Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e203136353039.roa
File: 3139332e33372e3233392e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier: 5yUmjYs8W4dBV8ko0weEN4jpvHvj5SPDcvYuWxTKovY=
Subject key identifier: 43:22:39:56:02:F7:4C:F7:41:78:6C:99:4B:31:61:80:EC:7E:36:B2
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 578AFDAE07128C94CA2025496C12D088FE67D842
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e203136353039.roa
Signing time: Tue 04 Feb 2025 05:54:12 +0000
ROA not before: Tue 04 Feb 2025 05:49:12 +0000
ROA not after: Tue 03 Feb 2026 05:54:12 +0000
asID: 16509
IP address blocks: 193.37.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:8a:fd:ae:07:12:8c:94:ca:20:25:49:6c:12:d0:88:fe:67:d8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Feb 4 05:49:12 2025 GMT
Not After : Feb 3 05:54:12 2026 GMT
Subject: CN=4322395602F74CF741786C994B316180EC7E36B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:26:58:5e:35:4e:bf:8c:55:90:15:b7:d7:
e5:0c:02:35:02:5d:f6:6f:2c:a6:85:41:8b:f0:06:
c0:85:85:13:0e:0a:d0:06:7d:53:ed:cf:ca:9b:a4:
a5:c8:b4:41:4f:96:cd:8e:b1:5f:6f:c1:3c:33:fb:
75:3d:8c:b8:9a:95:27:97:41:71:6f:81:e9:44:f6:
a0:4c:27:90:c7:26:d1:56:cc:d8:18:0f:12:09:dc:
92:6d:db:99:53:a4:b7:86:3c:74:db:c0:1d:1b:17:
30:df:5e:f4:59:e1:4d:37:ee:fe:e4:74:c1:e6:3e:
5b:a6:e4:8e:93:f1:67:0a:4d:1e:b5:f0:aa:39:56:
18:36:ed:0e:d4:b1:7d:20:d5:f5:50:e3:68:70:52:
f8:b9:43:ae:3f:3c:dc:85:cb:28:61:3c:52:69:d2:
db:6f:8f:f4:69:e3:2a:16:d7:d1:be:fd:f8:f7:c6:
da:d5:68:aa:44:e7:0e:0a:53:83:f9:18:23:68:55:
23:76:9a:ef:43:c0:15:ef:af:65:90:05:2c:53:71:
bf:b6:45:27:59:97:8f:4d:b6:af:72:70:16:08:8e:
b0:70:4f:a4:b4:bb:ba:dc:c6:1c:6f:61:c4:ec:1a:
4b:b7:ab:14:1d:88:15:1b:c0:70:b7:04:33:9d:5b:
77:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:22:39:56:02:F7:4C:F7:41:78:6C:99:4B:31:61:80:EC:7E:36:B2
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33372e3233392e302f32342d3234203d3e203136353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.239.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:63:c8:65:b6:8a:bc:ef:bb:a2:94:40:83:e8:07:c1:42:39:
c1:04:89:ec:17:1b:45:d3:4a:f0:b2:bc:64:36:12:31:d1:9a:
c4:95:ae:98:5b:71:16:6e:e5:c6:4d:57:ee:b3:84:93:9c:9a:
e8:b0:79:82:7f:81:93:9b:13:db:ba:7a:87:2a:0f:cf:3d:66:
80:7d:1f:75:26:58:76:ed:5e:2e:95:e3:92:0c:27:ac:9f:7c:
0d:2b:6a:64:48:7f:b7:3a:c3:c0:07:7a:ac:55:e4:02:0d:ae:
23:f0:60:1c:9e:a0:fb:b3:3a:23:2f:44:d2:ce:b9:28:44:77:
91:1e:e1:a8:da:71:29:cd:16:2a:b5:dc:09:28:a2:e7:a5:fb:
5e:67:29:a1:fe:1a:12:00:63:09:85:ee:fb:3b:40:dd:60:29:
20:5b:2e:19:1c:e9:88:3d:e3:7f:76:6b:34:cb:65:df:61:55:
68:da:19:60:6c:ce:31:19:69:7e:31:3e:b4:43:3f:47:cd:b4:
89:e4:72:71:8e:c5:91:2b:95:a9:57:e6:f7:e9:71:09:33:71:
23:4e:51:78:70:f8:29:f2:6a:43:8d:17:b2:be:75:46:b4:ba:
01:2c:04:e2:35:76:cc:21:c7:4c:6f:1d:d2:36:63:db:01:da:
de:7d:c0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:06 2025 by rpki-client