Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e3131302e38362e302f32342d3234203d3e20313331313939.roa
File: 3139342e3131302e38362e302f32342d3234203d3e20313331313939.roa (raw, json)
Hash identifier: NPoTfUMZ9CEl3wjgLwU5CxllXi9ESH5Y4QuEFLh3wPk=
Subject key identifier: FD:7D:0C:E1:A7:E1:40:6C:FC:89:E9:26:5E:25:3A:29:EB:3A:F2:55
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 793DB204BF0C14B2B6B36A49891F33385B4FF276
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e3131302e38362e302f32342d3234203d3e20313331313939.roa
Signing time: Wed 07 Feb 2024 12:34:07 +0000
ROA not before: Wed 07 Feb 2024 12:29:07 +0000
ROA not after: Wed 05 Feb 2025 12:34:07 +0000
asID: 131199
IP address blocks: 194.110.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:3d:b2:04:bf:0c:14:b2:b6:b3:6a:49:89:1f:33:38:5b:4f:f2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 7 12:29:07 2024 GMT
Not After : Feb 5 12:34:07 2025 GMT
Subject: CN=FD7D0CE1A7E1406CFC89E9265E253A29EB3AF255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2d:dc:47:c2:35:48:51:66:7e:42:c7:09:a7:
1f:ac:6a:79:ca:21:b4:f3:95:a2:e2:64:26:0e:78:
77:d6:53:ca:1d:b7:2c:64:5f:9e:1f:3c:ac:b3:0f:
51:ca:79:c5:5c:13:b5:9f:b3:31:52:c8:07:88:e1:
47:31:4c:77:1c:8d:9d:c2:84:96:a9:ee:30:0f:76:
23:bc:75:47:ea:d7:91:02:15:b3:87:e5:81:35:3c:
f5:1a:c8:cc:d8:23:4f:9e:23:40:19:07:90:1c:2e:
0a:b4:e3:f1:03:18:1a:9f:8a:ad:af:f9:4f:c8:49:
6f:ad:8d:ce:dd:30:46:93:79:82:74:76:f9:64:63:
73:5e:22:fb:9c:c7:aa:6f:99:5a:a9:5e:2a:15:a5:
1d:35:6c:b6:15:21:b4:f8:1c:8c:dd:7b:fd:f5:f7:
d4:db:66:26:1b:50:83:63:3d:dc:f9:bb:97:a4:22:
80:3c:7f:53:4a:d5:c1:ee:30:40:9c:e6:58:7a:ee:
13:9b:c9:0a:18:42:70:5e:cc:5d:49:70:bc:db:55:
18:6f:3b:2e:73:7c:bc:f2:fd:63:6b:8b:23:eb:51:
32:d6:68:4d:b8:2d:44:69:db:59:81:34:52:d8:c0:
f2:eb:0b:3e:bb:20:b5:71:45:27:09:41:50:2f:5f:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7D:0C:E1:A7:E1:40:6C:FC:89:E9:26:5E:25:3A:29:EB:3A:F2:55
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e3131302e38362e302f32342d3234203d3e20313331313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.86.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e0:37:98:84:03:cf:8f:9c:b3:de:83:d4:13:22:bb:ac:60:
e5:7b:a0:13:b7:03:b4:36:45:f7:44:39:b0:4c:c1:2c:50:9b:
a2:20:fc:4b:ce:5b:c2:59:06:39:e0:a9:e4:80:90:cc:93:c0:
d2:d0:d7:bb:25:45:7d:c6:18:23:d8:85:ce:d5:af:18:0f:3c:
aa:4f:e0:8b:ce:9b:0c:58:f0:60:3e:60:65:54:07:ca:1f:49:
87:8c:83:aa:1e:f1:fb:39:b4:32:a7:10:d4:85:61:fd:5e:0d:
75:18:fc:7b:ce:78:a6:dc:f3:4e:7f:bf:89:88:f2:62:f8:02:
0e:03:55:3b:ba:80:73:71:e5:34:0d:fc:6f:bb:ca:d3:41:d8:
8c:ea:35:bd:e3:7e:f2:ca:e3:ef:49:6a:cc:40:af:05:70:37:
63:93:1a:89:74:8c:0e:8f:b2:8a:eb:43:e4:1b:0d:82:9a:55:
90:8d:21:a2:5f:ec:10:9f:ea:fa:9f:ff:1c:4e:77:f3:de:5a:
89:bb:1a:8a:07:8b:95:72:ae:16:8e:88:c8:5f:6f:46:d0:26:
7f:e8:91:9a:a0:11:50:74:1b:1c:de:97:a1:db:f6:53:1f:2c:
6e:8e:7e:4b:27:a7:fc:46:45:63:6c:23:6c:5c:1c:4e:65:29:
cc:f0:2d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:52 2025 by rpki-client