Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS397423.roa
File: AS397423.roa (raw, json)
Hash identifier: r1Ou+aPuA8ILClNsUFFisXzUki4QQjqdB9MopvfCHIM=
Subject key identifier: A7:30:68:FD:37:57:EA:A0:BC:72:D4:B4:E6:AA:61:7A:E6:38:C8:4F
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 6598954048759F376B10E878B365EF20142F42A7
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS397423.roa
Signing time: Sun 22 Dec 2024 12:25:27 +0000
ROA not before: Sun 22 Dec 2024 12:20:27 +0000
ROA not after: Sun 21 Dec 2025 12:25:27 +0000
asID: 397423
IP address blocks: 141.11.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:98:95:40:48:75:9f:37:6b:10:e8:78:b3:65:ef:20:14:2f:42:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Dec 22 12:20:27 2024 GMT
Not After : Dec 21 12:25:27 2025 GMT
Subject: CN=A73068FD3757EAA0BC72D4B4E6AA617AE638C84F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0d:f5:eb:ec:e7:78:64:db:62:39:51:53:08:
df:da:08:03:75:63:a5:3e:c1:ee:d2:f9:fe:15:61:
4a:10:f1:17:9b:1a:96:57:5c:ce:3f:ce:b8:15:f6:
a5:12:7f:e0:fb:32:4e:c5:ff:cb:15:70:c7:9a:f3:
45:4b:5e:84:9a:d9:a3:f2:88:c5:58:19:92:bb:25:
35:50:e0:93:51:e6:96:0b:22:7d:6d:d9:08:83:d5:
e2:7f:db:89:01:1d:65:49:ab:5b:11:c4:5a:0e:d9:
96:88:e6:88:82:1c:5b:4c:36:0f:0f:1f:dd:67:70:
a1:59:ed:aa:e4:a5:e5:79:25:ef:8a:d6:b3:c0:5f:
eb:a1:c8:65:af:87:cb:9d:95:de:03:b1:d2:f6:93:
a3:e6:2e:28:74:7b:9e:2c:27:b0:fe:34:3f:9c:79:
68:4c:72:f7:76:ba:ad:72:4f:b8:ca:05:3b:19:67:
73:35:21:5c:16:dc:bb:fb:33:5e:cc:eb:b4:8e:c5:
b0:97:6a:16:e0:6a:72:39:29:af:c3:d6:ac:de:92:
1f:ec:54:0a:fa:e2:5a:0b:40:03:9f:f7:ae:4f:49:
85:fc:3f:ed:b3:2a:d0:89:ae:1f:b7:11:10:13:59:
9b:60:55:a3:ff:81:96:d9:39:ff:d1:e0:3e:64:16:
7b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:30:68:FD:37:57:EA:A0:BC:72:D4:B4:E6:AA:61:7A:E6:38:C8:4F
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS397423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.247.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e6:2b:45:94:f7:16:35:0a:fc:5d:73:bd:c4:14:08:b4:c6:
03:be:02:da:2d:ba:19:ce:cc:b7:8a:a2:e2:03:43:09:84:cc:
bd:20:66:3c:5f:76:3b:09:0d:10:dc:cc:ba:67:a3:35:a1:78:
3c:17:7e:8e:93:08:13:d4:8c:9d:27:de:d2:1b:d3:f8:d9:ae:
97:01:70:2f:5e:3b:17:b1:f2:ca:57:30:c0:92:c9:b9:78:d6:
af:12:27:5d:94:c4:dc:6d:e5:ba:8f:54:42:d4:3f:1f:60:78:
0b:25:ad:ce:99:4a:27:12:88:a8:48:b9:c0:bc:44:5a:43:80:
e4:f3:f0:4a:e3:95:a5:53:ad:1d:e6:c3:7b:c1:b0:e1:4c:f2:
cf:21:f9:9e:c0:f1:53:db:09:ba:c6:83:a1:5b:e7:cc:d8:b5:
a4:db:50:86:e8:d4:20:47:10:4b:11:dc:e6:73:5e:6d:a6:7d:
a4:be:e0:d3:d4:24:b6:80:d9:a9:95:c0:52:69:3e:40:4f:5d:
68:e0:d6:80:7e:11:df:c8:ad:11:8b:78:03:ef:10:a5:7d:dc:
b1:a8:b0:b6:96:64:67:9c:8b:d7:ce:cb:8f:9c:61:a3:3d:41:
a8:63:50:c1:f9:82:88:9d:10:ec:d7:99:e7:0b:76:45:8c:21:
3e:fe:7b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:40 2025 by rpki-client