Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/39332e39322e31362e302f32342d3234203d3e2037303138.roa
File: 39332e39322e31362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: lElKcCz07g1zqSYmP2uLsySDiDMbyQ104+JdMYfQSgY=
Subject key identifier: A1:7F:08:70:98:CA:A0:F6:9C:56:D9:64:79:46:4B:57:35:23:5D:43
Certificate issuer: /CN=7a7a3a519711f6f3d9bb6f4b95008c532104d350
Certificate serial: 119913EC7D70296F8D6626A487ADB78FFF2A7041
Authority key identifier: 7A:7A:3A:51:97:11:F6:F3:D9:BB:6F:4B:95:00:8C:53:21:04:D3:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eno6UZcR9vPZu29LlQCMUyEE01A.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/39332e39322e31362e302f32342d3234203d3e2037303138.roa
Signing time: Wed 26 Apr 2023 13:17:04 +0000
ROA not before: Wed 26 Apr 2023 13:12:04 +0000
ROA not after: Wed 24 Apr 2024 13:17:04 +0000
asID: 7018
IP address blocks: 93.92.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:99:13:ec:7d:70:29:6f:8d:66:26:a4:87:ad:b7:8f:ff:2a:70:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7a3a519711f6f3d9bb6f4b95008c532104d350
Validity
Not Before: Apr 26 13:12:04 2023 GMT
Not After : Apr 24 13:17:04 2024 GMT
Subject: CN=A17F087098CAA0F69C56D96479464B5735235D43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:d6:22:3b:f9:69:df:c4:1b:b7:75:f8:33:
37:0d:0a:fa:3e:f8:49:4f:be:ce:b3:66:f6:2a:36:
50:e7:5c:20:8a:29:19:5b:48:92:ee:9d:7b:4f:5c:
6d:9f:f6:b0:ef:cb:fa:0a:03:a2:0a:20:9f:04:07:
89:5a:a3:04:ce:da:8e:b0:3d:0b:be:cd:02:43:64:
0e:42:95:a6:df:ce:78:40:b0:f9:16:ee:a3:42:e6:
08:56:e7:83:c7:80:7e:83:83:4e:0c:b3:07:7a:c8:
8d:83:dc:ad:78:3f:17:e7:01:a0:24:a9:d7:44:5b:
42:cb:24:48:27:d4:e6:ed:96:94:f4:d9:7e:0e:df:
7f:19:1a:8f:4c:2c:0d:3f:09:07:14:24:f4:74:cb:
81:11:de:a9:0c:fa:25:b3:9f:5e:cd:b4:b3:06:56:
cd:e7:34:56:7c:b1:87:5e:d8:54:26:5c:66:48:1d:
eb:d2:3c:6d:0e:9c:bb:d4:d5:b2:a2:fd:93:68:fd:
1f:e2:16:4e:6f:d5:7c:a2:fc:4e:fa:12:7b:49:0c:
ae:c7:52:95:01:bb:57:eb:f5:a5:28:9b:5e:32:c0:
cc:55:f3:55:a2:1c:dc:9e:b0:2d:37:b0:e0:26:1f:
52:da:2a:c8:15:55:f0:21:74:c2:d2:83:4e:1d:8d:
6f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7F:08:70:98:CA:A0:F6:9C:56:D9:64:79:46:4B:57:35:23:5D:43
X509v3 Authority Key Identifier:
keyid:7A:7A:3A:51:97:11:F6:F3:D9:BB:6F:4B:95:00:8C:53:21:04:D3:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/7A7A3A519711F6F3D9BB6F4B95008C532104D350.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eno6UZcR9vPZu29LlQCMUyEE01A.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/0/39332e39322e31362e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.16.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:c3:8d:58:af:d3:25:c0:ed:9f:77:92:85:f9:27:3a:1c:06:
7f:4e:50:91:89:0a:b2:a8:a7:ce:47:38:79:58:26:b1:6c:67:
85:1e:0a:26:ef:00:30:b5:40:82:6f:7d:07:b9:f7:c7:d7:23:
31:0c:b2:c1:05:b2:dd:3e:09:a0:ef:80:92:d9:3a:bd:16:54:
c4:e6:28:04:64:f3:a9:32:c4:2b:8b:a3:70:d0:e8:e6:80:e6:
20:aa:e6:08:c4:77:03:7f:45:ff:9f:29:45:76:4b:5b:75:ac:
5a:53:01:ff:f1:58:b0:80:3c:ba:f4:c4:8c:b2:06:a3:dd:7c:
cf:58:4c:8f:1b:d1:22:d5:ec:f5:32:5e:c2:03:e3:9e:81:0f:
54:3f:83:1d:0c:67:69:dd:20:8c:9b:b2:44:cc:aa:41:b0:64:
e4:08:af:ea:c3:ea:9c:b1:35:73:d3:11:a9:6e:ac:4b:22:42:
78:f3:8c:a7:0a:58:ff:35:58:29:7e:04:01:09:ff:17:a8:8b:
2a:95:a4:e4:ac:ba:d9:b1:04:7a:c3:8d:58:b4:23:18:dc:f4:
e4:39:f2:af:f3:9d:9d:e0:7c:16:87:4e:84:78:bf:ce:9b:74:
26:c5:ee:e4:b9:a0:8a:6e:27:3b:9d:47:4c:fc:75:e8:15:70:
04:ac:54:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:47 2025 by rpki-client