Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/3139322e3130392e31312e302f32342d3234203d3e203136323736.roa
File: 3139322e3130392e31312e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: qRWEBAMqR9/oXRv8A+nfXFduPkpHZgx8k4TEVcf/LOk=
Subject key identifier: DC:29:86:8E:76:BD:56:7C:69:64:26:E3:23:C5:AA:0F:85:38:C6:CB
Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial: 26DE0837BBE7AF9AD1082873E6AAAB9F1D91D56E
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/3139322e3130392e31312e302f32342d3234203d3e203136323736.roa
Signing time: Tue 11 Mar 2025 12:13:53 +0000
ROA not before: Tue 11 Mar 2025 12:08:53 +0000
ROA not after: Tue 10 Mar 2026 12:13:53 +0000
asID: 16276
IP address blocks: 192.109.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:de:08:37:bb:e7:af:9a:d1:08:28:73:e6:aa:ab:9f:1d:91:d5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Validity
Not Before: Mar 11 12:08:53 2025 GMT
Not After : Mar 10 12:13:53 2026 GMT
Subject: CN=DC29868E76BD567C696426E323C5AA0F8538C6CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:6d:62:48:d0:fe:7a:9a:9d:6e:d0:45:56:
49:e8:42:b7:47:34:a2:b1:2d:c2:f8:af:d7:47:f8:
5a:5e:db:cb:a5:07:df:7d:a6:40:66:13:66:64:c2:
4b:de:54:d4:47:8a:4f:1a:74:52:3f:2f:db:cf:da:
6b:8f:7a:8b:e4:b7:31:c0:52:de:f4:b9:c4:ef:95:
c8:58:cc:ea:77:bb:c5:65:79:db:50:50:76:cc:22:
dd:7f:5f:e4:16:ed:d3:ca:19:db:d4:4b:51:e7:0b:
6f:f7:82:73:fb:6b:82:c6:ab:d8:08:fc:93:88:5b:
97:5b:4f:02:25:1e:f7:79:8f:f6:2e:07:59:6d:dd:
b9:26:9d:c0:57:29:9d:b2:40:0d:af:be:3f:3f:d9:
54:79:9d:31:48:20:b7:12:18:64:16:eb:7e:cb:4e:
0d:08:80:69:5e:bf:34:f9:73:16:d7:3a:d0:aa:84:
48:6c:7e:97:5f:7e:f8:5b:63:0b:22:e2:c3:0a:42:
0c:19:3f:c9:7b:88:68:28:b9:49:6a:28:fd:41:77:
96:8e:9f:c1:1d:18:d6:86:c0:c9:12:50:f1:de:85:
b1:d5:6b:2f:40:aa:d5:9a:8a:dc:01:a2:d3:11:6e:
35:f4:29:e8:28:62:d6:16:e1:f9:59:d3:67:ab:68:
59:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:29:86:8E:76:BD:56:7C:69:64:26:E3:23:C5:AA:0F:85:38:C6:CB
X509v3 Authority Key Identifier:
keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/3139322e3130392e31312e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.11.0/24
Signature Algorithm: sha256WithRSAEncryption
27:7d:69:f0:93:ff:56:95:96:55:0b:be:b7:ee:21:ab:1a:e3:
26:88:df:84:68:ae:03:9c:06:99:53:47:97:4d:88:09:cc:57:
3c:f4:a9:ab:be:fa:f7:8b:5d:b1:7c:9d:13:0a:ad:56:37:85:
15:59:3c:3d:38:79:9b:95:71:da:16:c6:97:41:43:c7:c1:77:
da:04:a0:6a:99:db:8c:d6:2b:76:93:c6:2b:29:9c:50:13:91:
93:89:fb:e9:1d:7d:bf:39:08:dc:49:d6:d3:f5:74:35:cf:e4:
1f:bc:ee:38:a8:7f:ea:55:e7:18:99:d2:31:11:07:38:95:f7:
4a:fe:97:29:09:66:3e:26:d2:08:8e:bb:c4:95:50:cc:06:2a:
ac:de:f6:3b:61:a8:ec:cc:f6:5b:1d:8c:33:16:43:7c:86:29:
34:4a:cb:e8:73:f3:bf:39:20:57:42:e0:08:4c:68:5b:32:1f:
10:50:ef:38:cb:5f:11:d1:0f:fb:cf:a9:76:c4:ff:d4:cb:68:
0c:04:36:9e:4b:33:4b:ca:df:10:c0:ab:68:b1:4b:5d:06:be:
bf:d4:9b:f8:33:96:6f:20:46:df:4d:03:c0:aa:34:3c:73:e5:
c6:89:42:cb:79:e4:4d:24:4f:2e:64:af:fd:60:62:4c:62:4a:
7d:cb:a6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:05 2025 by rpki-client