Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/3139332e35372e3134342e302f32342d3234203d3e20323037383431.roa
File: 3139332e35372e3134342e302f32342d3234203d3e20323037383431.roa (raw, json)
Hash identifier: bJceU13Y1X6O+9PUIn9VXVs8kNGBZ0W9+Ysrc+16dPs=
Subject key identifier: F2:94:47:7E:9D:6D:0F:A5:D6:3C:CB:6F:D3:69:FF:C8:95:70:DF:1B
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 73D75346D7E0B5A6E52DE673734B74A555A41536
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/3139332e35372e3134342e302f32342d3234203d3e20323037383431.roa
Signing time: Tue 10 Oct 2023 15:16:41 +0000
ROA not before: Tue 10 Oct 2023 15:11:41 +0000
ROA not after: Tue 08 Oct 2024 15:16:41 +0000
asID: 207841
IP address blocks: 193.57.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d7:53:46:d7:e0:b5:a6:e5:2d:e6:73:73:4b:74:a5:55:a4:15:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Oct 10 15:11:41 2023 GMT
Not After : Oct 8 15:16:41 2024 GMT
Subject: CN=F294477E9D6D0FA5D63CCB6FD369FFC89570DF1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a1:da:0d:4c:0e:15:b0:cf:9d:e5:1d:a3:1e:
dc:ca:85:97:c4:76:a6:97:42:50:19:e7:9c:0c:f8:
ae:52:77:ee:05:33:c1:17:99:f8:34:0b:d9:d1:ae:
66:0f:07:5e:22:26:89:db:f7:5f:83:c0:62:8c:b5:
66:ab:a0:94:55:b3:9d:69:d0:6f:55:d0:3c:01:6a:
47:1a:12:a2:42:1d:7e:be:0b:7f:51:63:1c:47:3a:
44:a3:7a:71:be:e3:94:5f:36:5e:9e:2a:73:d3:24:
e2:b7:d1:35:46:05:cf:88:e9:ce:97:23:f6:3e:fe:
85:04:6c:08:46:2d:90:ce:64:84:65:e9:98:af:f8:
70:37:f2:4a:87:14:41:77:80:32:a8:50:4a:96:c1:
4d:4a:ef:97:0d:aa:af:e5:f1:d3:cb:64:e1:e5:b0:
e9:88:39:ed:97:f5:b8:11:d5:61:eb:5c:0f:ea:b3:
6e:67:f7:02:3d:1d:fd:8a:de:f8:84:0c:ac:19:54:
bb:95:ea:0f:ca:34:99:87:b4:fe:90:34:8c:ee:a7:
51:a5:2b:c2:d3:22:29:32:e1:65:7b:1c:d1:e9:2e:
78:52:d6:0d:68:10:c8:d9:7d:b1:d6:2f:56:19:16:
37:4c:7a:27:97:7c:8b:36:2c:b8:90:0d:b9:82:a3:
c5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:94:47:7E:9D:6D:0F:A5:D6:3C:CB:6F:D3:69:FF:C8:95:70:DF:1B
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/3139332e35372e3134342e302f32342d3234203d3e20323037383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.144.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:d3:5f:3b:49:07:44:d6:16:fe:3e:71:d2:d6:1e:4d:e5:b0:
ca:67:d4:94:10:fb:02:8c:6c:ec:93:0c:92:b8:ac:2e:31:4d:
c4:93:a1:b3:5d:95:b3:bb:76:62:b7:d3:01:1a:47:87:19:09:
20:27:e3:b0:85:ef:0b:3e:75:87:b8:aa:6d:e2:27:ac:46:bb:
2e:1f:6b:26:db:e5:0c:9a:51:d0:f0:a0:2d:e5:e0:a4:22:76:
0d:c4:13:9a:36:94:78:50:f8:86:f3:1e:11:ca:3e:e1:1e:82:
2d:6a:54:f5:13:17:37:ec:fe:4a:e3:b1:40:1e:8d:e5:e8:c0:
d0:7c:9e:a0:c8:1c:7f:1c:20:9b:dc:15:68:e2:32:0d:b4:59:
fd:f5:bc:31:b3:e2:46:4c:fa:53:9d:2f:2a:c8:37:72:dd:98:
24:47:6b:4a:dd:70:42:16:18:6c:a0:0e:65:21:fb:0c:74:a5:
f9:6e:e1:26:39:ba:d5:8b:29:a4:41:cb:16:8d:d9:03:d3:75:
ec:1d:4c:70:5c:d6:48:8f:97:64:29:0a:c6:c3:0b:0b:1a:32:
23:fe:e1:01:57:6e:ee:ea:82:1b:dd:6d:39:06:a0:ab:a8:20:
7e:3e:0c:ad:d1:22:c9:47:45:c9:a4:6e:b5:6b:d1:78:e8:60:
bb:c8:95:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:51:35 2025 by rpki-client