Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/39312e3232392e3234342e302f32342d3234203d3e20313336373837.roa
File: 39312e3232392e3234342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 4C67rLPPa/Lz1q5JmecSx/4vs5Lg5BxgunL5ggBM/7Q=
Subject key identifier: AC:BA:7D:71:D6:E6:3C:C4:74:FB:49:C3:25:A7:BA:18:1D:15:06:1D
Certificate issuer: /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial: 793DDA82D27F597D9B8B350C0C387836229E673C
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/39312e3232392e3234342e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Mar 2023 08:27:46 +0000
ROA not before: Mon 27 Mar 2023 08:22:46 +0000
ROA not after: Mon 25 Mar 2024 08:27:46 +0000
asID: 136787
IP address blocks: 91.229.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:3d:da:82:d2:7f:59:7d:9b:8b:35:0c:0c:38:78:36:22:9e:67:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Validity
Not Before: Mar 27 08:22:46 2023 GMT
Not After : Mar 25 08:27:46 2024 GMT
Subject: CN=ACBA7D71D6E63CC474FB49C325A7BA181D15061D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:17:38:f3:d1:fa:de:b5:9b:b8:b4:fc:31:
07:af:2a:57:d0:af:f1:87:ec:b1:9d:4d:5d:55:f9:
64:4d:1d:fe:12:46:af:b4:43:4c:08:bb:51:36:0e:
d5:b2:f4:87:2a:f6:19:3f:46:9e:a0:03:c6:90:58:
5d:3c:c6:d7:c3:23:20:a6:4c:68:e5:c6:6e:fb:97:
22:71:e4:3b:02:00:ab:48:6d:97:7c:d4:f4:85:da:
26:f8:b4:70:28:21:71:cc:25:78:81:54:50:8f:16:
7d:5c:de:ab:d3:4f:20:9b:7a:fd:28:83:6e:b1:dd:
e4:79:58:51:1c:80:a5:48:aa:c2:24:cf:c9:23:6f:
3d:b9:df:fa:9e:c9:d0:d5:96:57:ca:a2:a0:ad:df:
4e:82:d7:c3:07:69:54:13:3d:0f:27:d5:fd:55:74:
2e:c8:1c:0a:9b:d0:8f:44:8c:7a:e6:ff:8d:94:71:
03:b1:59:5d:50:b2:70:f3:aa:0b:eb:15:74:2c:44:
50:7d:72:f4:14:ee:99:a4:da:51:4f:43:b1:12:88:
07:ec:b9:2b:7a:28:00:d7:84:d9:11:45:ce:57:46:
35:81:b6:c9:d0:d8:cd:51:16:09:c1:70:d6:2f:42:
7a:50:73:6e:d3:07:9b:e8:a0:d1:d9:29:5f:6e:27:
15:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BA:7D:71:D6:E6:3C:C4:74:FB:49:C3:25:A7:BA:18:1D:15:06:1D
X509v3 Authority Key Identifier:
keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/39312e3232392e3234342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.244.0/24
Signature Algorithm: sha256WithRSAEncryption
df:ad:5a:51:0e:2a:9a:21:51:f6:b8:44:d9:ba:31:3a:53:f3:
d6:07:47:ab:98:4a:34:ab:ab:f0:24:34:cb:b8:6c:a2:97:88:
16:28:81:74:35:1f:b6:c5:f6:f8:3f:80:b3:38:13:fa:a5:95:
e3:a2:31:5c:19:cb:5f:0b:66:dc:11:9d:1b:7f:44:4a:35:4a:
ec:dd:83:04:4e:83:54:75:82:64:1d:77:05:0c:aa:45:0b:0d:
b7:7d:f5:26:a6:51:00:f3:27:93:47:2a:05:bb:ec:c0:23:a7:
f1:07:5c:14:82:f5:af:ea:57:61:f2:2b:79:02:7b:7e:54:26:
68:b5:fe:52:94:cd:32:24:07:a2:4c:28:63:9b:2a:f5:61:1c:
56:d4:5f:21:5c:3b:76:4e:f0:c6:54:96:e8:0f:5f:e7:99:a2:
99:ef:97:d6:26:f7:46:17:4f:81:33:6a:27:c5:57:f5:94:9a:
0d:15:42:bf:0b:b7:6b:f7:f0:3e:37:8f:54:8d:31:c2:54:cb:
37:da:b3:bb:b2:c8:c0:93:0d:bf:24:83:50:87:0d:39:c6:0f:
ee:04:89:e6:e7:fd:0f:87:12:84:30:e9:c7:e8:41:3a:46:6a:
c0:d2:49:6b:10:45:69:4c:c8:9e:b6:4f:9a:ed:c0:fa:f5:e6:
1d:5d:6f:a3
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUeT3agtJ/WX2bizUMDDh4NiKeZzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGQyYTlhNDc1ZTdiOTdlMWJlZmNmY2U0NzNjNzJhMDhl
YjQ3MWMxYTAeFw0yMzAzMjcwODIyNDZaFw0yNDAzMjUwODI3NDZaMDMxMTAvBgNV
BAMTKEFDQkE3RDcxRDZFNjNDQzQ3NEZCNDlDMzI1QTdCQTE4MUQxNTA2MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Zhc489H63rWbuLT8MQevKlfQ
r/GH7LGdTV1V+WRNHf4SRq+0Q0wIu1E2DtWy9Icq9hk/Rp6gA8aQWF08xtfDIyCm
TGjlxm77lyJx5DsCAKtIbZd81PSF2ib4tHAoIXHMJXiBVFCPFn1c3qvTTyCbev0o
g26x3eR5WFEcgKVIqsIkz8kjbz253/qeydDVllfKoqCt306C18MHaVQTPQ8n1f1V
dC7IHAqb0I9EjHrm/42UcQOxWV1QsnDzqgvrFXQsRFB9cvQU7pmk2lFPQ7ESiAfs
uSt6KADXhNkRRc5XRjWBtsnQ2M1RFgnBcNYvQnpQc27TB5vooNHZKV9uJxVVAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUrLp9cdbmPMR0+0nDJae6GB0VBh0wHwYDVR0j
BBgwFoAU3SqaR157l+G+/Pzkc8cqCOtHHBowDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xMDgvREQyQTlBNDc1RTdCOTdFMUJFRkNGQ0U0NzNDNzJBMDhFQjQ3MUMx
QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNTcWFSMTU3bC1HLV9QemtjOGNx
Q090SEhCby5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzEwOC8zOTMxMmUzMjMyMzky
ZTMyMzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAFvl9DANBgkqhkiG9w0BAQsFAAOCAQEA361aUQ4qmiFR9rhE2boxOlPz
1gdHq5hKNKur8CQ0y7hsopeIFiiBdDUftsX2+D+AszgT+qWV46IxXBnLXwtm3BGd
G39ESjVK7N2DBE6DVHWCZB13BQyqRQsNt331JqZRAPMnk0cqBbvswCOn8QdcFIL1
r+pXYfIreQJ7flQmaLX+UpTNMiQHokwoY5sq9WEcVtRfIVw7dk7wxlSW6A9f55mi
me+X1ib3RhdPgTNqJ8VX9ZSaDRVCvwu3a/fwPjePVI0xwlTLN9qzu7LIwJMNvySD
UIcNOcYP7gSJ5uf9D4cShDDpx+hBOkZqwNJJaxBFaUzInrZPmu3A+vXmHV1vow==
-----END CERTIFICATE-----
Generated at Wed Sep 27 12:48:16 2023 by rpki-client on console-ams.rpki-client.org