Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/209/3130392e3233342e37392e302f32342d3234203d3e20323035363539.roa
File: 3130392e3233342e37392e302f32342d3234203d3e20323035363539.roa (raw, json)
Hash identifier: nSpfXOI1FaUJg0a4lSKf2n+Rn6WITXVzOwXNUUyKWQg=
Subject key identifier: 86:CE:D1:9F:F6:D5:A2:A2:02:87:1D:8D:6C:C4:CA:73:4E:1C:5C:1E
Certificate issuer: /CN=d9d41d39000acdc84362e7f68e88025cf8dafc73
Certificate serial: 7EF48A712F4D391274F87B1C6AA13FFEEE06F030
Authority key identifier: D9:D4:1D:39:00:0A:CD:C8:43:62:E7:F6:8E:88:02:5C:F8:DA:FC:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dQdOQAKzchDYuf2jogCXPja_HM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/209/3130392e3233342e37392e302f32342d3234203d3e20323035363539.roa
Signing time: Mon 27 Mar 2023 08:27:11 +0000
ROA not before: Mon 27 Mar 2023 08:22:11 +0000
ROA not after: Mon 25 Mar 2024 08:27:11 +0000
asID: 205659
IP address blocks: 109.234.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:f4:8a:71:2f:4d:39:12:74:f8:7b:1c:6a:a1:3f:fe:ee:06:f0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d41d39000acdc84362e7f68e88025cf8dafc73
Validity
Not Before: Mar 27 08:22:11 2023 GMT
Not After : Mar 25 08:27:11 2024 GMT
Subject: CN=86CED19FF6D5A2A202871D8D6CC4CA734E1C5C1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:a0:20:c0:33:08:a2:81:ab:ef:ec:ec:8d:
af:93:1c:ce:61:e3:53:a0:0a:8f:bd:8a:ce:8f:94:
6b:61:4b:39:8d:8e:4b:d0:da:a3:ee:7c:7c:b5:71:
34:a7:c4:6f:57:4a:31:86:70:32:b2:07:06:fa:8d:
6d:a1:3d:8c:85:53:1c:45:60:a0:4e:12:5c:6d:d0:
60:8d:f1:bd:8b:d5:0b:8c:17:44:30:b1:05:ee:96:
24:57:4b:ad:03:14:2e:d6:bc:f4:23:f1:f3:2b:23:
6a:19:c1:a3:d0:49:cb:96:64:0a:f5:2e:d1:fe:98:
c6:ed:da:d9:00:99:55:2a:75:a5:25:aa:b2:57:64:
49:00:17:4c:2c:be:d7:c8:be:8b:17:94:48:c3:34:
96:5a:0b:67:c3:ce:f4:57:47:b1:08:23:d5:86:fb:
69:61:ae:a7:1e:89:c1:d6:bd:f4:ce:cd:61:93:55:
fe:35:a5:c5:7c:9d:df:19:4d:a6:3c:7d:8c:c8:f2:
0f:ec:a7:ad:23:d2:c1:4c:b5:10:a8:df:26:4f:de:
e3:fc:cc:a9:3a:65:f3:8a:c2:1d:95:b9:68:84:66:
97:c8:69:00:90:3d:1f:a6:f0:8b:87:96:de:cf:24:
4e:d6:dd:d8:ba:62:dd:03:ab:de:6d:c3:5c:c5:33:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CE:D1:9F:F6:D5:A2:A2:02:87:1D:8D:6C:C4:CA:73:4E:1C:5C:1E
X509v3 Authority Key Identifier:
keyid:D9:D4:1D:39:00:0A:CD:C8:43:62:E7:F6:8E:88:02:5C:F8:DA:FC:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/209/D9D41D39000ACDC84362E7F68E88025CF8DAFC73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dQdOQAKzchDYuf2jogCXPja_HM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/209/3130392e3233342e37392e302f32342d3234203d3e20323035363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.79.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f1:61:f9:f8:c0:df:4b:fa:41:0c:62:c1:73:16:a6:aa:d8:
be:b5:16:33:73:b8:30:62:0e:e0:4e:b0:1c:2c:4e:5a:05:dd:
0e:5d:98:be:89:39:df:3b:de:e9:42:e5:16:7b:68:da:b2:c8:
60:e4:d2:5b:20:6f:38:0f:13:d4:f1:48:10:ea:fd:63:d2:96:
32:cd:24:13:e1:5b:ff:0b:82:13:1c:11:a3:ad:01:e8:5c:90:
c2:87:c2:68:d6:b0:03:80:1a:20:7c:c9:f9:4a:96:1b:fe:7e:
4c:28:0c:03:24:cc:2b:70:a3:78:be:e5:97:a7:3e:63:3e:14:
04:08:cd:2f:4b:c6:b4:e9:a8:ed:b8:b5:fd:8a:93:b6:e7:c7:
a5:84:f4:e0:3b:bf:55:56:d5:eb:66:2c:ee:6f:59:1b:b2:90:
e4:43:04:9f:bf:7c:1c:2f:4c:c9:3c:c6:a7:55:73:13:3d:67:
3b:e3:9b:f4:17:ff:a1:57:08:64:f8:93:08:06:0c:a8:4c:3a:
39:11:90:76:8e:af:4a:b5:c0:b0:42:99:b4:76:70:40:84:41:
6a:30:a7:58:88:31:db:b9:5d:9e:a5:a1:1c:c0:57:fe:e8:27:
0c:c7:37:e3:97:b6:9b:2d:c2:9a:d9:5c:1d:28:93:f4:57:b4:
01:d1:b0:7c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org