Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/0/3139332e38342e3130312e302f32342d3234203d3e20313938393830.roa
File: 3139332e38342e3130312e302f32342d3234203d3e20313938393830.roa (raw, json)
Hash identifier: LbyNJqjBFRmoqBx+Y03I3TbeEGx2qHAfLoGo9/FyjjY=
Subject key identifier: 8D:FD:5A:A8:75:03:B9:3C:3D:5F:67:BD:96:77:76:3A:87:F1:58:42
Certificate issuer: /CN=f56b7c7537b799200f0c3f3c6832a698e9508a3a
Certificate serial: 18B7BDC8838730AC8D91946A08AA2DB56CED0744
Authority key identifier: F5:6B:7C:75:37:B7:99:20:0F:0C:3F:3C:68:32:A6:98:E9:50:8A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Wt8dTe3mSAPDD88aDKmmOlQijo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/0/3139332e38342e3130312e302f32342d3234203d3e20313938393830.roa
Signing time: Tue 26 Dec 2023 21:07:50 +0000
ROA not before: Tue 26 Dec 2023 21:02:50 +0000
ROA not after: Tue 24 Dec 2024 21:07:50 +0000
asID: 198980
IP address blocks: 193.84.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:b7:bd:c8:83:87:30:ac:8d:91:94:6a:08:aa:2d:b5:6c:ed:07:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b7c7537b799200f0c3f3c6832a698e9508a3a
Validity
Not Before: Dec 26 21:02:50 2023 GMT
Not After : Dec 24 21:07:50 2024 GMT
Subject: CN=8DFD5AA87503B93C3D5F67BD9677763A87F15842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b3:05:f1:4e:13:23:00:b9:8a:40:01:c6:dc:
ce:69:ab:93:67:b3:5c:fe:93:03:20:d8:9a:42:e1:
b0:8d:ab:cf:43:87:ee:9a:fb:9c:25:4d:5f:c1:70:
94:8a:c1:51:63:12:56:75:d2:ab:5b:53:aa:21:f5:
64:92:e3:e5:23:7f:73:77:27:2a:0e:52:94:a6:5a:
7c:96:46:16:9c:24:48:a0:c6:7a:64:1e:b0:f5:95:
5e:15:13:c4:cf:cb:04:f4:4b:7b:86:c4:30:8b:56:
c7:64:e0:57:ef:dd:6c:19:15:a0:b3:bd:86:66:6f:
46:81:6f:d6:84:4f:56:a5:d6:98:8d:cb:09:53:ff:
2c:a2:fa:c4:18:15:a6:c3:cc:df:db:da:48:62:60:
37:79:ab:48:2b:3d:08:d6:fb:b2:ca:21:17:6e:61:
c0:c5:dc:d5:d4:f1:72:38:72:29:84:71:8c:0c:d6:
34:0d:ee:24:59:33:9b:59:2f:bb:c8:e7:02:f2:60:
2e:4b:a0:31:e5:9f:3a:09:9e:50:f2:30:6b:ef:5a:
29:0e:e8:4d:f8:34:77:a4:1c:96:b8:30:45:e8:f3:
48:68:e4:90:e1:6b:48:b1:91:af:dd:46:44:84:3c:
d1:c8:07:d9:ed:58:2d:a0:d5:28:b6:5f:c3:46:f8:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FD:5A:A8:75:03:B9:3C:3D:5F:67:BD:96:77:76:3A:87:F1:58:42
X509v3 Authority Key Identifier:
keyid:F5:6B:7C:75:37:B7:99:20:0F:0C:3F:3C:68:32:A6:98:E9:50:8A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/0/F56B7C7537B799200F0C3F3C6832A698E9508A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Wt8dTe3mSAPDD88aDKmmOlQijo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/0/3139332e38342e3130312e302f32342d3234203d3e20313938393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.101.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:40:31:00:b0:91:2c:b2:2c:c5:c0:2e:fb:df:9b:4b:a7:25:
96:8f:79:6f:16:71:c1:89:67:6e:7a:d3:8c:e8:9c:43:3e:33:
a1:db:aa:b7:ed:ff:d7:50:d5:ea:1e:72:b1:11:33:ec:47:e8:
08:3a:8f:45:0c:cb:7e:af:cb:8a:d8:e9:15:bf:ba:c3:80:76:
a8:08:af:b1:fe:07:f8:7a:a7:a9:a8:2f:0d:8b:bd:c0:83:4b:
11:39:95:54:3e:1b:8c:3d:60:c4:af:ca:a7:96:f6:0f:39:f8:
e6:35:8c:50:c2:5c:e4:bf:5b:77:85:b0:d9:48:04:b3:dc:a5:
5a:55:2d:9d:b6:91:75:d0:9a:32:ef:d9:fc:27:ea:18:6d:22:
40:08:a5:47:ee:a2:a2:f9:0f:07:3c:20:c7:8c:8c:59:fa:ed:
49:47:30:7c:7d:c4:d3:a7:dc:27:36:be:de:02:d0:8b:a5:d6:
11:dd:b0:60:9f:23:7c:c8:05:70:51:e6:16:2f:40:dc:83:ab:
63:4c:58:03:ee:ff:77:14:2d:1d:ed:e5:77:e0:59:80:be:12:
d8:94:ce:92:aa:e1:53:65:14:0f:4b:c6:70:83:9f:4f:3e:65:
8a:5e:6a:bd:58:9a:42:98:b8:ba:c8:bc:c6:a1:12:15:3d:a3:
ea:e4:01:3e
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUGLe9yIOHMKyNkZRqCKottWztB0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjU2YjdjNzUzN2I3OTkyMDBmMGMzZjNjNjgzMmE2OThl
OTUwOGEzYTAeFw0yMzEyMjYyMTAyNTBaFw0yNDEyMjQyMTA3NTBaMDMxMTAvBgNV
BAMTKDhERkQ1QUE4NzUwM0I5M0MzRDVGNjdCRDk2Nzc3NjNBODdGMTU4NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOswXxThMjALmKQAHG3M5pq5Nn
s1z+kwMg2JpC4bCNq89Dh+6a+5wlTV/BcJSKwVFjElZ10qtbU6oh9WSS4+Ujf3N3
JyoOUpSmWnyWRhacJEigxnpkHrD1lV4VE8TPywT0S3uGxDCLVsdk4Ffv3WwZFaCz
vYZmb0aBb9aET1al1piNywlT/yyi+sQYFabDzN/b2khiYDd5q0grPQjW+7LKIRdu
YcDF3NXU8XI4cimEcYwM1jQN7iRZM5tZL7vI5wLyYC5LoDHlnzoJnlDyMGvvWikO
6E34NHekHJa4MEXo80ho5JDha0ixka/dRkSEPNHIB9ntWC2g1Si2X8NG+JOrAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUjf1aqHUDuTw9X2e9lnd2OofxWEIwHwYDVR0j
BBgwFoAU9Wt8dTe3mSAPDD88aDKmmOlQijowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjkyMzUwNTUtMTkwNC00NGI0LTk5OGItZmYxYzllMzEx
YzQ5LzAvRjU2QjdDNzUzN0I3OTkyMDBGMEMzRjNDNjgzMkE2OThFOTUwOEEzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlXdDhkVGUzbVNBUEREODhhREttbU9s
UWlqby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjkyMzUwNTUt
MTkwNC00NGI0LTk5OGItZmYxYzllMzExYzQ5LzAvMzEzOTMzMmUzODM0MmUzMTMw
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzgzOTM4MzAucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADBVGUwDQYJKoZIhvcNAQELBQADggEBADtAMQCwkSyyLMXALvvfm0unJZaPeW8W
ccGJZ25604zonEM+M6Hbqrft/9dQ1eoecrERM+xH6Ag6j0UMy36vy4rY6RW/usOA
dqgIr7H+B/h6p6moLw2LvcCDSxE5lVQ+G4w9YMSvyqeW9g85+OY1jFDCXOS/W3eF
sNlIBLPcpVpVLZ22kXXQmjLv2fwn6hhtIkAIpUfuoqL5Dwc8IMeMjFn67UlHMHx9
xNOn3Cc2vt4C0Iul1hHdsGCfI3zIBXBR5hYvQNyDq2NMWAPu/3cULR3t5XfgWYC+
EtiUzpKq4VNlFA9LxnCDn08+ZYpear1YmkKYuLrIvMahEhU9o+rkAT4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:59 2025 by rpki-client