Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/38302e37352e3232312e302f32342d3234203d3e203539383935.roa
File: 38302e37352e3232312e302f32342d3234203d3e203539383935.roa (raw, json)
Hash identifier: mv4Wo5yibtpPyYeLD+42oXSWX7CDvVofVZMITXEhhRk=
Subject key identifier: 31:F3:9A:F7:12:0B:9C:04:F0:C1:6E:4B:86:AF:D4:79:DC:B5:61:60
Certificate issuer: /CN=4acd2d51922b2e1612e5f82c394f2d19800d1ddf
Certificate serial: 329F9C00EAE133508DB33C0B212FBEB12DB3D353
Authority key identifier: 4A:CD:2D:51:92:2B:2E:16:12:E5:F8:2C:39:4F:2D:19:80:0D:1D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss0tUZIrLhYS5fgsOU8tGYANHd8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/38302e37352e3232312e302f32342d3234203d3e203539383935.roa
Signing time: Sat 27 Apr 2024 14:39:23 +0000
ROA not before: Sat 27 Apr 2024 14:34:23 +0000
ROA not after: Sat 26 Apr 2025 14:39:23 +0000
asID: 59895
IP address blocks: 80.75.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:9f:9c:00:ea:e1:33:50:8d:b3:3c:0b:21:2f:be:b1:2d:b3:d3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acd2d51922b2e1612e5f82c394f2d19800d1ddf
Validity
Not Before: Apr 27 14:34:23 2024 GMT
Not After : Apr 26 14:39:23 2025 GMT
Subject: CN=31F39AF7120B9C04F0C16E4B86AFD479DCB56160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:7f:aa:e4:c9:63:f9:16:ab:35:e2:d9:ec:
b4:43:40:f3:88:bc:a3:8d:eb:58:b0:0e:64:72:17:
cb:1d:bc:07:df:50:f1:6d:07:80:23:f7:ae:d6:d3:
02:10:50:01:b2:7b:76:8a:94:c4:f6:05:0e:7f:76:
fa:07:58:08:51:c5:43:8b:b7:bb:cb:ea:c0:95:04:
b2:ed:ff:60:35:2a:42:f3:b2:a8:f9:e1:99:c3:52:
23:e8:9c:0a:70:f2:79:53:67:c5:e3:fe:cd:e3:50:
d0:d5:08:ef:c8:20:d7:d2:36:c1:a3:bb:f1:07:bf:
8b:83:62:00:23:7f:c3:f3:80:05:05:1e:2e:a8:34:
d1:1c:75:13:3c:24:07:97:b9:b9:b0:93:a9:1f:43:
c6:7c:6d:80:0a:39:36:5c:3a:09:a6:4f:61:24:7c:
f9:4a:65:63:d0:d1:4a:de:5d:89:99:33:13:c5:df:
ec:0d:d5:9a:9a:20:6a:0c:d5:7b:c5:fe:ff:2e:16:
c6:d7:13:a7:59:60:d9:d3:ad:f5:a1:91:46:a3:d6:
0a:8b:68:54:ea:c4:a1:4b:c6:38:50:9d:f6:9a:01:
c0:65:ba:1b:d4:9c:31:77:bc:c0:9e:dd:11:6e:87:
5b:a9:76:78:13:0e:4c:6e:ad:e7:b7:47:46:46:79:
54:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F3:9A:F7:12:0B:9C:04:F0:C1:6E:4B:86:AF:D4:79:DC:B5:61:60
X509v3 Authority Key Identifier:
keyid:4A:CD:2D:51:92:2B:2E:16:12:E5:F8:2C:39:4F:2D:19:80:0D:1D:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/4ACD2D51922B2E1612E5F82C394F2D19800D1DDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss0tUZIrLhYS5fgsOU8tGYANHd8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/38302e37352e3232312e302f32342d3234203d3e203539383935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:13:74:2f:7f:89:7e:10:87:a5:e7:bf:f1:58:a7:4d:c7:01:
de:31:ca:92:ac:c9:12:58:ff:de:4c:55:b6:bb:ef:44:a8:c7:
ff:69:c4:ba:01:94:f0:02:37:38:b3:ab:7e:26:51:33:60:8c:
02:0f:1c:cd:bd:70:a6:22:1a:8d:f5:4a:ba:29:0f:a0:f0:64:
d2:0f:19:d0:fd:a1:c2:a4:c0:b8:6d:25:06:ad:1c:ed:fc:f7:
d9:d6:f4:cd:13:8e:d3:1d:34:0c:0c:18:af:0c:5a:7f:f5:d7:
2f:f5:0b:51:a7:ae:6d:ae:b8:6e:b6:f8:05:ff:35:5b:4c:8c:
ae:19:a5:b7:9c:b0:26:11:44:f0:db:a5:38:d2:64:88:fb:ba:
dc:41:45:98:ee:64:29:9f:f5:3f:5e:1e:39:4c:d3:ab:db:d8:
50:71:d3:e8:6c:e9:47:74:ae:9a:0b:79:16:f8:b6:94:7b:85:
c6:e8:5f:13:7a:b6:cc:88:e0:0f:da:4e:d6:df:86:b0:e9:8e:
7b:45:bb:20:58:0e:a3:5e:90:3e:d3:ec:9a:1a:5e:2a:0a:5b:
35:2e:ab:18:e8:61:b2:d0:50:e8:b6:ba:06:95:c2:7d:88:c1:
41:6e:60:6a:cf:87:60:99:c5:5f:2a:c6:e0:11:6e:9f:1e:9e:
f2:2a:b8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:07 2024 by rpki-client on console-ams.rpki-client.org