Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/39322e3131342e342e302f32342d3234203d3e203630373231.roa
File: 39322e3131342e342e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: qSEY9daaL7yeTCdrstXqxHMSxmWwElyW8FiNEun6yIE=
Subject key identifier: 8A:53:DF:CF:15:ED:F5:45:35:E0:87:45:D1:B9:41:F3:CC:A6:F7:47
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 30E3D55DCE77EF624DCE5962987638D4864B91D3
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/39322e3131342e342e302f32342d3234203d3e203630373231.roa
Signing time: Sat 29 Apr 2023 09:35:33 +0000
ROA not before: Sat 29 Apr 2023 09:30:33 +0000
ROA not after: Sat 27 Apr 2024 09:35:33 +0000
asID: 60721
IP address blocks: 92.114.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e3:d5:5d:ce:77:ef:62:4d:ce:59:62:98:76:38:d4:86:4b:91:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:30:33 2023 GMT
Not After : Apr 27 09:35:33 2024 GMT
Subject: CN=8A53DFCF15EDF54535E08745D1B941F3CCA6F747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:ef:fa:0c:88:86:2e:b6:ab:08:63:2e:c8:
4f:3c:97:2b:1e:b1:8e:25:2b:ee:75:66:74:b8:35:
41:25:78:fc:0d:4c:79:0b:4b:4c:d9:f4:8c:63:85:
95:bb:05:c5:82:1d:8c:c4:a4:dc:3b:09:6b:c8:49:
33:d2:b2:c4:42:15:e1:79:3e:4d:81:f2:77:2b:3c:
87:90:a0:ee:25:44:83:55:ad:ee:b5:22:e8:8e:a1:
9e:db:a5:e3:92:eb:a4:b1:41:76:f3:83:bf:9d:bb:
90:21:04:93:5b:9a:fb:85:ad:14:bc:53:0a:12:7d:
f3:73:05:19:d3:dc:a2:4a:a6:26:5f:bb:56:35:9f:
51:ab:68:73:16:0b:58:31:52:42:2c:63:e0:cf:8c:
5f:9d:a3:f5:cb:4c:00:32:8a:5f:92:69:55:71:29:
dd:ca:c6:e3:10:85:80:66:bf:08:55:14:79:e1:15:
1e:12:50:79:7c:9c:bf:d3:3b:e6:ab:6c:a3:de:28:
49:bb:8b:37:d7:03:9d:e5:1b:c9:22:29:06:4f:29:
f7:41:91:e1:05:70:1a:d3:74:6c:df:44:ee:01:14:
16:f8:39:02:2f:1f:e4:7e:85:49:7b:00:34:d5:d0:
ce:5f:9b:32:5f:18:b3:e3:e7:d5:b0:1c:69:46:dd:
c6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:53:DF:CF:15:ED:F5:45:35:E0:87:45:D1:B9:41:F3:CC:A6:F7:47
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/39322e3131342e342e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.4.0/24
Signature Algorithm: sha256WithRSAEncryption
31:12:24:de:a1:04:79:40:61:16:b5:c8:a8:d4:86:2e:44:a3:
79:cb:0b:23:8f:b2:77:26:30:71:04:45:76:05:16:41:0c:cf:
44:95:db:85:93:f5:90:39:05:01:2d:31:8f:77:3f:ac:23:4c:
32:6e:78:37:92:53:56:13:da:e4:5e:59:4f:b6:b1:d1:da:e4:
1d:49:42:c9:d3:13:17:3d:34:71:e3:e6:7c:b5:20:ec:c5:87:
7f:eb:ee:19:24:2f:f2:41:82:22:6d:fb:a7:7f:50:cb:82:6a:
b1:cd:54:7d:59:38:8f:e4:62:96:d0:97:cb:05:32:6b:c8:76:
1a:08:73:f2:93:c8:bf:d3:56:5e:b7:5c:4f:d6:e0:33:c5:d6:
b4:57:b1:49:23:73:66:59:20:3e:70:87:98:db:0b:f9:f6:e8:
1e:a7:1c:42:19:ce:ea:2f:01:05:14:b3:7b:d7:ad:6b:2f:e2:
1a:83:06:9b:7f:86:23:c7:2e:d8:8a:a6:74:20:a2:30:d4:24:
c2:3e:ce:99:2d:ea:e8:a5:4f:54:ac:f0:3a:8f:3a:3e:5d:d9:
24:06:42:bb:c7:ca:63:4b:95:55:dd:1a:83:d2:d6:98:73:42:
77:96:54:fb:0e:25:50:d6:d7:f9:ec:05:f8:dd:02:d6:c8:cf:
ca:57:1d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org