Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131382e302f32342d3234203d3e20313336353537.roa
File: 39332e39352e3131382e302f32342d3234203d3e20313336353537.roa (raw, json)
Hash identifier: qqVPSWZLREddEW4nL5NY3Bls+ZrG5ASHmT6xiutXttk=
Subject key identifier: 0F:5B:A4:9E:5D:DD:55:FA:4B:C2:63:49:62:A2:49:34:46:D9:CA:B2
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 1CE1051BCCFB4A2C3FEFCD355529968CE9985309
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131382e302f32342d3234203d3e20313336353537.roa
Signing time: Thu 28 Nov 2024 04:30:10 +0000
ROA not before: Thu 28 Nov 2024 04:25:10 +0000
ROA not after: Thu 27 Nov 2025 04:30:10 +0000
asID: 136557
IP address blocks: 93.95.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e1:05:1b:cc:fb:4a:2c:3f:ef:cd:35:55:29:96:8c:e9:98:53:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Nov 28 04:25:10 2024 GMT
Not After : Nov 27 04:30:10 2025 GMT
Subject: CN=0F5BA49E5DDD55FA4BC2634962A2493446D9CAB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ba:e5:cf:18:11:98:56:c2:02:21:45:1c:27:
b5:ab:0d:ee:f0:94:2c:d0:11:84:c6:9a:f0:d2:3b:
8f:69:89:19:d0:96:1f:62:47:0f:08:24:ab:4d:c1:
4b:b3:b7:d8:f6:9f:cf:e9:b7:2d:c3:df:b7:25:6e:
e1:25:a9:33:57:87:bc:58:ac:ba:b7:d4:06:bf:3c:
16:ec:b0:65:10:c3:12:94:04:e4:6a:db:6a:57:d0:
48:15:6e:7a:35:af:92:d3:f8:ee:b7:9d:db:16:bd:
f2:2b:a7:96:77:8d:7c:7d:b3:35:ed:1c:dc:54:5a:
0f:3a:13:c2:04:7e:9b:8e:f2:16:bf:f1:04:6c:61:
64:bd:2e:ca:d0:d5:e4:bd:36:56:65:3a:21:8a:43:
17:35:bc:69:29:66:df:57:50:c8:7b:0a:4f:d8:66:
1f:2f:dc:31:cc:fc:92:4b:91:15:84:13:09:c2:69:
e9:6d:9e:a8:e9:3c:30:d2:cd:91:98:ab:4e:a7:27:
d2:f6:a5:4b:ce:f9:84:39:be:51:9d:47:3d:b5:92:
76:af:e6:bc:38:31:0a:4f:d3:06:a0:89:6b:7b:06:
59:66:7d:e5:d5:32:c4:7c:29:da:55:37:77:20:74:
62:cf:aa:13:ec:62:14:fb:61:96:1e:bd:1b:3a:f2:
25:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5B:A4:9E:5D:DD:55:FA:4B:C2:63:49:62:A2:49:34:46:D9:CA:B2
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131382e302f32342d3234203d3e20313336353537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.118.0/24
Signature Algorithm: sha256WithRSAEncryption
ef:77:d0:67:d1:d1:b5:f6:52:ba:bc:1c:6a:dc:74:98:e4:39:
ee:d4:b2:45:af:78:68:04:a9:a4:33:2f:4d:38:c5:c1:3c:b5:
14:b2:36:69:fb:77:18:31:49:3e:ab:8a:a0:8a:97:7e:19:aa:
b1:b5:bc:00:e2:09:95:6c:8e:03:83:2f:b1:4e:72:bc:00:f2:
de:f5:dc:4d:19:42:13:e7:30:cf:b4:e4:5c:13:33:cb:97:34:
b2:a7:0d:05:7b:2e:01:08:a5:6f:bb:90:a4:d3:e9:a0:f4:87:
86:c6:36:30:fa:7a:25:b3:fb:98:e8:6a:04:be:d1:2b:6a:16:
ed:7c:22:4b:20:cd:28:54:42:59:e9:72:c0:ff:10:b2:38:6e:
02:c7:f3:e9:95:38:87:35:df:0d:02:a9:87:94:2f:05:17:34:
88:06:de:c6:bc:07:eb:fc:ed:17:5a:5f:5e:89:8c:06:2e:e4:
48:11:cd:bc:62:41:94:e3:5d:70:1b:cc:9a:86:86:08:19:d8:
15:64:3b:04:cc:b7:34:78:14:27:45:4a:dd:28:1f:3d:f8:aa:
10:fd:f2:bf:23:98:31:94:9d:4b:78:fe:09:7c:9e:4f:26:da:
6d:88:2e:5b:e7:a3:c8:67:33:df:da:6b:ea:32:65:75:44:83:
14:1b:89:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:01 2025 by rpki-client