Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39382e302f32332d3234203d3e2030.roa
File: 3139332e34322e39382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: BABhNxndcSNqzikbNL+bCqqUV/yE6tubr7wEscJco1U=
Subject key identifier: 52:3A:27:CF:76:6D:A2:63:B9:32:E2:38:7C:D4:56:EA:47:DB:A2:51
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 375F0597B5C7C1782F9CE709CCEA1039289754EF
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39382e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:16 +0000
ROA not before: Mon 27 Mar 2023 08:23:16 +0000
ROA not after: Mon 25 Mar 2024 08:28:16 +0000
asID: 0
IP address blocks: 193.42.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:5f:05:97:b5:c7:c1:78:2f:9c:e7:09:cc:ea:10:39:28:97:54:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:16 2023 GMT
Not After : Mar 25 08:28:16 2024 GMT
Subject: CN=523A27CF766DA263B932E2387CD456EA47DBA251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:c2:ad:4c:99:32:41:90:a1:cf:77:ab:1e:
ad:0e:3c:78:5e:f4:80:a3:5a:5d:ed:5b:60:3e:67:
5a:3a:29:0e:76:de:59:77:a3:89:2e:89:a7:64:bb:
20:cf:e4:5c:ba:3d:ac:52:67:52:17:3a:ea:53:f6:
e0:ef:28:55:1f:84:14:10:7e:d8:2e:d5:a9:56:81:
ee:0a:11:f2:4d:c7:4d:54:6a:ae:fe:33:08:29:7e:
ac:21:de:a9:e9:d2:46:07:be:90:18:b2:53:8e:5b:
b9:64:17:57:7e:29:9c:1c:e5:ac:b0:87:9a:49:cd:
d0:a0:64:da:bc:a5:ae:40:ed:23:85:b3:38:d9:ca:
c1:e1:96:f8:57:1c:aa:5d:3c:03:68:39:92:49:9d:
af:29:64:3b:81:d6:64:54:5e:4c:ba:51:78:2b:aa:
0e:d5:74:9c:0a:d1:26:fc:a5:6c:b4:a2:68:b4:b3:
dd:2f:ff:c8:57:b4:86:3c:05:ac:f9:26:22:3e:02:
a4:75:58:2b:81:b1:1b:a6:03:d9:08:d9:81:4a:a8:
37:6c:8c:ec:13:e1:bb:83:c5:c4:bc:01:ae:d0:61:
57:64:07:bd:bc:f8:7b:78:fb:dc:c1:a5:a0:a8:c1:
80:40:83:6f:07:b9:e4:79:e2:e9:3c:e1:a1:ed:ba:
06:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3A:27:CF:76:6D:A2:63:B9:32:E2:38:7C:D4:56:EA:47:DB:A2:51
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e34322e39382e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.98.0/23
Signature Algorithm: sha256WithRSAEncryption
29:fe:a5:a2:57:04:e0:f6:b9:ee:28:9f:5e:0a:61:cb:ac:ea:
c1:1b:50:1b:a4:02:d1:7b:75:cd:33:27:e4:e1:dd:88:80:0e:
a3:e9:75:63:41:42:51:eb:b0:4d:7e:5c:43:ac:a8:d5:30:36:
9a:c2:50:7f:c8:1e:38:ce:ae:06:fb:dc:5c:5f:35:8f:f6:30:
57:ae:7e:59:57:17:cb:cb:b4:54:35:86:e4:e2:c5:f0:fd:f9:
77:a3:04:f3:7c:c7:df:03:72:85:b0:71:d2:0d:89:6b:10:20:
96:82:eb:b6:4b:43:d7:ba:ed:0d:69:12:15:3f:12:c3:fb:fb:
4c:19:df:a0:b6:c9:f5:90:5d:24:b4:dc:8e:b5:d2:6f:f0:b2:
d5:1e:12:f5:b8:f1:2e:4a:e4:ed:dd:75:63:6a:3c:cf:c2:a6:
8a:d8:9d:77:f7:d6:12:ff:f8:46:c9:9d:bf:69:c7:72:e6:5f:
05:60:94:9c:9a:e2:fb:8b:d4:d3:2d:25:e1:79:cb:1f:e9:81:
6d:da:18:b1:a7:d3:e4:1a:4f:74:f6:6a:96:ca:ed:6d:b1:d9:
4c:da:b2:fa:4f:5b:64:38:bf:d4:a0:40:fe:7c:65:c0:25:b8:
a0:7a:b4:dc:5f:9d:78:33:85:7b:b3:7e:0c:28:5b:c9:c9:41:
fe:c6:ed:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:57:51 2025 by rpki-client