Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3134392e36322e33382e302f32342d3234203d3e20313336373837.roa
File: 3134392e36322e33382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: P7NwNXhREH3sYzgyv5zzL7MObfzQZos6X/O/zlU7jks=
Subject key identifier: 58:6F:7F:E1:DB:F6:2A:31:43:AB:9E:DE:7D:FD:96:2B:5E:E4:93:50
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 77B6FA959297B39CA536CA345183C4E9916528EC
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3134392e36322e33382e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:52:54 +0000
ROA not before: Mon 26 Feb 2024 08:47:54 +0000
ROA not after: Mon 24 Feb 2025 08:52:54 +0000
asID: 136787
IP address blocks: 149.62.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:b6:fa:95:92:97:b3:9c:a5:36:ca:34:51:83:c4:e9:91:65:28:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 26 08:47:54 2024 GMT
Not After : Feb 24 08:52:54 2025 GMT
Subject: CN=586F7FE1DBF62A3143AB9EDE7DFD962B5EE49350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:be:1a:e8:91:e8:0c:29:2f:0d:29:7f:de:
2c:bd:a7:df:65:72:da:c4:a9:a7:0e:03:f4:7a:0e:
a2:c4:65:13:b8:4d:ef:9e:ba:19:b7:76:e9:92:7a:
11:fc:ee:b1:ad:b1:3c:fb:71:9f:52:82:7e:35:16:
5c:2c:38:3a:33:24:b8:a9:60:90:0e:2b:b4:86:1a:
78:0e:63:8d:69:18:82:7c:bd:82:04:7c:f5:f8:ed:
60:8b:75:63:6a:56:7d:61:80:1c:0f:4f:66:9d:b7:
cf:7f:ff:31:d4:24:81:7c:30:69:f5:e5:c7:85:f7:
77:c0:d0:71:41:d5:ba:3d:d8:ba:f5:8b:e7:8d:f5:
90:31:a6:5f:b2:5e:73:e1:45:6f:8f:35:31:15:99:
30:db:6d:27:36:36:2f:0b:98:a1:9d:f4:23:8f:df:
e5:fa:d5:49:d5:70:1f:63:0b:93:6c:fa:ba:1b:a3:
5d:eb:eb:32:5d:45:0a:43:00:0a:2e:39:0a:96:e7:
67:6c:a8:2d:fe:d7:cb:ff:9f:e9:bc:52:8e:56:2e:
e6:da:3b:fe:74:e9:30:02:b4:a4:8f:64:80:c3:fb:
ca:e4:40:3a:03:39:e3:f5:b5:ad:8a:33:63:18:f5:
2f:3c:92:6d:0a:84:ea:e5:db:86:27:17:0f:6e:6c:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6F:7F:E1:DB:F6:2A:31:43:AB:9E:DE:7D:FD:96:2B:5E:E4:93:50
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3134392e36322e33382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.38.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:10:3c:d9:b7:20:5f:bb:d8:0f:62:03:f2:2f:b0:78:91:0c:
de:46:c0:89:2e:9e:77:7f:a0:22:59:02:9c:eb:1a:00:6e:cd:
02:99:8d:d7:f7:a5:85:8a:52:c5:03:16:9c:dd:09:6e:72:a6:
82:69:b4:d1:07:2d:82:0b:7c:9c:4b:10:a0:64:fb:c8:00:7c:
6e:51:d0:5e:c2:3d:c2:e2:15:3b:c5:ba:a3:d0:b2:33:a8:1a:
85:0c:e3:36:68:02:42:c6:ef:71:b9:f1:69:40:ea:c5:99:90:
32:1c:5e:3e:ab:a2:a6:03:e5:9f:9b:94:39:1c:ba:04:43:7c:
04:80:d2:f5:30:b1:4e:d7:61:07:90:04:ef:d2:92:7f:4f:5f:
52:78:24:ce:54:42:05:e3:b3:1e:4e:ce:1a:4e:d0:76:3c:76:
06:62:20:73:dd:84:98:37:75:78:f5:df:0a:5b:5f:46:03:47:
a9:d6:25:c6:ff:01:7e:9b:12:80:78:e9:11:89:65:2f:aa:54:
9c:b0:bf:08:17:7f:67:2a:19:03:63:1f:f9:d3:0e:fa:0c:21:
57:73:07:b6:c9:0a:04:55:f8:c4:e9:48:d6:06:88:81:37:31:
25:d9:7c:a7:f4:53:63:4d:24:2a:2b:c0:93:b0:f7:fb:c7:56:
3a:c4:75:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:49:07 2025 by rpki-client