Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/39322e3131342e352e302f32342d3234203d3e203330303831.roa
File: 39322e3131342e352e302f32342d3234203d3e203330303831.roa (raw, json)
Hash identifier: hv6u3vk7IdChMbdLv6uEQX0Z6qRY8BXTCk4REI5KvlE=
Subject key identifier: 06:CB:30:87:ED:0B:0C:C4:29:6C:AA:16:13:76:30:A7:80:4E:DD:28
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 23EFE82E31A0C5EFADC24BE8B7557AD43CF87A30
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/39322e3131342e352e302f32342d3234203d3e203330303831.roa
Signing time: Sat 29 Apr 2023 09:35:58 +0000
ROA not before: Sat 29 Apr 2023 09:30:58 +0000
ROA not after: Sat 27 Apr 2024 09:35:58 +0000
asID: 30081
IP address blocks: 92.114.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ef:e8:2e:31:a0:c5:ef:ad:c2:4b:e8:b7:55:7a:d4:3c:f8:7a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:30:58 2023 GMT
Not After : Apr 27 09:35:58 2024 GMT
Subject: CN=06CB3087ED0B0CC4296CAA16137630A7804EDD28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:a4:2c:9f:dd:d7:83:e3:05:52:9d:52:23:
20:a3:41:60:1b:81:2e:23:fe:d2:3b:95:0d:54:7c:
8c:9c:6d:17:9b:43:7b:86:f8:fc:b1:fe:b7:d1:e0:
ef:7c:d4:21:47:47:97:1d:23:7d:a5:b3:4c:7e:92:
12:eb:f3:92:93:69:c1:31:dd:68:a3:2b:63:67:8e:
4a:83:9b:d0:72:a5:e9:d6:27:03:7f:5b:78:1c:30:
98:e2:d9:95:26:77:42:4b:8c:d3:d2:7e:10:1a:fc:
6f:43:2e:6e:3f:5e:30:19:c1:68:d2:86:6e:45:a3:
c0:cc:97:93:83:8b:7f:dd:64:2b:09:ec:b0:dd:08:
1b:ed:f9:3e:58:c1:5d:63:a3:c5:02:b0:3e:ca:07:
6d:20:5e:21:40:0f:c7:65:0a:57:f1:90:62:7c:86:
da:f9:a8:96:15:81:b9:e9:d7:24:af:62:ab:39:54:
25:c3:8f:45:95:04:e3:48:ea:76:63:40:1f:47:23:
2e:cc:d0:00:13:a0:c4:ea:95:10:0a:d0:94:17:1e:
f1:bb:06:2b:43:f3:1d:a5:b5:8d:05:c1:13:89:e6:
ae:a7:1d:91:94:66:1f:2d:e8:8f:62:ba:c8:c2:32:
1e:97:14:5d:16:72:44:07:af:44:32:c0:a4:a7:75:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CB:30:87:ED:0B:0C:C4:29:6C:AA:16:13:76:30:A7:80:4E:DD:28
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/39322e3131342e352e302f32342d3234203d3e203330303831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.5.0/24
Signature Algorithm: sha256WithRSAEncryption
03:66:44:bf:6e:54:36:76:2c:61:9c:42:55:20:b2:b5:7e:f5:
e2:5a:4e:e3:bf:37:a7:dc:89:98:42:a7:63:2b:ae:9c:a7:88:
68:f1:00:68:c8:6d:a3:72:ed:5d:82:a7:e1:8c:f6:11:55:7e:
39:29:b1:c3:bd:cb:34:42:67:be:0c:27:92:85:56:9e:72:b8:
f8:d5:4a:9a:a6:58:83:48:b0:d0:d1:cd:6e:13:f6:e4:e8:d5:
f3:1f:e8:54:2c:dd:fa:f1:f0:8f:2f:e4:c2:49:7d:3e:4a:25:
bf:3e:53:3f:c0:d8:18:c0:8a:1c:45:d1:0c:2c:3e:17:b4:e1:
1c:e2:e2:16:93:81:54:2b:8c:f2:9a:75:0f:68:a3:7a:b4:44:
bc:68:be:02:bb:10:79:51:38:3f:83:9c:eb:cc:a9:1c:fc:bd:
b3:39:00:15:55:bb:16:f7:75:22:b0:17:90:5b:3a:37:ab:b8:
9c:05:6f:c1:68:43:3d:0a:dd:9f:68:05:a0:5f:ff:e4:1f:9c:
a8:2a:56:b4:ed:27:ab:0c:90:ba:f8:07:7d:a3:59:41:91:32:
c5:e5:77:d4:36:a7:fe:aa:ef:92:4e:c8:0a:ab:40:02:2f:0a:
53:93:56:67:a1:67:da:65:26:f8:1c:8c:cf:dc:a6:e3:5c:16:
83:1e:39:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org