Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33352e31352e302f32342d3234203d3e2030.roa
File: 3139342e33352e31352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: DdEYarYchAqrSM+/tpj15+SLx2jhHt53i941Pco3LaQ=
Subject key identifier: 89:BB:82:6B:DB:2D:0E:D3:E9:56:A2:98:23:E2:72:FF:F2:93:1F:F3
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 71473475D133B87A9043B65CBA5CB4EF6947ADBD
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33352e31352e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:04 +0000
ROA not before: Mon 27 Mar 2023 08:23:04 +0000
ROA not after: Mon 25 Mar 2024 08:28:04 +0000
asID: 0
IP address blocks: 194.35.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:47:34:75:d1:33:b8:7a:90:43:b6:5c:ba:5c:b4:ef:69:47:ad:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:04 2023 GMT
Not After : Mar 25 08:28:04 2024 GMT
Subject: CN=89BB826BDB2D0ED3E956A29823E272FFF2931FF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:a3:db:5b:e6:3d:71:ea:fe:6f:8d:7f:ee:
c6:94:26:a3:fc:ee:74:b1:7a:ab:ac:ce:84:1e:5a:
28:dc:7b:23:dd:f1:bc:4a:53:31:2b:5b:6a:f7:f9:
70:01:96:cf:c3:fa:ca:a5:4a:81:f7:1d:54:ee:f7:
b1:86:95:83:3c:38:03:93:e5:42:67:7e:79:70:14:
29:87:4a:1a:6a:47:34:75:2f:b3:87:16:d6:0c:4d:
d7:3b:81:8f:0d:fc:c8:90:dc:c2:d6:b5:fd:f6:50:
f6:da:97:13:1f:9e:8c:0b:7d:e8:1e:fa:cc:dd:4b:
81:94:e9:1c:a1:b0:07:89:ae:00:d0:74:54:33:dd:
01:2c:57:19:2e:9b:82:dc:e0:d8:d7:63:f4:95:58:
9f:9b:bc:fc:97:32:e2:a7:d6:a0:36:97:f4:7d:0f:
fd:ea:e7:c4:04:c4:16:60:da:4f:1b:73:0e:fe:a6:
1f:13:f5:ff:17:84:1a:28:d6:08:3c:cc:a9:ca:a1:
66:2f:0a:c9:6b:2b:28:3f:36:3f:b2:ec:aa:5e:ca:
f1:73:83:e1:0a:29:d6:d8:52:04:90:7d:48:72:e1:
ba:27:6f:b2:c8:2d:04:eb:bd:8a:91:e3:6f:d3:9c:
67:f8:b9:3f:3e:b3:ef:30:15:f7:61:30:fa:84:e2:
77:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BB:82:6B:DB:2D:0E:D3:E9:56:A2:98:23:E2:72:FF:F2:93:1F:F3
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33352e31352e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.15.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:43:c4:34:75:4f:a0:de:71:01:df:a5:d0:16:a4:cf:b4:3d:
ee:cd:dc:ca:de:70:95:8b:72:e2:af:c8:1d:63:24:f6:96:3f:
48:83:2b:9e:bf:25:aa:15:ae:dd:3b:ad:b5:09:33:bc:31:56:
45:f9:22:99:9c:93:64:d3:b5:ea:cb:62:5c:67:12:18:a2:06:
f0:4b:25:8d:16:d5:bc:78:30:dd:19:0c:93:6c:1a:64:41:13:
e1:3a:54:f4:71:b9:8d:06:9f:34:40:d9:35:8e:b0:77:06:65:
f1:0b:ed:7e:b1:89:cf:0e:0f:6a:87:43:55:14:d9:4e:1b:35:
ba:12:96:35:3b:6f:78:78:2a:1a:3e:50:ed:38:88:8b:b4:4e:
5a:d5:db:e4:ff:83:54:f5:1d:29:a3:83:77:0e:dc:4d:bc:9d:
ee:3e:58:3c:86:62:cc:23:85:10:47:b3:c4:8f:01:1f:2b:52:
41:67:d2:f4:b9:40:75:26:95:56:cc:d8:6e:b8:e1:36:9b:58:
8b:5b:3b:d4:52:7a:71:83:23:57:6f:75:e2:65:26:91:13:c1:
0c:68:ac:f2:81:36:9c:ef:44:c3:fd:41:99:08:bd:62:c7:aa:
c4:15:4c:27:64:87:df:2d:72:4d:ae:e7:2b:d2:3a:1d:3e:d2:
a9:1d:aa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:27 2025 by rpki-client