Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3137362e3131362e31392e302f32342d3234203d3e20323034313730.roa
File: 3137362e3131362e31392e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: TGoPaRMr5qBiCFmGAcwYs7RGnEPN9RuJnaG8QXsUsg8=
Subject key identifier: 60:3D:EC:55:C0:DD:B6:1C:21:90:FA:89:D5:42:51:46:51:A3:FB:A8
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 380707E5E75ED3B4FFEC3049F04AF3B7254CC718
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3137362e3131362e31392e302f32342d3234203d3e20323034313730.roa
Signing time: Tue 25 Jun 2024 21:47:11 +0000
ROA not before: Tue 25 Jun 2024 21:42:11 +0000
ROA not after: Tue 24 Jun 2025 21:47:11 +0000
asID: 204170
IP address blocks: 176.116.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:07:07:e5:e7:5e:d3:b4:ff:ec:30:49:f0:4a:f3:b7:25:4c:c7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Jun 25 21:42:11 2024 GMT
Not After : Jun 24 21:47:11 2025 GMT
Subject: CN=603DEC55C0DDB61C2190FA89D542514651A3FBA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4b:95:7a:c1:49:8f:a7:3a:b9:f0:d7:dd:2c:
3a:fc:2e:df:ec:84:62:6c:9b:39:ac:c7:e5:d8:0a:
87:ac:c6:91:20:37:ed:93:83:9b:7d:02:a1:b9:01:
d1:43:46:17:92:3e:ee:c5:5c:83:18:01:a0:ca:04:
73:63:9d:c9:ef:fe:fd:4f:47:2e:89:e5:c1:e9:cf:
d0:a4:80:4c:7d:5e:88:5b:21:97:48:15:86:1d:7f:
eb:a2:07:80:f3:21:0b:b3:a3:1c:b0:1f:a6:96:fe:
68:d4:9b:e2:e7:a4:6b:28:18:1a:c5:67:f3:c3:ac:
0b:b5:16:35:ce:fb:30:28:21:9e:7a:98:6a:97:64:
60:29:2f:73:fd:57:ad:f4:2d:32:ad:df:11:34:31:
66:1f:a3:fa:b0:a2:be:96:90:dd:c8:b6:39:f2:49:
6e:45:e8:9e:7f:c3:4b:83:8d:b1:11:b2:88:fe:7e:
b9:d2:d5:ab:06:1b:2e:3a:92:d5:c3:34:df:0d:04:
9e:6e:d3:41:3c:37:a2:b1:87:f8:de:80:3a:cb:ae:
a3:d1:9b:dc:49:eb:42:d4:1c:ec:42:f0:2a:c4:b4:
74:a2:21:bf:f7:89:fc:38:69:6e:13:56:9d:98:73:
40:fa:4b:f3:37:22:85:86:e8:14:db:de:dd:23:b6:
a1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3D:EC:55:C0:DD:B6:1C:21:90:FA:89:D5:42:51:46:51:A3:FB:A8
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3137362e3131362e31392e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.19.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:cd:63:57:87:1a:02:9b:c1:1a:a9:92:cb:a4:74:f8:c3:d2:
ac:8f:98:e8:16:01:19:81:64:38:be:c6:53:4a:13:a9:52:d5:
7b:09:48:89:b3:2a:d9:5a:af:58:cd:1f:db:41:ee:34:03:58:
a9:ca:7d:1d:4e:4e:c5:c4:f9:1c:80:21:63:9b:45:68:80:11:
ce:ce:a0:af:62:d6:59:38:61:a1:18:a2:10:5a:ee:b1:c5:30:
9d:5a:ad:09:f5:8f:30:7c:2f:0b:a0:f9:8e:e9:73:58:be:2c:
6d:2f:5e:b7:97:33:3e:d2:0b:ff:0c:1f:79:fc:2f:25:4c:43:
d1:b0:25:a7:35:64:26:de:7d:66:6a:74:b1:7b:7a:cc:68:ed:
17:42:5c:58:24:e9:1e:4c:a3:c9:a9:d0:42:64:e1:31:52:ad:
67:69:a2:29:06:3f:7a:8e:38:56:9b:6c:1d:31:25:98:3d:6c:
74:1c:31:82:9c:24:d3:df:21:ee:ed:5f:7c:54:36:f0:4c:60:
93:f1:71:d9:ca:2f:c9:90:94:6f:8f:52:f8:66:3f:ce:ce:fa:
c5:f1:84:f5:41:88:c4:0e:d6:5c:f9:41:bb:97:13:ca:3d:30:
d7:22:0f:16:a5:c9:15:e8:8f:17:b0:d0:97:0e:62:e7:1e:10:
b6:47:89:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:38 2025 by rpki-client