Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e203134363138.roa
File: 3139332e33372e3233392e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: jt8jwskeIvJl71oQIW4rbtD8CX6f0xkrNicxp1DQAI0=
Subject key identifier: 92:B4:F0:EE:24:87:00:FB:38:6C:1E:C6:0A:20:83:FD:8B:D0:27:F3
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 1D9365E3F3E64E52607EE05B5F8813663BBCBEDB
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e203134363138.roa
Signing time: Tue 04 Feb 2025 05:54:12 +0000
ROA not before: Tue 04 Feb 2025 05:49:12 +0000
ROA not after: Tue 03 Feb 2026 05:54:12 +0000
asID: 14618
IP address blocks: 193.37.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:93:65:e3:f3:e6:4e:52:60:7e:e0:5b:5f:88:13:66:3b:bc:be:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Feb 4 05:49:12 2025 GMT
Not After : Feb 3 05:54:12 2026 GMT
Subject: CN=92B4F0EE248700FB386C1EC60A2083FD8BD027F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a6:60:88:eb:ee:f5:df:2a:ce:91:99:52:78:
45:2a:4f:56:d9:93:d1:41:83:be:ef:2b:c5:0a:f8:
91:05:4e:39:7d:b9:33:55:98:65:67:58:9e:48:5b:
6f:31:2d:58:52:11:12:e3:48:d0:16:f1:04:db:7e:
a8:fb:8c:28:40:d4:d7:bb:c7:ac:26:9f:7b:0e:9e:
17:40:a8:c1:de:71:95:6f:1e:6b:29:77:5b:90:3f:
bd:bc:a1:ca:42:8b:02:68:a5:39:01:dd:7f:50:db:
56:3c:7d:31:86:8c:7d:a5:08:85:49:3b:96:b5:d5:
48:6d:77:1f:dd:35:79:8f:74:1d:53:e4:d9:0f:aa:
7f:b2:5b:15:08:a1:6c:2a:f5:1a:d6:23:a2:79:ce:
a3:8a:b3:72:c4:43:31:4b:cb:bc:ae:7a:d1:8e:ac:
74:58:f1:23:54:55:2a:aa:83:99:ab:37:c3:d1:aa:
71:4b:02:fb:ca:53:d3:d1:aa:58:e2:e7:68:df:87:
ef:58:a0:50:6e:d6:9e:1e:55:59:11:6d:b5:7b:97:
69:8e:12:6a:56:73:7d:ad:cb:d7:71:d8:22:09:36:
bd:29:ad:ea:ca:22:3f:56:10:4b:3f:36:77:71:22:
76:86:bb:02:0b:92:12:f7:85:4f:27:7a:a6:28:69:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B4:F0:EE:24:87:00:FB:38:6C:1E:C6:0A:20:83:FD:8B:D0:27:F3
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.239.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:34:f1:58:33:54:cb:da:6a:98:ea:9f:29:14:8c:71:0c:e7:
39:1e:08:f5:14:ed:84:68:7f:af:cd:f7:76:d7:4b:29:5b:c0:
18:d1:ba:cb:c5:67:1b:40:59:b9:c5:17:23:52:e6:18:0a:cd:
35:fc:a7:e7:1d:cb:07:f8:1f:9d:47:f5:b2:77:3b:5f:8e:12:
7a:67:ea:92:2e:60:fd:3d:a4:24:38:76:52:81:1a:20:6b:27:
78:0c:ee:64:62:2b:03:bb:80:cc:6f:dc:88:45:e8:05:ba:b7:
3e:2b:6e:a8:ce:c2:0d:23:4c:72:84:8c:7c:3b:29:aa:dd:c7:
4f:19:2a:da:ba:e8:b7:89:d0:37:31:1c:e1:48:ae:ff:28:ae:
76:c0:a7:26:93:09:17:38:eb:88:3f:2d:8c:a4:b7:fb:84:3f:
66:24:4e:76:bb:b1:ed:63:59:ad:69:79:b9:88:19:07:45:e1:
af:40:42:9e:7f:5d:9f:b5:71:b5:53:5c:c5:ec:17:29:8b:5e:
d9:73:fc:54:83:2d:fd:af:37:6c:87:7c:f5:04:af:b4:19:c1:
fb:53:da:e7:68:a6:68:57:b4:19:91:4f:17:e2:93:98:e9:95:
b5:f2:4f:cd:2f:b5:7a:e0:90:c0:8e:eb:c5:b2:ed:e9:57:b8:
8e:4a:ed:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:41:11 2025 by rpki-client