Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa
File: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (raw, json)
Hash identifier: nmhaoLhqUBAnDccEuteaqmwjmYCIqjMWJmqWnwMVbc8=
Subject key identifier: 4F:66:BD:B7:63:17:74:34:59:1D:1F:A3:B9:E1:51:C0:B7:D3:E0:91
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 6B9CEA110F55AE1D3167298BC7BBD53E902289CF
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa
Signing time: Thu 19 Dec 2024 15:33:00 +0000
ROA not before: Thu 19 Dec 2024 15:28:00 +0000
ROA not after: Thu 18 Dec 2025 15:33:00 +0000
asID: 49468
IP address blocks: 193.203.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:9c:ea:11:0f:55:ae:1d:31:67:29:8b:c7:bb:d5:3e:90:22:89:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Dec 19 15:28:00 2024 GMT
Not After : Dec 18 15:33:00 2025 GMT
Subject: CN=4F66BDB763177434591D1FA3B9E151C0B7D3E091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:ff:c1:09:5b:2e:5b:0a:39:c7:58:ab:13:
e4:08:0b:20:16:d8:7a:bd:96:69:5e:4d:fc:47:0d:
7a:ce:50:53:34:73:ee:03:aa:14:af:0a:c6:bd:43:
1d:08:52:38:47:2b:0c:ff:a2:94:a8:c6:26:ea:c3:
b4:48:2e:65:3b:28:07:03:19:ff:70:a9:2a:40:39:
24:54:f8:09:1e:7f:91:c0:86:1b:0d:d1:be:22:b4:
b1:af:68:7a:75:92:cf:8a:2d:4d:dc:2c:08:9d:ba:
a0:0c:f4:de:23:11:7c:1c:b3:44:03:8f:ef:64:e3:
94:73:09:b6:e6:79:29:4a:c2:ce:56:82:f2:f4:51:
1f:93:96:92:30:a6:53:e9:b9:54:a0:4a:2b:2e:ed:
81:62:47:e2:de:23:d6:41:1f:02:3e:02:05:75:e5:
32:22:30:bf:71:b2:ba:70:0b:e5:b4:27:41:9b:89:
05:d2:69:13:ad:75:38:de:e0:75:de:9b:fa:c5:12:
e8:fc:1f:2a:56:22:e0:e0:44:89:63:fe:cd:26:46:
91:3d:f0:6a:bf:c9:19:6d:dd:67:42:1b:09:59:dc:
93:fc:1a:c3:d9:5f:ad:20:34:50:7f:35:37:47:d0:
4b:7e:7d:77:7e:e4:95:14:88:28:75:a2:1d:a6:fc:
db:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:66:BD:B7:63:17:74:34:59:1D:1F:A3:B9:E1:51:C0:B7:D3:E0:91
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.205.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d8:0b:2b:b4:7b:68:48:aa:cc:9e:d7:2c:b4:ae:35:4c:48:
05:95:10:07:8f:a2:26:c1:8f:56:26:06:6f:e4:ce:e4:b4:ff:
f6:ba:74:ea:22:12:cf:7f:3b:34:07:e0:b9:d1:aa:1a:ed:10:
b5:31:e4:a1:3a:0f:c9:0d:11:9b:e3:17:1d:ca:fe:14:68:18:
bf:17:df:4d:15:a5:06:b2:5d:5a:f9:a0:b3:29:83:1b:4d:b8:
71:23:c9:46:94:b6:f8:b6:5f:12:f5:b2:69:5d:0d:b2:80:da:
73:7e:97:79:78:7e:eb:a4:60:c7:9d:19:2f:ab:67:c8:7d:b4:
dd:78:47:c7:5d:21:df:6f:36:96:96:66:cc:a5:c6:c9:a5:ae:
0d:f5:82:8f:c2:48:9d:a5:32:1a:15:c3:8e:1b:e8:8f:fc:01:
ba:4a:62:3c:78:40:23:e2:d5:21:c2:f1:b3:de:85:8a:46:9a:
a8:b4:bf:ce:75:e4:48:f8:ea:5f:74:4b:83:28:37:bd:3f:3d:
be:6e:5f:35:3e:b2:a2:bd:73:50:4b:f0:43:16:e9:4c:48:15:
40:b4:bd:56:59:4f:3d:ea:f3:b1:8a:93:d3:47:99:0a:c0:43:
2f:d5:1f:ac:55:d6:89:df:5c:5c:86:fc:32:2e:e7:45:5a:4e:
94:54:0f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:28 2025 by rpki-client