Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37332e302f32342d3234203d3e20323036323634.roa
File: 3139332e3230312e37332e302f32342d3234203d3e20323036323634.roa (raw, json)
Hash identifier: DJT+evwL05shXYMw2l+gChQuoHddBV1Ru1l/+OaF1Ik=
Subject key identifier: D6:98:15:EF:E1:EF:0D:65:CA:63:EF:71:8B:50:D8:F5:C3:1F:A1:62
Certificate issuer: /CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Certificate serial: 72A1670BF4BFFB9C81AE77779DA6349DE4D42CF9
Authority key identifier: 55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37332e302f32342d3234203d3e20323036323634.roa
Signing time: Mon 23 Dec 2024 04:52:07 +0000
ROA not before: Mon 23 Dec 2024 04:47:07 +0000
ROA not after: Mon 22 Dec 2025 04:52:07 +0000
asID: 206264
IP address blocks: 193.201.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:a1:67:0b:f4:bf:fb:9c:81:ae:77:77:9d:a6:34:9d:e4:d4:2c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Validity
Not Before: Dec 23 04:47:07 2024 GMT
Not After : Dec 22 04:52:07 2025 GMT
Subject: CN=D69815EFE1EF0D65CA63EF718B50D8F5C31FA162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:7a:a8:3e:93:7f:d0:86:ae:40:e8:79:90:
16:6e:e3:b9:91:0e:e4:08:40:49:3a:0b:92:76:94:
cb:5b:69:ff:2f:46:64:40:f6:6c:fd:93:4d:93:ea:
37:4e:9a:de:e7:0b:c1:97:59:fe:e5:01:0b:64:42:
fd:a6:a8:6f:19:ed:7e:4b:8c:00:f7:44:a7:aa:51:
24:84:c8:ae:29:d4:44:f7:45:c0:ee:52:ff:81:7e:
cf:f0:b0:d4:53:aa:63:17:3e:06:80:8f:30:83:30:
e4:ff:c6:6c:da:e4:99:49:3f:4b:ab:8d:24:c2:0c:
48:3f:32:14:67:f0:df:40:93:01:23:c9:d4:00:e9:
22:9b:ce:33:d8:5e:3b:00:c4:19:90:c7:d1:35:e7:
c0:02:df:71:b1:48:52:2d:f0:59:66:84:7c:ac:65:
0e:59:40:ee:b2:ac:91:cd:94:a1:48:c8:1d:a6:ba:
07:5e:fb:ea:c1:14:bb:aa:a2:0b:df:76:25:e7:dc:
94:b0:76:cf:44:1b:ea:cd:e5:2f:64:6d:8d:dd:0e:
aa:de:f3:ad:70:8b:51:f9:40:65:ca:3c:24:e7:4c:
9c:a8:f3:b9:63:aa:91:5b:7e:74:30:4d:e1:eb:8d:
d3:df:87:8e:60:6d:76:12:90:af:2d:51:a2:09:69:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:98:15:EF:E1:EF:0D:65:CA:63:EF:71:8B:50:D8:F5:C3:1F:A1:62
X509v3 Authority Key Identifier:
keyid:55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37332e302f32342d3234203d3e20323036323634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.73.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:40:b8:ac:0f:3d:e6:d5:a7:bb:d8:02:3d:b1:a6:26:64:3d:
05:6d:8a:58:d9:3a:b0:4d:3d:b5:6e:00:14:24:54:a2:76:1c:
23:8d:38:ee:7b:b3:c0:3c:7f:97:f9:b7:9a:a5:94:86:04:e5:
97:32:31:ba:a0:53:91:cb:26:a9:e9:5d:2e:f4:5e:a8:cc:f5:
50:e4:c0:6a:00:62:8d:9a:74:b5:4b:49:52:aa:62:62:c1:f1:
1b:b6:87:0c:11:2e:b5:fd:2d:de:4e:08:27:d1:32:35:b8:24:
88:1d:2d:c7:80:c6:d9:28:a0:b2:f3:5f:29:a9:72:0d:8f:ca:
d6:16:4b:ec:10:a9:bc:08:b8:b6:42:c7:b6:68:b9:b9:c1:fa:
7d:1c:4e:91:c4:76:ce:84:22:cb:ee:6f:3f:7f:0b:d3:a3:b1:
e3:3f:ef:92:37:30:6b:90:77:1a:75:c3:0c:11:e5:96:d4:76:
a9:86:77:26:2f:48:10:96:da:ca:7c:12:1a:c3:9a:f6:92:41:
4e:00:3e:eb:27:88:7f:c3:a5:a8:4e:9c:e6:d5:3c:77:c7:ec:
4c:dc:16:1b:4f:0f:78:68:db:a1:8d:45:98:e1:f2:77:4e:d0:
ad:31:8e:c6:f8:4c:df:3e:59:2d:4b:72:12:c1:5f:f8:ad:06:
f6:1c:f4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:46 2025 by rpki-client