Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32382e302f32322d3234203d3e2035303635.roa
File: 37392e39392e32382e302f32322d3234203d3e2035303635.roa (raw, json)
Hash identifier: 5kI8ChhP2VpA8kjgx3fUrfQ26kWq6cDCzzxHAI8/cS4=
Subject key identifier: 1B:34:8D:3C:5D:E1:16:98:FC:A3:8A:BE:E7:A6:D6:39:B5:66:86:02
Certificate issuer: /CN=d7be9d3520750ef280e734f41346d051c8b2f524
Certificate serial: 39113A0AD27ADC0774026DC3BC2BC3AFCCF547D7
Authority key identifier: D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32382e302f32322d3234203d3e2035303635.roa
Signing time: Fri 18 Aug 2023 02:59:45 +0000
ROA not before: Fri 18 Aug 2023 02:54:45 +0000
ROA not after: Fri 16 Aug 2024 02:59:45 +0000
asID: 5065
IP address blocks: 79.99.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:11:3a:0a:d2:7a:dc:07:74:02:6d:c3:bc:2b:c3:af:cc:f5:47:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7be9d3520750ef280e734f41346d051c8b2f524
Validity
Not Before: Aug 18 02:54:45 2023 GMT
Not After : Aug 16 02:59:45 2024 GMT
Subject: CN=1B348D3C5DE11698FCA38ABEE7A6D639B5668602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2a:a7:1d:30:e4:86:78:a4:0c:4c:d8:4c:7b:
f0:21:5d:66:ad:fc:48:f2:33:24:c4:c4:5d:c5:5c:
5a:ab:61:3a:93:72:95:df:99:9d:f1:3e:6f:37:30:
7b:b0:c3:cb:5c:58:df:87:c5:74:f4:2b:79:58:b5:
77:af:52:8b:7a:1b:0a:8d:92:a1:7e:55:42:79:4d:
43:d4:46:23:0a:1b:0b:45:b7:0a:a0:d7:4b:95:44:
16:39:ba:17:77:9b:d6:3a:21:c3:24:29:a9:ab:f5:
63:68:f9:94:f0:db:d2:52:38:d6:2c:9d:b0:78:03:
27:39:8c:7a:72:c8:4f:b6:67:ce:44:23:1d:46:ab:
84:e8:ef:4d:5b:33:68:80:da:c5:cc:f1:15:e2:35:
ab:79:ca:f2:e1:3e:0d:84:e3:65:9d:64:68:ed:e1:
38:ea:41:ac:4f:f7:fe:63:c3:16:4a:ce:5b:bf:9e:
a2:66:22:3a:cb:b9:58:33:d9:c7:71:48:e5:47:16:
56:d7:da:79:80:1a:17:dc:88:cd:99:dc:65:19:f8:
42:c8:00:44:36:5f:9a:df:04:2d:7f:65:f7:f3:12:
e1:61:b2:44:08:72:9e:36:e0:dd:2f:b4:07:e8:53:
bd:83:50:17:a9:49:c6:ce:91:77:fc:98:b9:8d:e9:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:34:8D:3C:5D:E1:16:98:FC:A3:8A:BE:E7:A6:D6:39:B5:66:86:02
X509v3 Authority Key Identifier:
keyid:D7:BE:9D:35:20:75:0E:F2:80:E7:34:F4:13:46:D0:51:C8:B2:F5:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/D7BE9D3520750EF280E734F41346D051C8B2F524.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/176dNSB1DvKA5zT0E0bQUciy9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/56ae2182-288d-4ffb-8af9-8c2bcac1979a/0/37392e39392e32382e302f32322d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.99.28.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:78:87:be:1b:9a:99:d3:b6:91:02:34:b4:2a:47:cc:00:6f:
61:7a:82:77:5e:75:d8:93:33:2c:3e:70:d2:7d:d0:47:d3:35:
3e:ef:c7:96:4d:2d:02:ce:16:bc:76:bf:95:86:1d:4f:56:72:
aa:f6:71:1f:fe:d3:e7:c8:9d:0c:65:41:c3:a9:10:fc:72:9b:
56:7f:68:16:da:70:e4:9c:d7:b4:a0:d8:94:bd:4e:a5:3f:52:
91:60:0b:98:25:19:9c:09:af:12:12:f0:38:4e:3f:1f:81:fd:
74:22:9a:46:19:af:f2:ee:47:61:36:da:65:96:e1:c2:3d:ef:
bb:62:0b:41:92:9c:8b:79:0e:d9:fb:6d:41:97:cf:54:bb:dc:
58:3f:9a:13:de:c3:e7:da:e4:b8:e4:80:01:72:b9:ad:c9:c0:
4e:49:17:0e:a4:f1:63:77:97:b0:16:85:16:ae:f4:0b:ed:2c:
35:af:f6:04:6e:e0:50:0a:5e:81:c3:67:84:91:bc:d5:6f:3e:
42:b3:2a:6f:66:ea:5d:1e:eb:ad:07:44:a4:f7:d1:e1:85:0c:
13:97:07:79:c9:7c:7d:62:1a:1c:a7:47:3c:78:e5:d0:07:b5:
07:9f:2d:05:56:e1:5a:f7:9d:6b:6a:43:44:c6:14:80:8a:b7:
2d:b4:1b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:00:21 2025 by rpki-client