Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e35332e302f32342d3234203d3e203437353833.roa
File: 3139342e33312e35332e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: CP+IzvZwfd/fm7fJK8xCH5SnTlX7Q4cg80lQvDBQits=
Subject key identifier: F5:07:D5:49:B5:36:84:96:22:01:70:7E:A4:7B:BA:1C:C7:F6:F9:15
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 5BC4FE088631093A3526287E844D656CB8C6100F
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e35332e302f32342d3234203d3e203437353833.roa
Signing time: Mon 30 Dec 2024 15:41:20 +0000
ROA not before: Mon 30 Dec 2024 15:36:20 +0000
ROA not after: Mon 29 Dec 2025 15:41:20 +0000
asID: 47583
IP address blocks: 194.31.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c4:fe:08:86:31:09:3a:35:26:28:7e:84:4d:65:6c:b8:c6:10:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:20 2024 GMT
Not After : Dec 29 15:41:20 2025 GMT
Subject: CN=F507D549B53684962201707EA47BBA1CC7F6F915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bc:56:ba:5d:2c:17:4a:73:a4:a8:c8:1c:9d:
fb:48:74:93:1c:88:6c:7a:80:37:e8:71:e9:86:62:
1c:e7:d0:23:81:65:97:70:20:1e:99:89:01:d2:95:
7a:6f:1b:4d:47:9d:ec:d0:8a:b5:63:17:3d:40:dd:
f0:17:3c:dd:a7:56:05:79:ab:f5:78:45:64:33:ea:
d4:03:81:33:2c:79:f0:4d:de:a2:0f:ed:5f:12:20:
12:10:dc:40:27:af:68:38:e1:be:8a:bb:78:29:e9:
03:47:c3:73:5b:3c:05:dc:ca:b0:0a:7c:e6:fe:3e:
a8:6f:45:e5:29:fa:19:ea:c7:af:c1:7c:80:b4:b9:
31:91:47:6d:14:bc:4d:0d:b1:a1:83:2a:c1:1a:6a:
f6:49:62:29:93:aa:4c:98:9e:42:6c:2b:b4:b5:7b:
3c:1f:99:c6:59:2a:91:60:53:f8:95:e3:6f:e5:cb:
8b:4c:8c:09:0d:be:c1:47:b3:b2:9e:27:80:f8:33:
25:88:3c:46:1e:58:1f:ef:00:60:3a:dd:c9:c2:a6:
f9:d2:c2:34:ca:dd:55:a5:34:9e:49:86:f8:13:2c:
ea:f5:49:32:61:bc:f0:da:02:06:28:04:99:d9:84:
a5:eb:5f:3e:10:ab:39:c3:da:03:07:58:f7:e7:59:
52:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:07:D5:49:B5:36:84:96:22:01:70:7E:A4:7B:BA:1C:C7:F6:F9:15
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e35332e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.53.0/24
Signature Algorithm: sha256WithRSAEncryption
62:02:34:f9:7b:b2:8f:39:f0:1b:c0:46:61:b5:4b:13:7d:83:
ce:b5:ab:0d:f6:66:d2:dd:71:a4:fe:cd:a0:8c:2c:fb:e0:1c:
f4:9b:cb:b6:68:0b:41:99:88:5c:7c:da:8a:a4:49:9f:54:82:
28:11:1e:92:f0:f3:56:92:44:78:60:72:13:8c:0f:0f:56:68:
bb:ce:a2:a9:96:e3:eb:f9:a6:23:e0:e9:7f:d9:89:17:85:85:
ea:26:11:9e:cd:cc:50:85:b9:fb:1d:8a:a7:75:16:fa:0a:80:
c1:3f:b9:08:a5:8a:3f:73:a5:a1:ec:7a:c4:69:ec:68:fe:a6:
fd:45:9b:ae:1c:92:79:fa:73:24:7f:45:db:9f:dd:1c:aa:1e:
63:68:20:8e:04:95:4c:3a:cb:00:97:3a:99:01:67:4a:cf:b0:
82:a8:ce:b3:1d:56:3c:56:11:03:ec:ed:5c:66:ba:9e:93:8c:
3f:8e:3d:6a:58:a3:9a:cf:68:ba:c0:cb:40:78:0c:6d:03:35:
3c:b2:97:b2:9a:9a:7e:fe:a3:88:61:a2:56:3a:86:e0:33:27:
2e:9a:ac:f3:5c:06:a0:aa:c3:37:d5:1a:e1:25:7f:e9:4b:f6:
b0:91:4d:28:30:c4:3a:aa:16:60:1e:4d:e6:8c:0b:ce:18:bc:
82:5e:e6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:42:15 2025 by rpki-client