Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/39312e3232392e3234352e302f32342d3332203d3e203531313637.roa
File: 39312e3232392e3234352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: UydxAZhwSdOW+i9ckdbKjUYkZpSuFMcCSDr23gjNI6E=
Subject key identifier: 60:89:0F:D6:E3:7C:7C:7A:B2:03:F0:E7:1F:A5:55:46:53:6A:D1:A6
Certificate issuer: /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial: 15402198DAACFF65BF91C07978DD7EA45102EC56
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/39312e3232392e3234352e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:46 +0000
ROA not before: Mon 27 Mar 2023 08:22:46 +0000
ROA not after: Mon 25 Mar 2024 08:27:46 +0000
asID: 51167
IP address blocks: 91.229.245.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:40:21:98:da:ac:ff:65:bf:91:c0:79:78:dd:7e:a4:51:02:ec:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Validity
Not Before: Mar 27 08:22:46 2023 GMT
Not After : Mar 25 08:27:46 2024 GMT
Subject: CN=60890FD6E37C7C7AB203F0E71FA55546536AD1A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:cc:7f:49:e8:2c:51:38:dc:39:8e:2c:aa:
74:0a:b5:0b:7b:67:6f:cd:c9:33:8d:0b:1f:82:c0:
29:a3:a4:41:13:9f:8a:0f:db:09:6d:65:b4:13:a6:
c5:98:75:71:b9:c6:9d:81:49:26:79:fe:5f:4a:23:
1c:3e:f5:2a:bb:a1:4f:96:5d:d9:41:22:37:5b:29:
ac:ce:95:cc:0a:74:73:b6:b4:69:3d:a0:52:47:10:
1b:ef:ab:46:05:d3:06:af:1a:f8:71:d9:fa:c3:42:
f6:e9:bf:d6:3f:3c:2e:15:57:ba:c2:87:2b:81:c1:
40:8b:95:33:bd:df:00:03:63:ba:f9:dd:70:06:73:
c1:4f:e4:7b:68:b6:b8:78:4d:39:3a:3d:53:bc:92:
4a:75:47:68:a0:9e:af:eb:0e:f2:24:5c:ae:ca:47:
94:89:07:43:3f:26:e6:65:29:4c:b6:ff:05:68:ac:
a6:60:fc:1c:7b:7e:4b:78:b9:b2:0e:44:36:b0:4f:
ff:a2:d1:a8:e2:0d:a8:96:05:da:ab:63:c5:e8:cd:
01:7f:54:db:2f:a7:8e:d7:43:72:11:e5:b1:34:bd:
5b:da:77:01:e6:c7:f0:6b:ac:1c:3c:15:51:1e:2e:
b3:be:72:ce:5f:97:46:ea:01:f7:c2:dd:1b:1c:1c:
ac:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:89:0F:D6:E3:7C:7C:7A:B2:03:F0:E7:1F:A5:55:46:53:6A:D1:A6
X509v3 Authority Key Identifier:
keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/39312e3232392e3234352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.245.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:7a:c7:a8:7e:70:94:73:70:48:6f:1b:f2:52:3e:a4:0a:23:
b6:bd:e1:8a:8f:5a:12:7d:e7:88:97:0a:88:c7:a5:86:ab:c5:
db:05:e7:28:7e:7f:d1:24:cf:dd:15:52:ad:d2:bd:4e:a6:14:
9f:5e:4b:e8:be:9b:90:ec:75:3d:67:93:85:46:c1:a6:bb:86:
24:aa:40:51:89:82:f3:68:2b:76:1e:c8:37:4d:2e:a1:03:13:
30:1a:1d:a4:4d:5d:fe:14:89:64:fc:28:2e:54:ab:f3:ef:74:
eb:d1:8f:6c:44:57:ba:9a:cd:84:56:9a:13:24:f8:f4:35:38:
05:51:f2:d9:9c:b1:75:e1:45:17:54:64:43:8c:dd:dd:65:ec:
88:63:f7:7a:98:13:81:a2:3e:65:37:aa:e1:44:4c:89:33:36:
aa:49:d5:22:b2:b9:8f:38:d3:4b:ba:d4:0f:e3:b9:64:16:8f:
24:d1:b9:74:09:a2:71:cb:0c:48:1c:2a:32:58:79:e2:9a:7b:
b1:24:f3:78:3b:35:00:47:72:df:68:d3:8a:2b:44:39:f6:ab:
6d:25:75:2d:96:e8:78:b5:73:4f:ef:03:97:41:5a:11:40:91:
3c:fb:4f:9a:36:ac:59:d7:5e:3e:62:a0:dc:c3:cc:5f:17:23:
6f:a6:7a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 12:32:54 2023 by rpki-client on console-fra.rpki-client.org