Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/38392e3130372e392e302f32342d3234203d3e203230343733.roa
File: 38392e3130372e392e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: i+qazWvaShiAmv8NRhB3BJlKakuTl75cRSZa29KIBk8=
Subject key identifier: 69:A9:F6:10:F2:20:73:37:18:2C:E0:5E:0F:06:63:E7:38:5A:85:F0
Certificate issuer: /CN=80e9a2846ec14a67d2c3e775614a574c10ecd0ab
Certificate serial: 194C8BF12D5057229D78D678EE46051897ADBF0C
Authority key identifier: 80:E9:A2:84:6E:C1:4A:67:D2:C3:E7:75:61:4A:57:4C:10:EC:D0:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOmihG7BSmfSw-d1YUpXTBDs0Ks.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/38392e3130372e392e302f32342d3234203d3e203230343733.roa
Signing time: Mon 18 Sep 2023 12:22:56 +0000
ROA not before: Mon 18 Sep 2023 12:17:56 +0000
ROA not after: Mon 16 Sep 2024 12:22:56 +0000
asID: 20473
IP address blocks: 89.107.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:4c:8b:f1:2d:50:57:22:9d:78:d6:78:ee:46:05:18:97:ad:bf:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e9a2846ec14a67d2c3e775614a574c10ecd0ab
Validity
Not Before: Sep 18 12:17:56 2023 GMT
Not After : Sep 16 12:22:56 2024 GMT
Subject: CN=69A9F610F2207337182CE05E0F0663E7385A85F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:33:02:89:bf:7f:f9:14:4e:09:af:dc:c9:
1b:6e:fd:19:90:10:95:9b:58:a0:83:69:c3:e4:8c:
c2:a7:e6:58:eb:36:d8:ab:a2:73:d5:d5:a4:fa:a5:
ca:af:6f:21:4f:d9:34:39:49:03:f9:0a:62:42:35:
12:a7:41:e3:96:05:01:17:99:d9:35:1e:32:9a:b3:
b8:9a:54:b7:39:aa:26:f7:9c:1f:29:82:75:c2:13:
1b:fa:5c:bb:24:0b:1e:53:8a:1a:ff:f0:bc:c3:da:
e4:8e:de:2a:3d:0b:ef:21:b7:c2:73:c2:e6:01:06:
a8:00:4d:da:4f:7c:dd:68:57:5e:2a:bb:f2:09:81:
44:e2:53:59:42:e8:df:8c:33:5b:b3:2c:e8:5e:91:
ec:00:fd:f2:32:4e:98:70:eb:4b:29:51:11:3c:80:
21:11:cd:d3:95:e0:3b:f6:2d:8f:f6:3f:b9:97:01:
f8:83:d1:0c:66:d9:fd:32:a0:8f:80:46:32:0c:df:
02:f0:24:83:cf:4b:16:3c:0b:39:1b:a0:28:a0:4a:
3c:cf:6c:52:95:88:60:db:d9:bd:57:8e:5e:28:34:
71:fc:6a:ff:93:da:48:0e:7a:f1:ee:43:eb:b8:1d:
d9:35:24:0f:e2:0c:dd:30:37:4c:9d:10:79:1e:08:
7f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A9:F6:10:F2:20:73:37:18:2C:E0:5E:0F:06:63:E7:38:5A:85:F0
X509v3 Authority Key Identifier:
keyid:80:E9:A2:84:6E:C1:4A:67:D2:C3:E7:75:61:4A:57:4C:10:EC:D0:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/80E9A2846EC14A67D2C3E775614A574C10ECD0AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOmihG7BSmfSw-d1YUpXTBDs0Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/38392e3130372e392e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.9.0/24
Signature Algorithm: sha256WithRSAEncryption
65:15:a8:ac:71:75:70:53:3f:87:13:82:68:6f:1e:e7:7b:49:
42:5d:0f:b1:82:62:d0:2d:29:17:8d:ab:33:69:b0:2c:2d:be:
a4:67:4f:86:0b:fa:34:86:07:66:80:5e:0e:85:a3:32:38:90:
43:0b:8a:09:1d:9a:d1:ba:39:d2:3a:08:04:b7:e3:22:e8:c2:
a7:d7:84:e8:9b:a5:20:4c:9c:e9:a7:5a:4e:e0:13:5c:22:b8:
ed:5d:da:81:e5:58:07:99:db:ce:19:27:06:34:18:82:74:cc:
d6:e4:c0:66:49:70:d5:dc:53:1e:81:ff:55:77:14:6f:ae:2d:
56:87:ed:47:24:e0:b3:0f:50:6c:a7:ed:71:cc:f8:97:56:81:
1a:30:37:03:8c:44:19:e8:d5:36:ff:92:a1:0c:9a:d8:24:2b:
3a:0d:cb:8f:ad:cb:dd:b3:7f:01:12:8a:00:2c:78:97:fc:96:
f8:01:c3:e6:da:c8:63:ba:83:85:ab:f5:7f:88:ab:e5:6d:ae:
a9:4e:e1:bb:e6:c0:ac:ef:66:72:16:c7:ee:32:3a:bd:02:d1:
1b:3c:64:bb:54:11:b3:98:3c:76:26:9e:e7:11:53:48:3f:da:
ce:0d:36:6e:0e:26:8f:9a:b5:89:74:dd:e8:42:9b:56:a4:f5:
1b:11:e1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 09:57:09 2023 by rpki-client on console-ams.rpki-client.org