Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa
File: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (raw, json)
Hash identifier: hv8+1ab3SlqVr0lUzuXGkIAi200jEC6ydrdZg2cy0KU=
Subject key identifier: EE:38:B8:A8:27:D0:16:0B:8B:4D:7D:EF:F0:8E:47:2D:58:FF:38:18
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 115ADF9399284F727CAFED76A08F39B7697DF5A9
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa
Signing time: Mon 02 Dec 2024 11:55:19 +0000
ROA not before: Mon 02 Dec 2024 11:50:19 +0000
ROA not after: Mon 01 Dec 2025 11:55:19 +0000
asID: 211440
IP address blocks: 217.198.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:5a:df:93:99:28:4f:72:7c:af:ed:76:a0:8f:39:b7:69:7d:f5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: Dec 2 11:50:19 2024 GMT
Not After : Dec 1 11:55:19 2025 GMT
Subject: CN=EE38B8A827D0160B8B4D7DEFF08E472D58FF3818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:78:10:2a:81:3e:af:b4:d1:a3:9b:8b:b2:ff:
23:b0:95:53:0a:f7:b6:89:d7:fa:72:2f:ae:c2:67:
e8:b2:b9:66:3b:56:42:a0:f1:63:40:a0:bc:bd:09:
e8:9d:f9:3a:19:07:10:f1:61:03:26:c2:a5:03:06:
a1:57:72:f8:1a:a3:8a:53:bc:18:b5:09:ff:ca:cb:
32:14:47:00:03:2f:b4:e3:63:fb:3c:a7:df:7b:0e:
04:ad:75:79:ca:dc:10:83:b4:73:0b:e6:66:4c:8f:
ad:2f:c3:3d:6a:61:d3:0b:3a:6f:45:f9:d9:42:e3:
bb:ae:8e:29:b1:a1:6d:c5:b2:34:87:18:10:e3:b2:
db:29:47:cb:05:38:93:9f:9a:d2:d2:86:7b:ac:b7:
04:01:ed:08:65:c9:5b:67:aa:b7:b1:8b:89:f5:47:
17:da:be:1a:43:89:a5:5e:74:27:39:e4:e3:f0:bb:
c9:28:5c:f9:6b:80:1a:06:54:91:5c:78:14:5c:d4:
61:5d:ae:73:95:d8:c6:6a:0c:58:6a:d9:a2:1d:d3:
66:36:bb:41:9e:b6:b7:aa:28:7d:7f:33:c1:f9:4f:
99:2f:f3:6d:64:f6:db:f4:e3:c5:f5:d5:ce:94:01:
53:9e:6e:15:5d:2b:26:b0:7f:29:ad:ca:8d:92:50:
84:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:38:B8:A8:27:D0:16:0B:8B:4D:7D:EF:F0:8E:47:2D:58:FF:38:18
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.187.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:09:cc:90:4e:fe:c4:29:23:6b:d7:7e:01:31:d4:de:63:cf:
04:99:af:75:ea:7a:78:84:a2:a6:fb:e3:63:46:f2:52:70:15:
d4:55:aa:1a:ee:f4:a0:a0:21:e1:ed:e8:15:15:a4:09:db:1e:
26:a3:eb:99:dd:6c:af:f1:06:5a:0b:f5:d4:ec:2e:7b:81:97:
8d:e9:fe:af:94:2e:5b:4d:38:90:1b:a5:7b:aa:d2:a9:03:b9:
f7:9c:67:42:02:d4:dc:f1:d0:78:db:6c:cf:51:78:0a:a5:c6:
fb:32:62:74:bb:67:ad:23:6f:28:64:e7:c6:ee:91:45:7b:81:
ed:4f:d2:1e:f3:55:56:12:a5:37:87:04:00:08:ba:25:59:47:
3a:ec:bf:7f:e4:c7:8c:92:48:0d:4d:87:d7:53:0d:e6:f2:fc:
ad:ad:39:fb:d9:8a:34:05:88:0a:88:73:12:60:d4:00:cf:bc:
69:64:9d:a7:81:03:a4:64:38:f5:1c:eb:11:71:58:86:77:4d:
9f:e4:1e:50:d7:b0:60:1e:33:28:1e:b1:56:f1:2b:49:55:ee:
87:4b:2f:b4:f0:8e:ed:5f:c6:1a:fd:1e:54:a4:af:13:78:2c:
6a:a4:91:0c:16:68:19:c5:c1:94:70:5e:ff:b0:e5:92:41:a8:
a3:fb:9f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:19 2025 by rpki-client