Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/39322e3131342e352e302f32342d3234203d3e203631333137.roa
File: 39322e3131342e352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: XjzNvQe1ST4BNob07DXU5feFQdi2288/KULAaYLwSw0=
Subject key identifier: AD:64:AF:23:91:61:66:3D:99:56:22:32:2B:69:C8:B7:F3:D8:06:E7
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 6AF9CCD4140317511AEDFCFF441F241F5C3335DF
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/39322e3131342e352e302f32342d3234203d3e203631333137.roa
Signing time: Sat 29 Apr 2023 09:35:45 +0000
ROA not before: Sat 29 Apr 2023 09:30:45 +0000
ROA not after: Sat 27 Apr 2024 09:35:45 +0000
asID: 61317
IP address blocks: 92.114.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f9:cc:d4:14:03:17:51:1a:ed:fc:ff:44:1f:24:1f:5c:33:35:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:30:45 2023 GMT
Not After : Apr 27 09:35:45 2024 GMT
Subject: CN=AD64AF239161663D995622322B69C8B7F3D806E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:9c:b8:2d:3a:14:d4:c8:80:9f:46:e8:4f:
56:ab:eb:00:c4:6c:c8:83:fb:f0:c0:69:35:f1:16:
e7:7b:49:e5:46:68:5a:e1:5c:a9:5b:df:d3:25:d0:
be:4d:33:df:69:67:45:d2:65:99:4e:35:88:a5:e4:
f1:e7:8f:2b:2d:cb:4b:65:08:e5:13:b1:77:5f:4b:
c5:04:54:9c:f4:04:8e:22:41:a4:be:0d:82:f5:c2:
64:7c:0e:e7:ee:6a:43:63:93:0e:11:c1:9c:a2:c9:
fd:ee:75:16:c3:4d:48:f9:87:07:b7:79:e9:d9:84:
69:3f:f9:c9:ec:b0:fe:40:31:17:15:96:3c:6e:3d:
89:f0:68:c5:a9:f8:f7:aa:ce:b1:7a:f0:2c:03:51:
0d:e3:c7:df:bb:2e:e9:fe:48:86:d2:72:48:84:7d:
9e:a9:96:de:7f:cb:df:41:96:24:f2:e9:dc:a5:c5:
53:f6:b8:d8:f0:13:7e:bb:a4:95:53:24:8c:38:2f:
b7:4b:02:03:d2:f8:e9:67:79:db:5c:36:36:38:91:
2c:6f:e5:ce:5c:60:43:a0:9b:83:74:3c:b3:a2:9f:
51:c9:38:3f:a5:16:19:31:5f:29:1d:80:4c:fa:aa:
6f:9f:d3:22:17:ea:a5:ec:63:34:f2:9c:49:46:39:
75:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:64:AF:23:91:61:66:3D:99:56:22:32:2B:69:C8:B7:F3:D8:06:E7
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/39322e3131342e352e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.5.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:e9:d2:05:83:46:77:e3:e5:e8:8f:08:9a:e6:76:6b:12:53:
cd:3c:82:e3:7e:a8:54:5f:9c:de:c5:a8:b3:8f:8a:db:06:42:
ca:7f:9c:ed:21:93:70:ca:a2:3d:d8:0c:33:1f:fd:51:9f:0c:
f8:a4:01:17:92:2e:15:05:91:1b:a4:60:bd:09:97:64:f4:2e:
a1:2e:d3:16:22:3c:db:62:67:4b:9b:a5:20:b0:bf:4c:97:d4:
d0:b7:31:43:e4:17:42:8b:23:00:3d:c1:fa:04:ca:73:b5:28:
10:a2:67:2f:50:6e:d9:67:41:f9:59:2f:a0:c4:b1:85:3f:f1:
6a:5b:35:69:40:be:ce:ba:d9:b2:2e:8f:c7:05:5d:2c:3c:de:
2a:9c:7a:f2:71:6f:ce:e5:48:ab:ea:02:9f:48:e9:4f:60:f8:
ca:10:2b:d9:a9:64:03:d8:39:46:a9:88:8d:11:01:27:f6:22:
d1:91:b7:be:8f:a6:a4:88:9e:a9:d9:f2:c9:7c:dc:a2:a2:56:
c4:fe:bc:04:25:e3:86:f6:a6:84:a4:d0:b8:bb:22:ba:f3:c3:
63:91:af:c2:6d:7d:a5:e9:f8:13:2c:50:b9:ca:1f:80:d8:e5:
dd:7f:3f:56:84:92:e0:0c:1d:68:f8:43:4e:8b:97:b0:fc:2d:
52:59:27:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org