Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e3136302e36362e302f32332d3234203d3e203437353833.roa
File: 3139332e3136302e36362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: APMORwUX4/GZq4wkFfxC7YoxoFF1dSvjOivUDyEt2m4=
Subject key identifier: F8:40:87:4B:92:B1:AB:3A:AC:D3:55:08:47:53:CE:84:77:5B:02:12
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 6B53722348C48E6B64E6F6BE645B9765F1A9FE1A
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e3136302e36362e302f32332d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:44:51 +0000
ROA not before: Mon 27 Jan 2025 09:39:51 +0000
ROA not after: Mon 26 Jan 2026 09:44:51 +0000
asID: 47583
IP address blocks: 193.160.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:53:72:23:48:c4:8e:6b:64:e6:f6:be:64:5b:97:65:f1:a9:fe:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jan 27 09:39:51 2025 GMT
Not After : Jan 26 09:44:51 2026 GMT
Subject: CN=F840874B92B1AB3AACD355084753CE84775B0212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:b4:fb:7e:34:41:ee:41:9c:13:0f:3f:f2:
dd:e9:94:a3:59:0d:96:35:2e:12:5f:8e:fe:07:33:
b4:ea:42:b1:15:e6:e3:4a:e6:8e:04:d8:5b:66:74:
8f:d5:78:56:27:23:b3:77:7e:14:85:ab:45:0a:aa:
ee:29:1f:40:69:17:23:b7:74:3a:86:7a:07:e2:81:
f1:b0:33:e6:75:df:8e:e9:32:59:c8:86:2b:89:10:
6f:a8:8a:f6:67:56:c8:b2:ce:c5:74:2c:48:05:79:
d4:df:10:cc:0a:bb:37:bc:44:0e:09:0f:53:66:f3:
ee:bf:e2:37:38:6f:44:95:4b:6b:b5:ce:1a:39:d4:
ff:ed:af:f3:09:7e:91:40:df:f2:c7:00:fe:63:e6:
d8:66:44:09:da:82:1b:fe:22:71:32:f5:9c:c6:a0:
11:61:36:e9:af:ba:98:b3:9f:8b:4e:9e:3c:99:c6:
af:f1:9c:74:3f:0f:d5:7a:08:7b:c7:78:6d:9a:14:
73:0b:2f:1e:13:8f:f1:5f:81:37:e0:02:46:a4:10:
bc:f8:b8:13:f5:53:cf:3a:a1:2c:0f:b3:b8:45:49:
85:84:bd:79:6e:76:13:a5:ed:70:d1:42:34:08:d4:
99:4a:9e:d9:cf:11:21:97:40:2e:6a:9b:d6:ac:c2:
85:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:40:87:4B:92:B1:AB:3A:AC:D3:55:08:47:53:CE:84:77:5B:02:12
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e3136302e36362e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.66.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:f8:3a:4d:d3:88:57:74:52:f5:44:32:c3:8a:26:85:4d:0e:
1d:59:ea:a7:58:4d:09:9f:e1:c0:fa:46:24:1c:32:8a:c4:ad:
ea:8a:98:73:38:3d:97:42:8e:d9:59:46:84:76:e1:7e:50:4a:
61:73:bd:ad:61:73:04:26:81:c2:a3:26:c9:70:70:9f:83:a1:
a3:2c:df:c9:de:fa:3f:53:18:83:a3:a5:94:63:ce:01:49:ac:
d2:2d:80:88:f2:0e:86:aa:a3:94:b2:03:7b:f4:b2:8c:07:b7:
05:0c:c6:23:89:f0:2d:08:0c:4f:07:64:7b:f0:b6:77:12:a2:
55:53:e8:33:63:d0:08:22:2e:2e:79:76:88:01:c1:5b:34:3a:
41:ee:04:7e:61:a8:cd:ab:fd:42:8c:ee:c0:5b:ae:17:19:6e:
ec:75:ce:c7:1d:a0:ad:a4:64:49:3c:44:c3:e3:20:59:3a:ef:
06:17:8b:2d:1b:bc:df:cf:b0:1f:52:c0:23:26:47:86:6d:f2:
41:f7:68:68:15:c3:42:7f:4b:45:6b:06:ee:0f:30:72:bc:a2:
cb:1f:a2:44:ec:6a:24:49:7e:fe:cc:a6:45:17:b4:16:cc:a8:
31:0b:1e:0f:a4:82:bc:bd:14:2d:50:f3:61:cc:8b:a5:1a:52:
bc:80:8a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:47 2025 by rpki-client