Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/3139332e33302e3131372e302f32342d3234203d3e20383334.roa
File: 3139332e33302e3131372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 58iuU3GKwbOT7MV52Ogb/F6KureJnMhU6wkMAPWlwJw=
Subject key identifier: F3:04:74:04:83:14:61:32:B8:27:94:A5:BF:BE:33:0E:DF:9C:01:F2
Certificate issuer: /CN=423f0571785ed23f10a6cc7b27ac1b1c8781a67a
Certificate serial: 0C1D60DAD17F9C3DC26AB789ED4938BD422E486A
Authority key identifier: 42:3F:05:71:78:5E:D2:3F:10:A6:CC:7B:27:AC:1B:1C:87:81:A6:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj8FcXhe0j8Qpsx7J6wbHIeBpno.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/3139332e33302e3131372e302f32342d3234203d3e20383334.roa
Signing time: Fri 29 Sep 2023 11:15:51 +0000
ROA not before: Fri 29 Sep 2023 11:10:51 +0000
ROA not after: Fri 27 Sep 2024 11:15:51 +0000
asID: 834
IP address blocks: 193.30.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:1d:60:da:d1:7f:9c:3d:c2:6a:b7:89:ed:49:38:bd:42:2e:48:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423f0571785ed23f10a6cc7b27ac1b1c8781a67a
Validity
Not Before: Sep 29 11:10:51 2023 GMT
Not After : Sep 27 11:15:51 2024 GMT
Subject: CN=F304740483146132B82794A5BFBE330EDF9C01F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:57:0f:d7:99:fa:a9:8f:a1:3d:6b:7c:46:
3d:16:15:89:5e:47:9c:c2:29:79:53:b0:6c:dc:61:
d7:d6:53:c6:99:ca:f0:d5:2b:28:bd:d2:59:38:45:
cd:7f:63:f7:a9:76:f8:d8:4f:c9:af:c2:44:02:2e:
e3:c8:45:d2:6a:63:78:2f:70:01:2c:39:e5:b5:3d:
f1:9f:7d:60:58:08:e7:25:63:a7:e7:74:2d:9e:94:
14:3c:1c:47:ef:7c:eb:ce:dc:74:2e:48:29:43:ca:
a6:22:59:c0:31:a6:ae:31:78:d3:f8:e5:6d:fa:28:
4e:45:fc:e9:37:a4:ef:6c:28:3a:46:08:5b:df:d4:
a2:0a:e2:f6:25:4d:9d:f5:0f:ba:da:c5:98:a2:a9:
03:71:1c:44:e0:4a:5c:7b:78:2d:b1:76:67:b8:c8:
2f:c7:14:5a:ed:e3:c4:df:22:06:2e:d0:43:c6:fb:
28:58:04:00:99:87:de:50:9f:3f:8a:b9:60:4b:97:
fd:13:25:f9:34:23:a2:f6:94:ca:3c:ae:5e:f8:6a:
e3:2e:12:ae:6a:f4:e5:8c:14:23:30:8f:5e:42:d0:
d9:02:06:a2:31:21:6c:20:86:ac:bd:23:35:d8:65:
6b:b2:8d:c0:5a:e0:b2:a9:15:46:0b:73:b2:4a:5d:
61:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:04:74:04:83:14:61:32:B8:27:94:A5:BF:BE:33:0E:DF:9C:01:F2
X509v3 Authority Key Identifier:
keyid:42:3F:05:71:78:5E:D2:3F:10:A6:CC:7B:27:AC:1B:1C:87:81:A6:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/423F0571785ED23F10A6CC7B27AC1B1C8781A67A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj8FcXhe0j8Qpsx7J6wbHIeBpno.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/853b8c81-6107-435a-9df6-47677e8fa74b/0/3139332e33302e3131372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.117.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:63:e7:1d:25:b8:5b:9c:80:82:b9:64:a0:a6:76:e2:87:02:
28:4e:30:a2:8e:36:c8:41:1a:8f:07:20:0b:43:b6:74:6a:a9:
fb:e3:a2:9a:13:df:d6:11:77:c9:cd:47:bf:7a:c9:ae:fb:fa:
85:9d:fe:ab:a6:9f:55:cc:eb:62:3f:9c:8e:85:6f:6d:d9:16:
0e:48:20:e6:be:53:12:71:98:84:46:70:95:1a:79:8c:17:3b:
18:6e:1e:b7:62:e1:cd:e4:d4:70:4a:ae:84:9d:52:b6:4c:ee:
76:8c:86:92:87:a9:6b:12:5a:0f:b9:ed:e8:bf:98:93:5a:9d:
b9:65:18:f5:a8:a6:a9:ee:8c:4f:cc:79:98:1e:a1:d0:cb:af:
dc:5d:e8:28:53:f1:b8:d9:a9:19:17:af:cf:d5:31:63:0f:50:
e6:a0:fd:76:c8:bb:f8:ba:8c:9d:22:bf:ad:2c:ed:21:2d:39:
8a:ca:ed:c3:9b:dd:02:b7:0d:d7:f3:42:fa:f6:12:11:a2:70:
2a:61:44:35:bd:3a:b9:54:28:ca:ce:d3:45:2e:7a:73:7e:9e:
4f:63:48:2b:73:8d:20:9d:7c:c3:93:92:26:a0:9a:23:fe:3d:
66:fe:63:76:e5:47:b0:7b:15:64:ce:04:fd:c7:d0:53:82:4c:
d7:32:01:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:16 2025 by rpki-client