Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3137302e36322e3139302e302f32342d3234203d3e20313939383239.roa
File: 3137302e36322e3139302e302f32342d3234203d3e20313939383239.roa (raw, json)
Hash identifier: HigBKgzhBfQ6l4BXfB1EHHmYznIJhGBpTV5yXonsDGQ=
Subject key identifier: 5A:9E:FA:AD:51:2A:D9:20:26:71:A4:D2:DF:19:D9:43:EF:6E:DF:85
Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Certificate serial: 65D69F56384090E9CB149EAFF96FD43654AD3B86
Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3137302e36322e3139302e302f32342d3234203d3e20313939383239.roa
Signing time: Sun 24 Nov 2024 18:24:16 +0000
ROA not before: Sun 24 Nov 2024 18:19:16 +0000
ROA not after: Sun 23 Nov 2025 18:24:16 +0000
asID: 199829
IP address blocks: 170.62.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:d6:9f:56:38:40:90:e9:cb:14:9e:af:f9:6f:d4:36:54:ad:3b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Validity
Not Before: Nov 24 18:19:16 2024 GMT
Not After : Nov 23 18:24:16 2025 GMT
Subject: CN=5A9EFAAD512AD9202671A4D2DF19D943EF6EDF85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:f2:a4:f1:ba:ee:e9:90:08:c0:49:5d:82:
8f:95:2f:f6:d1:17:1f:c2:88:d9:1d:1b:60:46:48:
51:94:99:71:cc:15:41:ea:20:97:a5:76:f6:df:0a:
f8:30:47:d5:12:a4:f1:39:8b:e8:2b:7b:cc:54:fb:
c2:3d:77:52:fe:e9:22:56:e9:72:36:2e:a1:3b:29:
5f:90:fe:a4:0b:14:81:ab:36:2f:64:f9:d8:8d:f2:
66:b6:e5:54:2c:f7:af:1e:54:8c:a4:86:4f:8f:93:
80:6d:8c:d6:9f:18:ec:b4:29:94:eb:41:81:73:72:
0a:90:91:69:42:78:ff:cd:e7:93:de:e3:b3:62:24:
17:8e:5d:01:0f:63:34:e4:26:71:ef:e8:1a:44:30:
ef:1d:d1:2b:26:3f:df:d3:25:28:9e:fd:56:3e:ec:
f0:b6:bc:dd:48:2e:11:6c:eb:81:61:f5:48:78:4d:
84:40:3d:90:6d:04:b8:a8:2e:88:e5:52:ae:2e:71:
80:d0:a5:e9:9f:b3:5a:27:f9:95:c7:78:ec:9c:68:
5f:05:01:4b:07:12:73:c4:6d:8a:67:f8:e5:d1:d9:
03:c9:8e:ff:b8:26:d6:47:db:cc:81:ea:72:0d:41:
f9:3a:4f:10:6c:ca:ca:22:cb:72:2e:11:5a:08:19:
b4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9E:FA:AD:51:2A:D9:20:26:71:A4:D2:DF:19:D9:43:EF:6E:DF:85
X509v3 Authority Key Identifier:
keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3137302e36322e3139302e302f32342d3234203d3e20313939383239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.62.190.0/24
Signature Algorithm: sha256WithRSAEncryption
86:6d:93:df:5d:c7:d4:50:95:1d:4e:5d:8b:fb:45:c9:3a:12:
d9:35:c0:f1:98:40:2e:de:28:c6:bd:40:f3:10:bc:65:ff:9d:
41:74:db:88:e4:b8:e0:eb:d3:1e:03:f7:25:f4:90:b4:5a:66:
21:03:20:dd:16:39:21:6e:d4:25:59:7d:f0:6f:0a:5a:3f:2c:
5e:d5:03:04:d9:90:4f:e8:ec:9e:67:25:4d:d5:06:db:9f:b2:
a3:4e:19:56:bc:6c:cf:6f:3c:5c:23:7e:77:82:02:21:89:7d:
3a:2f:66:dd:f3:d7:a0:9b:be:ee:3b:cf:93:6f:28:12:ac:86:
f2:81:e4:ca:84:6d:aa:51:bb:ba:de:00:7d:c9:6a:19:b0:54:
05:90:67:8b:44:25:5e:6e:6e:1f:ef:96:94:0d:a4:2d:c3:a1:
9b:59:27:73:28:f6:5b:74:7a:f2:52:a5:eb:50:07:b5:d3:51:
bb:71:ba:f9:14:9e:25:59:85:eb:6d:80:ea:d0:ed:b1:62:2f:
c0:1f:17:85:b0:ac:11:42:68:d3:c3:fc:2f:e9:4f:bb:9f:15:
ef:7b:ff:62:85:3c:ee:ad:ce:ad:d0:73:98:0e:2b:66:26:08:
6d:a0:da:16:b4:bb:0f:fb:70:06:66:3f:f2:f9:9f:4c:d3:e8:
c9:9c:fb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:55 2025 by rpki-client