Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e352e302f32342d3234203d3e203631333137.roa
File: 39322e3131342e352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: xaHjixp8lH5Sy/rciOJCUUptTg7sKnd3y05l7Xcmf1k=
Subject key identifier: 6F:12:E8:AA:19:38:20:DF:CF:CC:BE:AF:6B:A5:E6:5C:32:BA:D0:50
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 6346158971D91C80F774EE6B19CF65AD5074F7B5
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e352e302f32342d3234203d3e203631333137.roa
Signing time: Sun 23 Mar 2025 16:53:58 +0000
ROA not before: Sun 23 Mar 2025 16:48:58 +0000
ROA not after: Sun 22 Mar 2026 16:53:58 +0000
asID: 61317
IP address blocks: 92.114.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:46:15:89:71:d9:1c:80:f7:74:ee:6b:19:cf:65:ad:50:74:f7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Mar 23 16:48:58 2025 GMT
Not After : Mar 22 16:53:58 2026 GMT
Subject: CN=6F12E8AA193820DFCFCCBEAF6BA5E65C32BAD050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:05:9b:84:40:7d:e9:99:37:36:a7:e3:3f:
92:92:68:3a:83:91:e9:73:8a:1d:e0:aa:9e:b0:43:
be:16:a9:de:98:a4:a0:fd:84:8f:0d:3c:6b:fb:e2:
37:82:19:8d:6e:dc:5c:af:32:f1:7c:f5:38:0c:97:
cc:47:55:c7:46:ed:3f:c1:b3:25:b2:18:1a:f3:0e:
88:1f:46:fd:51:78:f6:37:03:fd:cc:fd:2c:d3:b3:
da:c1:89:e7:22:93:0d:3f:15:54:e7:e7:98:e8:fe:
4a:be:d8:03:05:72:0d:d6:ad:f9:0c:e8:9a:e8:be:
ed:e3:e5:a9:bb:8e:90:18:47:5e:bf:fb:bd:b1:80:
b2:ed:3e:c8:65:d8:b0:84:4c:b1:6a:e3:17:14:10:
22:56:69:5d:62:ed:c8:e8:b1:9c:44:1d:88:1d:7c:
27:dc:00:d8:dd:55:50:48:c4:bd:5d:f3:fa:7b:c2:
71:fc:c2:9f:26:3d:ba:91:93:08:69:40:25:b2:3a:
41:50:14:10:d3:a8:33:fd:93:09:30:ac:dc:02:3e:
96:be:eb:94:fc:c8:a7:43:7c:c2:29:9d:75:cb:11:
73:aa:53:33:e6:43:63:ba:4b:7c:44:a5:ae:e0:1d:
3e:82:aa:c6:3f:e3:7f:ed:62:29:78:2d:80:a3:53:
72:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:12:E8:AA:19:38:20:DF:CF:CC:BE:AF:6B:A5:E6:5C:32:BA:D0:50
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/39322e3131342e352e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.5.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:e0:2a:8d:08:48:d3:70:b3:c0:49:4f:c8:66:94:66:fb:ee:
b6:5a:1d:e4:3e:b0:0e:4f:99:46:49:7f:06:eb:9f:ac:a7:48:
90:9a:02:65:3a:91:bc:23:1d:f5:91:e5:d5:04:3a:14:a3:20:
aa:18:48:36:c5:4c:15:fb:e6:46:fc:96:11:b2:f3:59:30:88:
9c:5e:0b:65:36:a9:35:4c:32:68:15:af:de:74:d9:1f:cf:45:
91:01:ee:f9:0d:cb:46:b1:1a:9c:7e:7b:89:58:88:69:2e:dd:
2d:7f:90:bb:98:4b:77:33:5e:b2:4d:3f:f4:43:7a:18:3c:8f:
be:2d:aa:ef:0c:70:84:53:fe:2e:b5:85:66:ff:9d:fe:87:5e:
a0:d0:a6:23:95:f3:73:d6:b9:71:c7:44:8b:d3:c1:3d:12:64:
a6:20:b1:83:41:ee:a1:e4:ce:aa:7b:5a:a3:3b:40:35:0c:7e:
72:34:01:9e:19:2e:38:31:7c:db:22:4f:c1:1b:4d:4c:7b:50:
c1:08:bd:36:20:05:2c:7b:ab:77:64:1d:8f:a0:9a:b6:58:e4:
64:fb:40:9c:2b:df:c1:91:84:8e:41:d0:3e:10:bd:34:e3:0d:
3c:53:3d:bc:ef:15:2a:bd:1b:a3:cf:e4:08:5e:c5:1c:ef:ef:
48:ad:af:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:57 2025 by rpki-client