Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/39312e3231372e3231392e302f32342d3234203d3e20383334.roa
File: 39312e3231372e3231392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ucea/GVup/4PYClGKs0xpNUkAQKnkbKywABR0ngAJG4=
Subject key identifier: AE:45:05:CD:D3:12:B6:62:85:E3:D3:9F:C5:E0:AD:DA:42:B0:E5:9F
Certificate issuer: /CN=4055d133e6c4e342a1e28e5f6c47ca49aebd35f1
Certificate serial: 1A1EE5EB731C1CFEEDA2417A64F02D6EB82DFBF7
Authority key identifier: 40:55:D1:33:E6:C4:E3:42:A1:E2:8E:5F:6C:47:CA:49:AE:BD:35:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFXRM-bE40Kh4o5fbEfKSa69NfE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/39312e3231372e3231392e302f32342d3234203d3e20383334.roa
Signing time: Thu 11 Apr 2024 08:02:35 +0000
ROA not before: Thu 11 Apr 2024 07:57:35 +0000
ROA not after: Thu 10 Apr 2025 08:02:35 +0000
asID: 834
IP address blocks: 91.217.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:1e:e5:eb:73:1c:1c:fe:ed:a2:41:7a:64:f0:2d:6e:b8:2d:fb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4055d133e6c4e342a1e28e5f6c47ca49aebd35f1
Validity
Not Before: Apr 11 07:57:35 2024 GMT
Not After : Apr 10 08:02:35 2025 GMT
Subject: CN=AE4505CDD312B66285E3D39FC5E0ADDA42B0E59F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:d9:96:a6:b1:08:55:4c:6c:10:77:b7:8e:
ed:59:42:94:fe:f2:b2:7d:ff:ff:f8:3c:60:bf:97:
69:b4:e6:17:d4:63:6c:3c:05:ee:68:7d:54:0c:e4:
04:38:42:15:0d:72:23:79:4f:0c:c2:56:63:74:7d:
22:97:30:a9:27:e7:d2:f7:11:7e:d7:29:30:05:86:
c8:a0:2c:9c:1e:79:fe:a5:16:50:9d:2c:ce:96:af:
3b:df:6f:75:44:79:8a:58:37:29:29:c6:36:17:61:
8d:ac:cf:29:22:60:0f:ba:f7:5e:c0:c5:77:fa:d5:
78:bf:af:02:0e:52:0b:af:85:72:36:e3:73:99:db:
49:20:1a:47:fe:57:de:63:86:1b:2d:d3:2a:dd:f7:
bc:02:a8:8a:2d:6c:4f:d6:d7:0e:a7:47:e6:45:78:
1c:80:bd:14:3c:5a:b4:6e:dc:bf:3e:67:62:6a:7e:
7d:2f:f1:c3:38:47:d8:50:bd:2c:2b:44:95:5a:f8:
66:f9:39:c6:ad:0c:03:84:cf:b4:f1:88:87:de:bf:
f7:bd:62:07:a4:38:94:44:8b:45:f7:53:84:24:ed:
b1:26:ae:6b:70:15:5f:9c:86:39:ed:44:ad:e1:8a:
84:03:4e:40:5c:cd:09:59:84:1e:ce:54:d2:05:be:
3e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:45:05:CD:D3:12:B6:62:85:E3:D3:9F:C5:E0:AD:DA:42:B0:E5:9F
X509v3 Authority Key Identifier:
keyid:40:55:D1:33:E6:C4:E3:42:A1:E2:8E:5F:6C:47:CA:49:AE:BD:35:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/4055D133E6C4E342A1E28E5F6C47CA49AEBD35F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFXRM-bE40Kh4o5fbEfKSa69NfE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/39312e3231372e3231392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
Signature Algorithm: sha256WithRSAEncryption
88:36:66:1e:a2:61:7c:cf:77:6a:9f:58:7e:4d:91:a9:d7:94:
95:4b:aa:6f:43:f9:17:71:96:35:e7:e3:99:66:06:85:e2:4f:
7b:e8:07:33:b1:e5:f7:b9:c5:a9:56:09:c7:2f:cc:ed:fc:55:
16:d1:30:53:ff:7c:cc:45:92:11:10:53:db:a2:49:3c:dd:a1:
25:a5:12:f5:f3:c1:20:50:d3:43:68:f0:59:7f:6d:f2:9a:8b:
44:7c:3d:db:30:71:d7:6e:4a:39:cd:07:5b:48:93:db:6a:f3:
38:21:08:08:77:c3:18:10:81:ab:d4:c9:84:1a:b1:ce:05:ce:
d4:24:4b:15:3d:5f:ff:ce:75:bd:11:86:9a:30:59:80:0a:ab:
5f:a8:40:f6:bc:78:6a:b8:18:62:70:6d:9c:01:f2:23:9c:1d:
fe:98:92:46:0d:3a:dc:16:fa:0d:4b:e1:20:49:0b:bf:0d:b2:
1f:08:58:e9:7b:6d:6b:b7:aa:7c:6b:7d:c5:24:97:d3:a0:4d:
8c:55:8d:55:96:41:94:41:97:89:99:38:07:b5:5c:b3:bb:b0:
18:98:df:5b:82:c8:de:23:9e:95:59:1e:87:36:cb:a2:1e:01:
48:c6:41:9d:97:0f:dc:be:d4:b1:ab:0d:8f:a4:be:79:03:55:
b5:f5:e0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org