:bd:a7:35:83:db:2a:e7:98:a9:
dd:3c:e5:ca:d4:31:37:79:06:d5:a9:30:77:81:2c:b8:62:cf:
23:05:b0:6e:cc:bf:9d:3f:e7:35:28:81:69:9a:36:1e:47:d5:
a8:a0:60:e3:21:e5:ba:ac:d2:28:4d:78:ea:7d:76:8b:4d:18:
0f:e8:96:f1:fe:a6:2b:cd:91:62:3d:53:2c:b1:05:3d:5b:43:
7c:12:8b:a9:4f:af:fc:bd:81:6d:68:5d:ab:aa:35:4b:ba:f3:
3b:b1:45:df:0b:67:3a:44:98:da:08:3b:fd:3a:93:38:5b:1f:
65:ea:2b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 14:18:39 2024 by rpki-client on console-ams.rpki-client.org