Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/0/3139332e38342e3130312e302f32342d3234203d3e20323135393738.roa
File: 3139332e38342e3130312e302f32342d3234203d3e20323135393738.roa (raw, json)
Hash identifier: Su39QI2Ipexf+TL8oIsAN6xv3rhbcFNuxVlp1BqNeyQ=
Subject key identifier: 7F:C0:42:F6:19:C3:44:98:50:0D:AE:7E:4E:6B:31:4B:91:A5:F6:38
Certificate issuer: /CN=f56b7c7537b799200f0c3f3c6832a698e9508a3a
Certificate serial: 0212ADA2DBBA73AE0FC7DFE06F6DE2721FD75A44
Authority key identifier: F5:6B:7C:75:37:B7:99:20:0F:0C:3F:3C:68:32:A6:98:E9:50:8A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Wt8dTe3mSAPDD88aDKmmOlQijo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/0/3139332e38342e3130312e302f32342d3234203d3e20323135393738.roa
Signing time: Tue 26 Dec 2023 16:35:40 +0000
ROA not before: Tue 26 Dec 2023 16:30:40 +0000
ROA not after: Tue 24 Dec 2024 16:35:40 +0000
asID: 215978
IP address blocks: 193.84.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:12:ad:a2:db:ba:73:ae:0f:c7:df:e0:6f:6d:e2:72:1f:d7:5a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b7c7537b799200f0c3f3c6832a698e9508a3a
Validity
Not Before: Dec 26 16:30:40 2023 GMT
Not After : Dec 24 16:35:40 2024 GMT
Subject: CN=7FC042F619C34498500DAE7E4E6B314B91A5F638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:93:0e:1f:6e:a3:49:e1:f7:21:07:8b:69:
de:6d:30:90:9f:34:09:a9:6d:32:45:3d:f9:d5:46:
16:4d:f4:77:de:51:02:ee:18:37:d9:a0:bd:df:21:
56:db:23:e9:12:7e:5c:37:e4:ac:3a:cb:00:2a:05:
b5:93:42:dc:51:9b:84:35:12:8c:30:33:de:93:2d:
12:68:eb:e1:c6:88:bf:bc:8e:7f:e0:7c:f4:8b:8f:
66:47:4e:b3:72:3b:be:c2:30:45:6b:2a:ee:e9:cd:
4e:44:1e:7c:14:5f:de:8c:44:1e:57:6d:d4:56:22:
4d:2e:59:7c:f9:5d:94:b6:a2:53:a9:ec:1a:23:c9:
20:c7:db:0d:74:9c:45:68:68:a8:5a:d8:a1:38:65:
51:72:0b:a5:a8:88:ba:34:20:df:cc:7c:e8:aa:25:
31:41:9f:84:46:e8:bd:a8:ce:7e:99:3f:cc:2d:c6:
5f:f3:d4:ca:38:43:f9:c5:5a:e5:f4:35:70:17:f5:
09:01:dc:d5:c8:3b:c2:4e:be:ee:f2:3b:2c:2f:f1:
c7:3f:b0:08:5e:d6:18:7f:b4:ab:9d:b6:13:9a:84:
71:b1:fd:07:c9:7e:15:ff:9a:d1:2e:b5:ee:12:32:
1d:90:7a:84:4d:22:ef:25:12:d4:2c:ee:94:a5:0b:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C0:42:F6:19:C3:44:98:50:0D:AE:7E:4E:6B:31:4B:91:A5:F6:38
X509v3 Authority Key Identifier:
keyid:F5:6B:7C:75:37:B7:99:20:0F:0C:3F:3C:68:32:A6:98:E9:50:8A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/0/F56B7C7537B799200F0C3F3C6832A698E9508A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Wt8dTe3mSAPDD88aDKmmOlQijo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/0/3139332e38342e3130312e302f32342d3234203d3e20323135393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.101.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:4e:12:a2:9a:88:32:cc:cf:36:27:6d:aa:96:41:59:a9:05:
86:02:12:79:b7:4d:fb:f4:4c:a6:7c:81:22:c0:d1:cc:bc:94:
87:16:21:a6:23:08:f7:65:95:23:37:2f:d4:d3:65:bb:c1:e0:
b5:16:c9:1e:0e:2f:99:aa:6c:7f:aa:28:ec:c0:02:5b:a1:35:
8f:23:5b:82:1f:6e:16:92:1b:1a:92:ae:83:7c:13:ad:31:2f:
60:4c:8c:ea:ab:b3:c4:25:de:52:3d:14:13:a2:b2:8f:74:2b:
ff:0c:7d:c6:10:04:e3:ff:43:62:bd:29:8e:87:65:43:4b:e5:
5b:77:49:10:15:00:9f:19:a1:a6:5a:c5:64:fe:09:dc:f8:d6:
d2:5c:82:dc:05:3b:f0:70:47:f1:7a:85:80:4d:18:d5:fb:08:
dc:cc:06:b6:5c:82:27:82:59:78:ab:a2:50:5e:bc:ca:4e:0a:
14:45:b2:eb:3f:ea:b9:84:aa:cf:ea:74:cd:09:10:ab:59:2f:
da:2a:5d:06:a3:f0:bf:35:ad:76:09:0c:4d:84:a2:fb:33:3c:
e3:47:9e:f7:d2:85:2b:31:6e:40:9c:b0:a9:00:f5:cb:61:5a:
d8:5f:3b:29:63:a4:29:55:82:40:db:eb:75:97:50:8c:f5:e4:
5d:5b:70:63
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUAhKtotu6c64Px9/gb23ich/XWkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjU2YjdjNzUzN2I3OTkyMDBmMGMzZjNjNjgzMmE2OThl
OTUwOGEzYTAeFw0yMzEyMjYxNjMwNDBaFw0yNDEyMjQxNjM1NDBaMDMxMTAvBgNV
BAMTKDdGQzA0MkY2MTlDMzQ0OTg1MDBEQUU3RTRFNkIzMTRCOTFBNUY2MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmmpMOH26jSeH3IQeLad5tMJCf
NAmpbTJFPfnVRhZN9HfeUQLuGDfZoL3fIVbbI+kSflw35Kw6ywAqBbWTQtxRm4Q1
EowwM96TLRJo6+HGiL+8jn/gfPSLj2ZHTrNyO77CMEVrKu7pzU5EHnwUX96MRB5X
bdRWIk0uWXz5XZS2olOp7BojySDH2w10nEVoaKha2KE4ZVFyC6WoiLo0IN/MfOiq
JTFBn4RG6L2ozn6ZP8wtxl/z1Mo4Q/nFWuX0NXAX9QkB3NXIO8JOvu7yOywv8cc/
sAhe1hh/tKudthOahHGx/QfJfhX/mtEute4SMh2QeoRNIu8lEtQs7pSlC5sxAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUf8BC9hnDRJhQDa5+TmsxS5Gl9jgwHwYDVR0j
BBgwFoAU9Wt8dTe3mSAPDD88aDKmmOlQijowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjkyMzUwNTUtMTkwNC00NGI0LTk5OGItZmYxYzllMzEx
YzQ5LzAvRjU2QjdDNzUzN0I3OTkyMDBGMEMzRjNDNjgzMkE2OThFOTUwOEEzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlXdDhkVGUzbVNBUEREODhhREttbU9s
UWlqby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjkyMzUwNTUt
MTkwNC00NGI0LTk5OGItZmYxYzllMzExYzQ5LzAvMzEzOTMzMmUzODM0MmUzMTMw
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzOTM3Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BADBVGUwDQYJKoZIhvcNAQELBQADggEBAH1OEqKaiDLMzzYnbaqWQVmpBYYCEnm3
Tfv0TKZ8gSLA0cy8lIcWIaYjCPdllSM3L9TTZbvB4LUWyR4OL5mqbH+qKOzAAluh
NY8jW4IfbhaSGxqSroN8E60xL2BMjOqrs8Ql3lI9FBOiso90K/8MfcYQBOP/Q2K9
KY6HZUNL5Vt3SRAVAJ8ZoaZaxWT+Cdz41tJcgtwFO/BwR/F6hYBNGNX7CNzMBrZc
gieCWXirolBevMpOChRFsus/6rmEqs/qdM0JEKtZL9oqXQaj8L81rXYJDE2Eovsz
PONHnvfShSsxbkCcsKkA9cthWthfOyljpClVgkDb63WXUIz15F1bcGM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:52 2025 by rpki-client