Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e33362e32312e302f32342d3234203d3e203439343638.roa
File: 38392e33362e32312e302f32342d3234203d3e203439343638.roa (raw, json)
Hash identifier: 8ktNKj/9wzvqW1/iNDKHcbNzyJPLRYLdQqrSOGD8Vc8=
Subject key identifier: DE:99:17:43:54:53:3D:43:8D:59:73:DD:B5:1D:16:B5:7F:1D:7D:C4
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 405F1AAD714A49AF65956D63291447BADF26371F
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e33362e32312e302f32342d3234203d3e203439343638.roa
Signing time: Thu 19 Dec 2024 15:34:37 +0000
ROA not before: Thu 19 Dec 2024 15:29:37 +0000
ROA not after: Thu 18 Dec 2025 15:34:37 +0000
asID: 49468
IP address blocks: 89.36.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:5f:1a:ad:71:4a:49:af:65:95:6d:63:29:14:47:ba:df:26:37:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Dec 19 15:29:37 2024 GMT
Not After : Dec 18 15:34:37 2025 GMT
Subject: CN=DE99174354533D438D5973DDB51D16B57F1D7DC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7e:45:47:e2:46:0c:a5:3c:ab:1b:46:5b:84:
71:6e:40:e0:24:93:b3:b4:24:5a:2f:97:0e:29:84:
8a:1a:d7:de:9b:6d:34:c0:29:f1:08:70:ed:1b:b5:
24:3f:5b:e8:d7:ea:15:62:54:9f:35:70:95:18:46:
02:09:fb:10:83:85:43:b6:1d:a4:03:a3:7d:db:13:
53:b2:58:5f:83:0e:e8:16:c8:46:a2:7f:ab:45:d6:
a2:04:c8:32:19:01:08:e5:b4:57:0d:49:50:b8:d4:
60:2d:31:21:37:c1:51:00:66:8a:72:7a:98:ef:b0:
f7:84:9a:0e:8d:80:78:8b:e4:35:87:6e:c1:b9:5f:
7e:12:f3:34:7b:0a:a4:5b:fc:94:68:aa:c3:05:3f:
cd:1c:0d:9c:b2:13:a2:f7:16:c8:9c:7d:91:96:2c:
3e:12:e8:e1:36:d6:96:eb:5b:20:0d:bf:dd:07:3c:
30:b2:ef:f6:0b:e3:4b:ab:13:f4:0b:10:1c:ff:be:
b9:d6:c2:79:23:8a:88:25:cf:e5:31:1c:0e:7a:2d:
9d:56:14:f5:0c:48:96:0c:f4:00:ef:18:c9:9d:85:
12:c8:56:6d:17:07:c2:76:e2:e4:6b:d0:0a:2b:1b:
6c:41:6e:9b:46:2a:5c:0a:aa:3a:27:b7:e7:30:a9:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:99:17:43:54:53:3D:43:8D:59:73:DD:B5:1D:16:B5:7F:1D:7D:C4
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e33362e32312e302f32342d3234203d3e203439343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.21.0/24
Signature Algorithm: sha256WithRSAEncryption
21:5b:1b:a9:67:60:3f:91:4a:f9:41:d3:b9:5b:af:c8:cc:8d:
1d:2e:13:c7:2a:16:c6:95:5b:d7:47:7d:63:07:b6:10:36:c0:
98:20:fe:7b:a7:08:f9:34:67:79:7f:9c:34:9d:31:5d:53:e3:
c3:22:ae:62:4d:b1:45:6b:49:5a:5e:3f:59:ac:5b:df:e5:c5:
f0:05:e3:3b:51:7d:84:95:58:c3:7b:b3:fb:5e:60:ef:cf:3e:
a9:95:9c:b4:fb:3e:ee:48:04:34:97:b5:46:66:40:77:fa:63:
e4:29:19:1f:70:f9:8f:0f:62:a5:66:d7:0b:4c:3c:b2:22:28:
b8:ea:b6:5f:f7:f3:e6:37:dc:55:d0:cd:54:27:66:2f:10:c3:
ec:63:61:2f:78:e8:a6:8f:34:c1:6d:3f:fa:5c:06:73:b8:dd:
54:03:ac:c5:b7:ef:81:5d:82:3f:74:13:f9:d6:19:fb:5a:2d:
ee:0e:7c:56:e0:40:b9:e4:21:46:d4:73:58:8d:80:0e:c0:74:
2c:0a:ce:30:05:3a:9d:df:b4:4f:78:36:c4:a6:4e:4e:0d:84:
71:fb:52:0c:24:a1:25:f2:ae:cf:3c:c1:18:fc:5f:e6:27:a3:
2f:36:c1:18:83:ee:c1:2c:0d:a1:9c:37:16:ff:b8:f3:18:25:
48:e7:c9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:04 2025 by rpki-client