Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/223/39312e3234322e3234382e302f32342d3234203d3e20313336373837.roa
File: 39312e3234322e3234382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: JI07yNIjyqPEzS+ZGMTvALFI8KsPLmedb46hnmliVOA=
Subject key identifier: A8:9D:73:E0:05:77:4F:C5:44:E3:DD:D2:07:17:71:3C:31:7C:39:94
Certificate issuer: /CN=da7ddc9d808df9a108ec0cfc1934c743048e9919
Certificate serial: 5CE1363357F1F5C588CA23AB91C32630F98B282E
Authority key identifier: DA:7D:DC:9D:80:8D:F9:A1:08:EC:0C:FC:19:34:C7:43:04:8E:99:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n3cnYCN-aEI7Az8GTTHQwSOmRk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/223/39312e3234322e3234382e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 01 May 2023 14:29:27 +0000
ROA not before: Mon 01 May 2023 14:24:27 +0000
ROA not after: Mon 29 Apr 2024 14:29:27 +0000
asID: 136787
IP address blocks: 91.242.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:e1:36:33:57:f1:f5:c5:88:ca:23:ab:91:c3:26:30:f9:8b:28:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7ddc9d808df9a108ec0cfc1934c743048e9919
Validity
Not Before: May 1 14:24:27 2023 GMT
Not After : Apr 29 14:29:27 2024 GMT
Subject: CN=A89D73E005774FC544E3DDD20717713C317C3994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:fd:df:99:97:7a:d0:ad:1a:35:ac:c4:62:
85:c4:4a:ed:c7:0f:ac:69:3c:b1:87:ec:45:c1:c1:
aa:c7:c0:a9:44:cc:61:93:07:84:77:48:4d:c7:32:
74:a1:13:3b:35:f9:18:5c:ab:da:00:e6:27:29:75:
27:4d:82:ba:cd:c5:89:50:21:33:97:93:c6:9c:ad:
69:bb:4a:85:10:c0:c5:e8:e0:eb:ff:0a:25:d9:85:
fc:9c:59:53:e9:fa:72:4e:86:81:c9:95:db:ab:cb:
4f:d0:ac:80:e7:a3:b7:e3:f9:9b:84:3d:44:33:89:
5d:77:aa:f8:67:d4:76:37:ac:90:fa:6f:d9:2e:e2:
e6:7e:68:c2:a1:ab:25:12:c4:9d:e3:6a:b6:7b:8c:
ea:c4:54:54:6f:af:0e:1f:85:36:35:4e:66:3f:5b:
d0:4d:df:14:4d:28:07:d6:ea:1b:ff:80:e0:12:b9:
ab:9f:a0:6e:5f:fd:5e:c1:4a:af:8a:c4:b5:0c:72:
3a:d8:ea:00:6d:f4:b6:4c:22:91:7e:45:cc:30:5e:
e5:34:8a:43:d5:16:f2:36:8f:e5:82:f9:fd:af:4b:
f7:84:c7:60:ce:89:38:e5:17:12:19:1d:07:c1:fd:
b8:95:c8:35:1f:de:2d:a9:7f:35:b5:37:c9:27:19:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9D:73:E0:05:77:4F:C5:44:E3:DD:D2:07:17:71:3C:31:7C:39:94
X509v3 Authority Key Identifier:
keyid:DA:7D:DC:9D:80:8D:F9:A1:08:EC:0C:FC:19:34:C7:43:04:8E:99:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/223/DA7DDC9D808DF9A108EC0CFC1934C743048E9919.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n3cnYCN-aEI7Az8GTTHQwSOmRk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/223/39312e3234322e3234382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.248.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:0e:31:f7:f4:71:95:be:65:4a:b8:0e:3d:69:29:d4:12:75:
bc:e5:be:ec:ab:0e:00:c8:63:a9:89:cd:05:28:f1:e0:ad:b7:
f2:08:e6:22:9e:2d:bb:91:42:60:74:d8:35:be:8b:30:bf:50:
19:5c:76:e2:8c:9a:33:c8:d8:62:a5:82:65:74:9b:e4:eb:b8:
af:e0:0c:2f:b5:fb:ce:51:f9:b8:a4:38:b6:76:3a:44:ff:92:
92:51:62:af:25:d5:d0:cf:fc:b7:a9:a6:ee:52:f7:35:2a:b6:
bc:9b:cd:91:60:70:7b:48:81:2b:57:24:c0:8b:c2:9d:84:ab:
f8:68:e8:13:f3:be:42:b6:5d:5b:b8:04:0f:77:41:03:dd:66:
9e:3d:14:0a:ce:e4:cf:2e:45:c8:80:63:2c:b8:8f:e1:41:30:
8f:af:44:01:49:1d:2a:0f:50:74:81:d1:19:58:4b:eb:77:69:
fc:f7:85:7a:9e:d3:4b:98:58:a9:72:50:01:f1:30:71:51:5b:
ab:7c:42:db:7e:cf:4a:1b:73:54:03:cf:7c:e4:af:81:2a:4d:
35:9c:9c:53:05:13:9b:ff:bd:09:b3:0a:f8:0a:b2:e8:e8:93:
b1:62:3c:6c:43:68:d9:5b:b7:ef:9e:36:ac:23:67:0c:7f:74:
70:ad:11:02
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org