Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/15/39332e3138362e38302e302f32302d3234203d3e2036393339.roa
File: 39332e3138362e38302e302f32302d3234203d3e2036393339.roa (raw, json)
Hash identifier: 4fDgHkrKLYRBSZ9vxlRyQ0ZzyFYR2jlat01OWsCwTx8=
Subject key identifier: D9:C6:F8:32:57:12:42:50:E2:C5:B3:A1:FA:A2:12:24:AB:DC:E1:5C
Certificate issuer: /CN=02163416627c4c0595f71f58e481d350b5188f6f
Certificate serial: 12734B4BC1B40F6818D73D7F32C8600F0D0F4341
Authority key identifier: 02:16:34:16:62:7C:4C:05:95:F7:1F:58:E4:81:D3:50:B5:18:8F:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhY0FmJ8TAWV9x9Y5IHTULUYj28.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/15/39332e3138362e38302e302f32302d3234203d3e2036393339.roa
Signing time: Mon 29 Jan 2024 22:14:15 +0000
ROA not before: Mon 29 Jan 2024 22:09:15 +0000
ROA not after: Mon 27 Jan 2025 22:14:15 +0000
asID: 6939
IP address blocks: 93.186.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:73:4b:4b:c1:b4:0f:68:18:d7:3d:7f:32:c8:60:0f:0d:0f:43:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02163416627c4c0595f71f58e481d350b5188f6f
Validity
Not Before: Jan 29 22:09:15 2024 GMT
Not After : Jan 27 22:14:15 2025 GMT
Subject: CN=D9C6F83257124250E2C5B3A1FAA21224ABDCE15C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0f:df:1a:a9:b0:02:21:41:31:00:04:94:d2:
ef:07:a4:ee:22:a6:f8:54:1b:fe:87:ee:14:30:77:
47:f7:9c:64:6b:06:49:d6:52:65:47:25:f7:6a:1e:
8c:39:a6:94:f3:45:92:ee:3d:85:c8:f1:23:f8:c6:
9b:87:a7:21:06:d0:0b:1e:47:fc:53:68:ed:f9:97:
e7:f0:6e:93:6f:18:34:36:8a:e4:e0:b6:74:fa:28:
ad:ca:1b:e8:15:91:c5:13:ca:29:d6:02:78:da:2c:
46:e4:88:28:93:60:a4:35:67:ab:ac:49:fe:2a:77:
e6:1a:ae:6a:e0:7b:0f:9c:72:5f:9c:d4:98:ef:6a:
22:b0:38:2e:57:72:6b:53:3e:a1:9c:f7:54:2f:20:
13:a7:b3:85:5c:cd:5f:90:af:59:80:11:f4:2a:21:
4c:52:62:dc:6f:ef:af:92:b1:66:79:73:62:86:26:
45:0c:6e:e8:fa:37:ff:9f:bd:6f:67:7f:1c:20:33:
c8:2a:5b:f5:c3:f5:b5:96:bf:52:ea:93:4f:55:33:
f9:36:e1:9c:9e:67:56:2a:06:a0:03:e7:cb:54:74:
6a:35:69:05:89:28:a7:64:5c:e4:f6:53:3a:8b:f2:
00:8c:48:da:d6:f6:63:b4:86:b9:51:81:b0:62:dc:
4e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C6:F8:32:57:12:42:50:E2:C5:B3:A1:FA:A2:12:24:AB:DC:E1:5C
X509v3 Authority Key Identifier:
keyid:02:16:34:16:62:7C:4C:05:95:F7:1F:58:E4:81:D3:50:B5:18:8F:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/15/02163416627C4C0595F71F58E481D350B5188F6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhY0FmJ8TAWV9x9Y5IHTULUYj28.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/15/39332e3138362e38302e302f32302d3234203d3e2036393339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.80.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:26:d8:b0:5b:02:71:f5:eb:9a:ed:c2:2e:b5:51:52:0b:a8:
c9:92:87:d8:6d:26:c8:2d:f4:08:a2:eb:c6:60:1f:26:31:27:
a5:81:b0:e9:4f:4a:af:51:4f:27:1b:63:da:6c:43:2a:f5:ca:
78:6e:61:91:bd:42:d1:61:9d:87:02:19:b8:aa:1e:1a:4c:21:
86:99:de:7e:b7:8e:8b:5c:ab:a7:26:21:73:7d:f2:e7:ff:4e:
37:02:08:60:5c:ee:02:f5:9f:ab:9c:0b:06:ed:65:32:28:9b:
0c:bf:8a:a5:a4:52:0b:74:98:41:dd:e9:d1:3b:65:dd:aa:77:
3f:b7:d5:3a:df:da:a9:c2:8a:db:4f:08:2a:df:ba:94:88:f0:
6b:46:aa:a2:52:ef:ab:52:1f:0c:9b:7d:08:c4:4a:5c:d0:d2:
67:46:75:fc:be:81:a4:4f:42:d6:9e:25:63:ca:3d:a4:e1:35:
d5:11:7e:82:25:f1:64:87:21:3b:bd:67:15:df:b3:9d:82:7b:
11:39:b7:68:7f:20:51:48:cb:9e:e1:40:c1:bb:3c:20:55:af:
5a:95:35:dd:1c:8a:27:bf:e0:d5:19:a5:63:5e:fe:a2:d3:f4:
4d:19:c8:17:49:d9:bb:d3:3d:c1:42:21:c9:ac:f1:4f:44:02:
ef:43:1a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:56 2025 by rpki-client