Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39372e302f32342d3234203d3e20323132323938.roa
File: 3139332e34322e39372e302f32342d3234203d3e20323132323938.roa (raw, json)
Hash identifier: VnCHDMqx8h+9odVmmAZsxYZ/YI8Q1BxobyjM5zoAeco=
Subject key identifier: E5:04:DC:64:A1:BB:EC:AE:B7:7D:61:78:B1:88:C8:71:5A:18:97:5C
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 26D00A4FB730C40928BDB55210789CBE93D5B45C
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39372e302f32342d3234203d3e20323132323938.roa
Signing time: Mon 27 Mar 2023 08:28:17 +0000
ROA not before: Mon 27 Mar 2023 08:23:17 +0000
ROA not after: Mon 25 Mar 2024 08:28:17 +0000
asID: 212298
IP address blocks: 193.42.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:d0:0a:4f:b7:30:c4:09:28:bd:b5:52:10:78:9c:be:93:d5:b4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:17 2023 GMT
Not After : Mar 25 08:28:17 2024 GMT
Subject: CN=E504DC64A1BBECAEB77D6178B188C8715A18975C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e9:50:9b:a5:a7:f7:f9:f6:37:a7:fb:1f:89:
3b:73:dd:b4:15:e8:17:2e:03:e8:ff:eb:bb:e2:62:
91:da:a5:4e:db:87:2b:47:ee:9b:bc:9f:7a:76:f6:
8a:c4:a0:8a:8a:97:5d:eb:6f:a3:70:bf:67:33:4c:
30:8b:f0:e0:30:96:48:04:f0:41:5f:7b:65:d8:33:
48:e1:0d:41:ee:86:5f:3e:d6:ee:eb:1c:b8:74:0f:
cb:06:18:b6:0d:a8:a2:92:e5:82:29:d0:9e:85:d8:
b7:cc:67:16:5f:3e:1b:2f:13:50:c6:90:91:04:19:
ba:8f:41:46:00:f8:a3:3d:4b:33:f5:06:c1:de:b3:
1d:e4:c0:99:2d:59:d8:54:3a:33:e9:fa:2a:22:4c:
a6:7d:95:ca:e0:e2:4e:61:c6:ee:60:38:a8:5b:57:
d6:d5:c5:61:5c:8f:e3:d0:47:02:48:38:4a:74:47:
2e:6b:49:3a:ce:da:c4:8f:21:f7:3c:a7:c7:40:52:
ea:ba:b2:69:b3:83:15:72:4f:e9:f5:81:83:0a:3b:
b7:e0:76:cd:e5:84:fb:9b:bd:72:9e:88:6b:93:08:
6a:dc:1a:47:17:e0:fa:1a:40:32:68:89:ac:a7:b9:
a3:78:8b:b4:eb:29:f7:d5:3a:2b:0e:2b:91:41:95:
a1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:04:DC:64:A1:BB:EC:AE:B7:7D:61:78:B1:88:C8:71:5A:18:97:5C
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39372e302f32342d3234203d3e20323132323938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.97.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c5:e6:2b:21:75:0b:09:29:91:69:37:fe:62:a4:7a:77:3b:
75:08:da:88:d9:9d:6b:0f:08:13:c7:d6:58:f3:37:a4:a9:bb:
28:d9:ef:1b:cf:50:9a:6d:5f:14:09:f8:47:a0:57:63:ee:99:
bb:10:f9:74:b5:d2:73:ca:af:e5:30:38:f5:89:3e:0b:32:33:
e9:1e:89:0a:9a:e7:b0:0e:b5:67:35:b3:d1:38:0b:be:a8:62:
d1:67:73:8d:ff:27:76:c6:9b:c0:d0:0a:14:db:5d:8a:ae:c1:
f3:a6:69:ab:de:a1:1a:d7:c1:1f:5e:4b:58:58:0f:89:64:86:
b8:19:ca:26:7e:bd:21:4d:12:a3:f9:06:26:89:06:27:8e:09:
94:bd:56:74:e8:5f:0e:53:90:d1:db:13:c8:b3:69:24:dc:e2:
69:af:1b:5c:1d:d2:03:01:de:f1:fb:31:45:c7:ff:8f:85:f9:
17:3f:71:34:03:15:a1:39:97:c6:ff:5b:63:98:4f:f3:91:34:
ff:aa:e7:43:2e:d3:48:6f:f2:71:0a:e8:6c:7e:b0:5a:b8:14:
20:d4:5b:d2:e8:48:93:e4:6c:fd:26:d9:07:5a:5b:d9:7c:8d:
74:ef:09:1d:65:33:2d:42:a1:05:67:42:33:14:98:05:73:87:
6a:79:14:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:54 2025 by rpki-client