Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/3139332e31372e322e302f32342d3234203d3e203433363037.roa
File: 3139332e31372e322e302f32342d3234203d3e203433363037.roa (raw, json)
Hash identifier: EdvsLAgty2YLvHeCmOyNGvwDfRacke6SNmV0IqDu3q8=
Subject key identifier: B8:B6:8B:2F:7D:06:8E:BC:93:4C:44:2C:09:E4:D6:17:CB:76:B9:E9
Certificate issuer: /CN=18fec82431047ecdac19db3bd93c1c3fe79197d3
Certificate serial: 330ED4965CED32CE8DE2FCD822CED84FAF785D37
Authority key identifier: 18:FE:C8:24:31:04:7E:CD:AC:19:DB:3B:D9:3C:1C:3F:E7:91:97:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GP7IJDEEfs2sGds72TwcP-eRl9M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/3139332e31372e322e302f32342d3234203d3e203433363037.roa
Signing time: Sat 24 Feb 2024 01:27:25 +0000
ROA not before: Sat 24 Feb 2024 01:22:25 +0000
ROA not after: Sat 22 Feb 2025 01:27:25 +0000
asID: 43607
IP address blocks: 193.17.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:0e:d4:96:5c:ed:32:ce:8d:e2:fc:d8:22:ce:d8:4f:af:78:5d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18fec82431047ecdac19db3bd93c1c3fe79197d3
Validity
Not Before: Feb 24 01:22:25 2024 GMT
Not After : Feb 22 01:27:25 2025 GMT
Subject: CN=B8B68B2F7D068EBC934C442C09E4D617CB76B9E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:78:88:f3:9b:00:3b:b9:c2:aa:42:36:9c:
2e:10:7b:af:80:21:be:36:b0:db:1b:24:75:a8:b1:
6a:0b:ba:7a:53:53:0c:a8:57:0e:0d:93:80:11:66:
d6:72:ae:23:14:b4:3a:0f:c8:43:a1:87:e2:cd:d2:
b8:59:1f:8c:2a:d1:07:3d:54:12:ad:fd:9f:90:94:
1a:69:a0:58:c8:9b:b2:c4:e5:54:2c:d6:18:ac:f0:
fa:41:90:31:83:8f:94:09:7f:ae:39:96:d4:0b:18:
0b:2f:80:c1:ec:8c:c3:21:70:6e:af:68:88:2e:7f:
c3:c6:ee:55:54:e6:c8:eb:33:41:39:cb:d8:59:a3:
14:19:6a:35:af:89:67:68:5a:71:38:ca:b9:e5:55:
f3:e1:e5:b5:ab:51:20:f0:9e:4c:38:0a:a9:cc:a9:
f1:03:39:a9:d7:95:a7:7c:1b:1d:26:e7:15:2a:2d:
f1:02:6e:a6:47:64:37:85:c7:df:e2:c4:ad:c8:06:
49:92:fc:5d:51:6b:d4:d5:d5:7f:c6:8d:d2:fc:b8:
2f:04:fa:93:5f:e9:50:5b:e9:3e:1d:46:c3:20:7c:
4e:a5:1a:6d:13:a2:af:ce:86:96:19:bd:3e:b8:90:
c3:fd:e3:63:81:db:9d:58:a0:16:02:33:d7:3f:0f:
77:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B6:8B:2F:7D:06:8E:BC:93:4C:44:2C:09:E4:D6:17:CB:76:B9:E9
X509v3 Authority Key Identifier:
keyid:18:FE:C8:24:31:04:7E:CD:AC:19:DB:3B:D9:3C:1C:3F:E7:91:97:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/18FEC82431047ECDAC19DB3BD93C1C3FE79197D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GP7IJDEEfs2sGds72TwcP-eRl9M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a91c8269-451e-4d0d-93e4-d111ec8ddcee/0/3139332e31372e322e302f32342d3234203d3e203433363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.2.0/24
Signature Algorithm: sha256WithRSAEncryption
56:cc:fb:9f:b5:16:04:3e:4f:2d:af:b7:e6:15:82:8e:ac:aa:
bd:77:45:c5:c4:99:2e:57:78:7a:e1:cf:17:6a:1a:7f:05:e5:
41:1d:96:46:2d:10:82:b9:c0:b2:92:e9:b9:72:78:5a:95:ea:
eb:aa:5b:7d:1c:cd:00:12:f7:4f:a8:35:56:24:3e:30:c7:82:
f6:92:1e:ba:b1:89:6f:7b:64:9c:79:36:42:76:0a:4a:43:6c:
b6:c4:4d:54:4d:b3:42:ea:f4:0d:39:9a:f3:65:73:d1:c4:5c:
be:d4:e7:27:d2:d1:4a:7e:5d:48:0f:8d:38:e4:31:19:d7:cd:
6b:48:1e:7a:b5:d6:66:72:f2:59:f0:72:64:28:50:5b:36:a3:
48:f8:eb:58:51:8d:5d:f1:43:89:40:7b:b5:06:7b:af:46:0c:
49:dc:da:50:16:31:59:7d:e7:91:68:d6:51:e2:5e:5f:7f:96:
b2:c4:84:ac:e7:7a:bf:06:a9:44:ea:a9:01:0c:bf:8e:83:44:
28:b8:02:38:99:97:9d:83:51:f8:26:4f:e4:c6:32:0f:26:75:
ef:77:cb:26:b1:fd:ee:2b:b7:ad:25:d1:31:2f:52:8f:c1:23:
14:e1:95:fc:5a:7e:96:74:c3:57:a8:0d:c7:00:1a:8a:e6:d6:
2a:b9:1b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 00:44:18 2024 by rpki-client on console-fra.rpki-client.org