Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e203134363138.roa
File: 3231332e3133392e36362e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: KfrtJjSrdaJP5uvqRj2CQapVnmUpyN82iN3vrd+6yjk=
Subject key identifier: D7:79:1F:76:DA:54:E6:E9:06:C3:92:F5:7C:5F:F7:6F:C7:52:63:15
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 3158944A6994BF47D8A4532D28C752609F53EFA4
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e203134363138.roa
Signing time: Wed 27 Nov 2024 06:40:13 +0000
ROA not before: Wed 27 Nov 2024 06:35:13 +0000
ROA not after: Wed 26 Nov 2025 06:40:13 +0000
asID: 14618
IP address blocks: 213.139.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:58:94:4a:69:94:bf:47:d8:a4:53:2d:28:c7:52:60:9f:53:ef:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Nov 27 06:35:13 2024 GMT
Not After : Nov 26 06:40:13 2025 GMT
Subject: CN=D7791F76DA54E6E906C392F57C5FF76FC7526315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:50:12:a9:c1:37:83:04:b6:2e:ec:e2:e3:
de:f4:4a:d4:46:7c:34:b9:80:61:bc:8a:2a:10:79:
ed:d9:9f:cb:f7:fb:e5:54:65:65:3d:b4:37:f7:7d:
e9:fb:e6:df:69:82:df:31:cd:9d:db:87:86:bf:15:
e1:5e:bc:04:2b:d4:f8:64:30:f0:ea:8f:8c:80:ec:
28:13:e4:36:b7:d4:ac:cb:02:7a:5b:5e:42:f9:1d:
e9:b9:b5:d1:b6:c5:3c:a7:b3:29:92:3b:c2:20:81:
09:17:76:04:fd:9c:b0:62:e3:ce:a1:d0:86:e0:5f:
02:df:2d:61:a4:33:91:56:cd:ec:cc:76:3c:e8:36:
e9:b0:54:5f:9b:0c:d7:5c:47:6d:b3:4c:10:65:6b:
25:20:21:ce:2b:f2:49:0c:99:17:a0:96:cc:6c:93:
3f:1c:56:9e:07:df:8b:e9:07:2d:e5:d5:21:6d:1f:
c1:49:35:c2:13:e7:31:93:6e:1f:98:6c:cd:0a:4d:
04:bc:6b:99:5a:78:84:b0:37:60:b0:93:51:31:10:
ee:2b:ba:8f:03:86:7d:49:23:3c:19:df:a8:11:3c:
36:35:59:bc:36:bb:50:a6:5c:8c:a5:63:8a:a8:90:
41:1c:a2:1e:0d:aa:8a:5c:5e:77:f0:c8:99:4a:2b:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:79:1F:76:DA:54:E6:E9:06:C3:92:F5:7C:5F:F7:6F:C7:52:63:15
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e36362e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.66.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:c2:6f:e6:fa:50:56:e7:30:1a:fa:f7:42:a2:fb:84:7c:db:
e9:11:ae:f9:f0:06:ab:3f:e1:f8:12:39:0e:77:91:5a:bd:25:
ce:52:de:01:f6:0a:17:50:22:d5:ea:35:f8:42:e4:38:8b:20:
eb:96:71:4b:42:35:45:9e:52:95:a9:f0:b3:24:73:40:75:a7:
7b:8f:73:d4:d0:7a:df:d5:07:a2:50:b7:3d:e0:31:bf:45:14:
fe:0e:50:ee:6e:48:42:98:5f:dd:88:e1:54:28:33:c0:44:25:
ec:4b:01:e3:49:d8:62:64:6b:86:c5:16:98:c5:f6:eb:cc:5e:
a4:cd:1a:ed:9d:d0:0b:86:de:e3:f9:7a:06:b5:12:94:a0:9b:
99:39:f1:61:8e:ef:ae:b6:12:8f:8f:e4:38:2c:1b:e7:0d:5a:
c6:8e:86:b2:f7:2d:1e:74:4b:23:2e:61:43:01:5a:99:b0:ed:
a6:90:05:3b:58:4d:52:75:2d:59:42:94:99:ff:aa:21:88:36:
fd:33:ce:a5:c1:a9:11:27:b9:0f:ca:fe:39:a1:97:69:91:c1:
da:6b:66:69:bf:82:09:68:6c:aa:fc:13:dc:6d:9a:cd:fd:3d:
07:9c:ba:9b:a3:81:3c:85:26:f2:ff:de:75:f6:30:0c:ba:b7:
f6:34:54:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:31:21 2025 by rpki-client