Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32322e3134342e302f32332d3234203d3e20323034313730.roa
File: 3139332e32322e3134342e302f32332d3234203d3e20323034313730.roa (raw, json)
Hash identifier: L3x5CtrIOp96n9KwhPHHEln1InSCXG+Crj/7RvvRCqc=
Subject key identifier: 57:97:19:2A:AA:DE:1C:0C:FE:8A:91:EB:3C:C7:C0:5A:91:CA:75:1D
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 12B942CC065F9AAACBFFA91488CAEE51488CA7F8
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32322e3134342e302f32332d3234203d3e20323034313730.roa
Signing time: Mon 27 Jan 2025 09:44:50 +0000
ROA not before: Mon 27 Jan 2025 09:39:50 +0000
ROA not after: Mon 26 Jan 2026 09:44:50 +0000
asID: 204170
IP address blocks: 193.22.144.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b9:42:cc:06:5f:9a:aa:cb:ff:a9:14:88:ca:ee:51:48:8c:a7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jan 27 09:39:50 2025 GMT
Not After : Jan 26 09:44:50 2026 GMT
Subject: CN=5797192AAADE1C0CFE8A91EB3CC7C05A91CA751D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e2:51:4a:7d:79:9c:0b:09:8e:86:29:41:4b:
6e:dd:12:7a:99:50:84:ee:23:e8:5d:cb:ba:7f:d9:
a9:d3:df:5a:6a:c2:e3:9d:b8:fd:2f:b6:44:19:0c:
14:47:a3:17:a4:22:6f:8f:b7:ca:71:c9:d2:17:73:
de:a6:cb:e4:7e:8a:c4:d0:fc:82:e8:14:9b:14:44:
e0:e2:b9:16:ca:31:06:6c:54:08:d3:b6:33:63:dc:
9a:7c:ee:81:1a:a4:73:73:a9:3a:e5:61:9f:03:ef:
fa:dc:07:7c:b2:ef:50:77:60:ce:33:70:6a:2e:99:
2d:aa:3a:99:59:8f:38:9d:ff:eb:18:75:71:15:33:
d7:06:ee:ce:ba:60:3d:df:43:ed:96:df:3e:c1:b8:
0c:45:16:1d:74:65:08:33:3d:ee:5c:2f:d8:89:bb:
3e:34:56:44:de:47:99:06:ef:86:b4:59:0f:ec:13:
c5:9a:b4:18:f9:3b:e7:d1:d6:3e:52:36:37:73:4b:
6c:39:b4:a4:e5:f6:b3:22:86:d5:99:42:95:fe:92:
d8:b5:6a:15:37:bb:41:bf:67:33:63:c9:1f:b5:26:
20:a5:35:60:5b:bc:95:d1:58:23:83:3c:34:b2:61:
25:c4:b1:2c:37:25:28:22:d1:88:25:e1:29:2e:fa:
35:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:97:19:2A:AA:DE:1C:0C:FE:8A:91:EB:3C:C7:C0:5A:91:CA:75:1D
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32322e3134342e302f32332d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.144.0/23
Signature Algorithm: sha256WithRSAEncryption
67:29:6b:02:f7:4c:e7:db:c9:24:fc:d0:31:25:f0:b1:a6:e1:
6a:75:67:79:d0:eb:75:ac:65:2d:97:db:48:8f:91:c5:17:2b:
30:e7:fc:f9:6f:de:53:68:a5:93:2e:b6:3a:3a:e0:c2:12:60:
52:e1:d3:1f:71:58:f6:d8:ef:11:df:16:09:c5:1c:5f:1e:77:
52:54:1b:e5:f0:95:62:16:39:9c:bd:1a:7b:7b:6a:38:61:78:
f9:51:48:83:7f:eb:df:9a:70:33:be:b9:b7:a4:6d:9e:43:8c:
26:e6:b6:e4:d5:29:bc:ba:0d:ee:de:48:2b:e7:40:59:ab:b7:
68:59:d1:39:44:ca:66:7c:e0:c4:fa:9d:c3:6a:94:7c:a9:92:
23:1b:41:36:4f:8b:ba:ed:eb:57:5a:59:ad:a0:f5:4f:1a:a5:
36:3c:80:a0:2d:4c:30:09:78:c8:b4:0f:3f:7a:03:4e:af:ab:
f4:57:ff:a5:c0:aa:a0:d1:3c:af:3d:df:20:35:b4:93:18:62:
50:58:53:7a:13:a5:18:28:63:a9:d4:8f:44:f5:c8:98:38:25:
57:86:94:08:b4:26:0e:d7:1d:d1:17:9a:7c:fe:a0:df:d0:c0:
36:59:8c:a9:6e:0b:09:24:42:9f:8b:df:3f:3d:87:e0:87:58:
bc:3b:e2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:54:17 2025 by rpki-client