Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3135302e302f32342d3234203d3e203437353833.roa
File: 3139342e33312e3135302e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: g5yurvIGbcWTWzIZ25ic00lFqTcVlFvFUeWwgontrOQ=
Subject key identifier: F6:B1:3A:01:24:BF:33:53:D0:CD:16:F9:E0:E2:B5:24:C7:A2:80:57
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 11C960C9018C63601B076D2B4A605E8C7F29E94D
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3135302e302f32342d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:44:46 +0000
ROA not before: Mon 27 Jan 2025 09:39:46 +0000
ROA not after: Mon 26 Jan 2026 09:44:46 +0000
asID: 47583
IP address blocks: 194.31.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c9:60:c9:01:8c:63:60:1b:07:6d:2b:4a:60:5e:8c:7f:29:e9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jan 27 09:39:46 2025 GMT
Not After : Jan 26 09:44:46 2026 GMT
Subject: CN=F6B13A0124BF3353D0CD16F9E0E2B524C7A28057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:f1:7c:9c:06:d3:6f:82:53:72:0c:ca:f7:
12:5a:cb:62:96:2a:09:f9:05:93:31:72:85:64:42:
97:d2:4c:be:c8:c0:59:40:5d:4e:a7:c6:ab:6d:db:
a6:72:ad:79:7c:70:ea:13:5a:a1:6d:c3:09:3e:7a:
f8:8c:db:cc:5c:6c:b3:f1:49:9b:76:b9:05:2f:79:
f9:9e:a0:c1:97:9a:ca:68:13:95:82:ab:e5:b1:49:
c6:7b:5c:b9:a9:60:1e:bb:72:70:55:6a:cd:b7:4d:
0f:e2:8d:79:39:8b:0b:8a:54:2d:30:cb:6a:72:82:
ed:e6:ab:e7:82:b8:0e:c1:fa:44:29:0a:82:f0:0a:
6c:3c:ca:07:90:2e:a1:b4:c1:2b:62:9e:fd:10:42:
3d:e8:99:dc:b4:1b:17:eb:0b:2b:29:12:2a:5a:5d:
71:96:0f:a2:3c:61:36:6e:a0:8e:a1:e3:2d:eb:3c:
a7:54:de:e4:f3:8c:78:43:dd:22:73:16:84:72:30:
4b:1e:62:0e:18:87:c5:9c:49:ea:aa:e9:cf:9e:15:
95:74:f5:65:e1:58:be:77:0c:25:73:35:08:e9:11:
85:55:53:3c:0e:83:3c:ec:4a:f0:f8:35:84:ee:67:
c9:45:b3:aa:1e:10:42:ae:c9:b3:e1:62:a6:b8:36:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B1:3A:01:24:BF:33:53:D0:CD:16:F9:E0:E2:B5:24:C7:A2:80:57
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3135302e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.150.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e6:8a:56:57:c2:fc:77:fe:36:52:d5:ca:2f:e4:b6:06:57:
66:34:84:fa:09:b7:6f:88:1f:55:d4:85:01:d3:8e:6a:2d:a3:
b6:bf:47:17:5f:ba:86:7f:1b:cf:10:8e:67:70:78:ce:b8:d7:
15:60:fd:d4:97:8f:26:40:dc:e9:3d:78:a5:1c:3d:3d:5a:df:
ae:0d:e3:0b:b2:9a:fa:ae:bd:69:a2:9a:d9:58:53:7c:83:f8:
9b:2f:2d:70:3a:42:9e:0e:63:70:fc:5c:88:a2:a7:da:0b:04:
aa:d6:58:79:2f:30:63:31:3c:29:6f:39:18:91:05:c3:05:29:
e5:11:68:60:42:32:a0:47:53:10:cc:f1:9f:8a:70:5e:73:b1:
b8:a0:02:a6:2e:b7:5f:66:01:cd:c5:f6:d0:3c:99:21:f1:5b:
74:b4:5f:4b:73:43:f5:1f:74:08:8f:4d:b1:8d:84:83:45:bf:
e8:33:a0:1e:c7:97:2c:6d:7f:b0:9f:31:68:40:ce:b3:b3:1e:
c7:d3:fb:bd:39:70:7a:1e:2a:a2:33:b7:3b:47:59:dc:37:70:
9c:23:21:80:ac:b9:7c:49:67:a1:bf:07:e5:e1:5b:fd:51:92:
dd:cc:bb:6a:2e:9f:68:97:fe:3e:3e:9e:c4:82:8f:76:46:4a:
ef:3c:38:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:05:48 2025 by rpki-client