Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3137302e36322e3139302e302f32342d3234203d3e20383334.roa
File: 3137302e36322e3139302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: PhkY614A+z1qUed0SJ7QI4eNv44f/OGd639kdBD8oCA=
Subject key identifier: 63:34:3F:93:AF:D4:66:05:3B:75:7C:25:AD:8F:0D:9D:57:E9:88:0F
Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Certificate serial: 5A23734255181D658989788ED9E1B1A15CA26FC2
Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3137302e36322e3139302e302f32342d3234203d3e20383334.roa
Signing time: Sun 24 Nov 2024 00:00:57 +0000
ROA not before: Sat 23 Nov 2024 23:55:57 +0000
ROA not after: Sun 23 Nov 2025 00:00:57 +0000
asID: 834
IP address blocks: 170.62.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:23:73:42:55:18:1d:65:89:89:78:8e:d9:e1:b1:a1:5c:a2:6f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Validity
Not Before: Nov 23 23:55:57 2024 GMT
Not After : Nov 23 00:00:57 2025 GMT
Subject: CN=63343F93AFD466053B757C25AD8F0D9D57E9880F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:53:07:6b:34:c2:77:95:ec:14:93:21:7e:
33:94:8c:a6:98:07:db:13:a3:c0:56:5e:7f:ea:16:
0e:9b:54:5a:7f:59:ff:b7:9b:12:c5:9d:0a:51:3a:
a4:0a:5e:f1:35:e8:46:c6:79:19:5d:0b:31:a5:d9:
a2:78:51:a8:b6:f5:57:0f:78:82:4a:1e:6d:0f:9e:
e6:98:be:db:04:c8:39:f1:0d:3a:a3:9c:57:fa:da:
8c:a0:1c:27:3d:a2:8c:4f:aa:3a:b9:27:74:59:cd:
9c:6d:c3:e9:33:db:8c:28:78:82:7a:b9:25:a1:c7:
3c:34:53:66:be:c6:28:4c:25:17:96:2c:04:3b:3f:
94:1f:88:cb:f1:05:ba:f6:92:83:d4:6c:ef:47:9a:
11:df:47:8b:e0:19:52:4c:3d:c1:5d:a1:6b:7c:bd:
c3:d7:97:23:e1:2c:16:82:22:f5:90:72:2c:2c:80:
6e:db:7e:40:41:ac:11:6c:4c:c0:29:aa:3b:16:a0:
1a:4b:e1:9f:a9:5f:a5:0e:89:35:3d:80:8f:28:96:
14:21:2a:87:29:7e:9f:68:a4:06:b0:38:f8:c6:16:
73:98:d9:15:d6:60:eb:8f:0d:8d:9c:cb:76:a6:dc:
6d:95:e3:88:c0:f8:b3:e9:b8:ae:16:64:6a:4c:1b:
26:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:34:3F:93:AF:D4:66:05:3B:75:7C:25:AD:8F:0D:9D:57:E9:88:0F
X509v3 Authority Key Identifier:
keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/3137302e36322e3139302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.62.190.0/24
Signature Algorithm: sha256WithRSAEncryption
98:8e:08:7c:de:5a:fb:6d:53:0a:24:96:65:d0:24:aa:24:73:
25:ae:44:2b:89:dc:d4:be:4e:f1:13:e5:92:0e:d5:67:64:5c:
e3:59:e4:60:1f:ab:8a:04:46:6b:7d:69:63:2e:70:d7:db:94:
c8:8b:04:59:94:5b:02:b8:fd:d4:de:02:1c:05:01:01:6f:36:
04:fc:48:f3:1e:78:a3:7d:30:9a:be:b7:40:f0:f0:7d:55:a5:
c8:05:a1:3e:5c:5f:bf:1f:74:8d:0c:4d:73:b5:a7:2d:a9:9f:
e5:52:13:ab:56:fc:2f:3a:ca:89:25:ad:b8:58:e9:af:42:c8:
4c:0f:41:a7:09:29:aa:d0:05:6d:39:6d:bc:6c:06:0a:ca:be:
c5:87:84:83:3a:8f:66:c6:bd:d2:73:2e:e8:24:b8:ca:1d:20:
4b:8f:4e:73:b4:29:8d:de:15:c1:29:2b:26:aa:e8:0b:cc:33:
ed:22:f9:67:a8:09:f5:65:0e:bb:bb:64:53:b9:e0:90:ef:0e:
3e:06:22:1f:63:d2:52:dd:e9:26:16:0d:6a:51:e4:93:81:4b:
28:24:c2:b0:e8:41:d9:1f:f9:fc:c1:18:74:8b:5c:64:4d:f1:
d6:00:11:68:a5:b6:14:fb:db:57:b1:92:36:c7:09:cb:01:da:
3b:df:26:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:17 2025 by rpki-client