Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/38352e3230392e39322e302f32332d3233203d3e203437353833.roa
File: 38352e3230392e39322e302f32332d3233203d3e203437353833.roa (raw, json)
Hash identifier: uY6BAGGpOKOma6bYk8XhrqAmWue0Serda7/E3os+J1g=
Subject key identifier: CE:4B:B2:CF:CD:C1:DB:72:F0:76:B1:3D:54:CD:39:81:17:31:19:31
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 422D990C3D69B5E092220BF09C7E3C8F424F30EB
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/38352e3230392e39322e302f32332d3233203d3e203437353833.roa
Signing time: Thu 06 Jun 2024 13:53:39 +0000
ROA not before: Thu 06 Jun 2024 13:48:39 +0000
ROA not after: Thu 05 Jun 2025 13:53:39 +0000
asID: 47583
IP address blocks: 85.209.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2d:99:0c:3d:69:b5:e0:92:22:0b:f0:9c:7e:3c:8f:42:4f:30:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Jun 6 13:48:39 2024 GMT
Not After : Jun 5 13:53:39 2025 GMT
Subject: CN=CE4BB2CFCDC1DB72F076B13D54CD398117311931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5c:93:c2:bb:33:1f:2a:e8:54:ef:cc:14:8a:
35:8d:3f:7a:86:a0:5f:66:f1:8f:b3:a3:9e:3f:ff:
c7:69:bf:a6:93:de:1a:95:24:9a:bf:ae:4f:7a:ad:
98:2b:7c:31:cd:40:5a:be:05:48:4e:0f:c9:65:51:
27:3c:7c:f6:ae:ae:6e:04:87:96:8b:d1:8f:d9:4f:
78:c9:d2:61:b5:68:ee:c9:6d:86:29:86:6f:55:04:
f6:70:aa:00:51:5c:36:a2:69:c1:e4:0f:89:58:a6:
2b:da:3c:3c:8b:71:c6:c7:d1:c9:55:27:ec:f4:39:
e4:92:7f:f1:48:36:6c:d8:28:e1:43:b3:ad:75:56:
20:78:c4:f4:09:bf:9e:3e:98:a1:5e:25:99:6d:0e:
56:26:51:e0:a5:1b:45:5d:c9:6f:8f:b3:8b:40:90:
9f:76:d5:a5:40:da:2b:e8:ba:52:ac:5e:5d:25:1b:
81:aa:fe:7e:d1:89:77:82:ba:f0:af:b0:32:b8:0b:
35:f0:1d:bb:09:b4:c4:53:60:ac:32:26:4e:6b:9e:
85:75:9f:9e:27:53:7b:e0:4f:c7:a5:67:b6:1a:f0:
1d:9c:b6:01:66:cf:48:1f:e4:fc:cb:4e:ea:33:53:
39:7a:4d:8b:ee:80:82:37:89:a1:ec:1d:94:54:ee:
7c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4B:B2:CF:CD:C1:DB:72:F0:76:B1:3D:54:CD:39:81:17:31:19:31
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/38352e3230392e39322e302f32332d3233203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.92.0/23
Signature Algorithm: sha256WithRSAEncryption
73:64:ab:1e:12:78:5b:5c:83:1c:8e:cb:33:35:ff:18:d5:4d:
62:31:87:3b:2d:83:92:09:ed:7c:5b:42:f6:ef:ef:db:72:67:
de:a8:d6:e7:6a:7b:0d:19:52:f4:61:f9:b5:ff:74:bd:e5:c7:
22:3d:07:5a:1a:cf:f0:e1:41:52:80:20:e5:06:82:e6:e3:06:
09:33:58:cb:3c:b9:d6:8d:34:5d:64:53:5f:5b:da:fd:35:74:
d8:22:a3:4e:32:b5:1e:f7:c9:6e:ee:3d:6b:34:02:4b:85:ba:
2f:59:11:60:82:f4:38:98:4c:55:22:67:e2:8a:5b:f6:bb:35:
5d:dc:19:4d:9c:4f:b5:d5:de:82:11:15:61:d4:c8:d5:39:57:
0c:0b:62:03:63:4b:c6:1c:d9:4e:b8:58:2c:79:81:3e:f1:ea:
b4:66:88:21:47:34:87:1b:5b:02:9d:c8:ab:34:9f:02:52:a6:
2a:6d:6a:64:d5:c6:c3:42:4f:82:9f:16:81:ef:f6:00:94:48:
49:8f:c7:49:e9:b1:ef:ca:55:23:7f:0b:c4:06:41:f8:b8:0a:
a9:cc:4a:64:2f:b4:a5:4c:3c:18:9c:62:6c:70:6a:a4:63:2d:
90:82:bb:69:ff:cf:13:f6:0e:bc:8e:5a:11:e1:0b:1e:60:5b:
a9:bf:76:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:55:37 2025 by rpki-client