Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/3139342e35392e3232332e302f32342d3234203d3e203539343332.roa
File: 3139342e35392e3232332e302f32342d3234203d3e203539343332.roa (raw, json)
Hash identifier: c8O3o5TINMgibU7uY4UWSzfrqCnM0VInLw/b+C8Er+8=
Subject key identifier: FE:4B:D1:ED:88:D8:46:1E:DD:8D:25:93:70:B0:D4:11:76:B7:50:D9
Certificate issuer: /CN=fd1dcaa8fb487991afbb8f182f73e457ccb1f884
Certificate serial: 65AACECE5B864677682891C4D3445A61C054D02A
Authority key identifier: FD:1D:CA:A8:FB:48:79:91:AF:BB:8F:18:2F:73:E4:57:CC:B1:F8:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_R3KqPtIeZGvu48YL3PkV8yx-IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/3139342e35392e3232332e302f32342d3234203d3e203539343332.roa
Signing time: Mon 31 Jul 2023 15:40:41 +0000
ROA not before: Mon 31 Jul 2023 15:35:41 +0000
ROA not after: Mon 29 Jul 2024 15:40:41 +0000
asID: 59432
IP address blocks: 194.59.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:aa:ce:ce:5b:86:46:77:68:28:91:c4:d3:44:5a:61:c0:54:d0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1dcaa8fb487991afbb8f182f73e457ccb1f884
Validity
Not Before: Jul 31 15:35:41 2023 GMT
Not After : Jul 29 15:40:41 2024 GMT
Subject: CN=FE4BD1ED88D8461EDD8D259370B0D41176B750D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:d4:6c:cd:a1:fe:2e:49:ba:5b:81:f4:76:
d3:8f:b7:b1:b1:15:02:f7:15:62:b9:8e:cf:cc:75:
7b:28:0d:d1:53:f9:44:84:73:ea:57:fb:c3:e3:9c:
e1:02:ed:53:a7:31:ce:bc:bd:c0:b7:84:18:b4:a4:
59:97:08:ca:99:60:24:84:18:a0:10:2c:62:46:0e:
1e:94:7f:b7:99:7d:70:08:f3:70:e0:71:5c:ec:76:
5b:34:e1:98:ec:b1:33:7f:5b:fa:fb:8a:16:78:e3:
dc:ba:74:8b:e4:a1:56:a5:e4:7b:2c:c6:57:d8:b6:
70:e9:6d:62:78:ee:ed:1a:59:cd:87:00:5b:df:e7:
a0:4f:6d:8f:65:18:f5:9c:65:34:93:2c:6c:5d:e1:
26:d9:05:4a:16:4d:aa:2a:91:02:57:b8:cb:c9:c4:
5c:99:e0:71:20:ef:22:9b:c4:34:3e:cf:84:61:a3:
3a:6e:19:89:78:6b:ff:71:f1:01:58:a5:84:f8:87:
e9:59:67:be:0a:30:66:71:45:86:81:7d:a1:98:79:
f7:6b:cc:14:e9:7b:2d:54:1a:49:0b:b4:61:61:a5:
94:24:65:8d:80:0d:08:57:89:c7:29:27:8e:1f:43:
95:f4:6c:4e:29:ae:01:36:84:76:97:d9:28:ad:de:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4B:D1:ED:88:D8:46:1E:DD:8D:25:93:70:B0:D4:11:76:B7:50:D9
X509v3 Authority Key Identifier:
keyid:FD:1D:CA:A8:FB:48:79:91:AF:BB:8F:18:2F:73:E4:57:CC:B1:F8:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/FD1DCAA8FB487991AFBB8F182F73E457CCB1F884.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_R3KqPtIeZGvu48YL3PkV8yx-IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/3139342e35392e3232332e302f32342d3234203d3e203539343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.223.0/24
Signature Algorithm: sha256WithRSAEncryption
16:46:a9:1b:b2:ff:69:0c:2c:a4:ad:22:13:2d:5b:68:4d:ec:
66:98:47:c4:4d:f3:f0:bf:50:da:17:70:5d:40:c6:df:12:fc:
cb:d0:54:fb:eb:72:fa:f9:83:92:e8:9b:81:a5:fc:6c:00:dc:
4b:73:f2:98:d7:88:e5:71:e5:96:18:61:5e:54:19:f2:41:44:
e6:5b:a9:82:3f:b9:03:0b:c8:04:51:63:62:0a:1d:38:49:89:
4b:06:f2:c0:59:60:00:86:33:91:2d:92:cc:b6:6c:48:51:56:
06:98:b3:b3:1c:69:df:ef:a6:79:88:07:42:18:19:2c:0a:23:
8b:82:dc:25:7f:ba:98:5e:13:19:04:81:80:40:01:69:c3:c8:
10:c9:24:5c:e6:3a:74:67:93:e0:66:5b:b6:62:3f:43:f2:e9:
ae:59:c0:47:bf:4b:4f:f2:f3:84:14:e5:83:db:f2:c8:22:ec:
ac:cb:91:99:ca:41:44:74:4e:7f:45:e2:67:14:5c:ab:a5:46:
75:57:4a:e4:1d:d1:d9:f6:e0:68:53:44:35:be:78:53:1f:bd:
48:d5:11:9c:8c:4f:6c:ff:8a:42:3e:bd:06:d9:4c:20:f3:aa:
bd:dc:29:eb:01:18:77:6b:11:7b:5e:0d:51:8c:71:0f:c7:09:
ad:03:f4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-fra.rpki-client.org