Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e35352e302f32342d3234203d3e203437353833.roa
File: 3139342e33312e35352e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: qr9rREI/46blwUVYK3SL1tlGYGnIbY06J10HnKxrb34=
Subject key identifier: 30:12:53:95:95:A0:49:64:95:77:A6:E3:73:8C:13:4C:C2:51:B9:F0
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 608015E20FAE2C913A782BF3AB0FA99D78856B9C
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e35352e302f32342d3234203d3e203437353833.roa
Signing time: Mon 30 Dec 2024 15:41:20 +0000
ROA not before: Mon 30 Dec 2024 15:36:20 +0000
ROA not after: Mon 29 Dec 2025 15:41:20 +0000
asID: 47583
IP address blocks: 194.31.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:80:15:e2:0f:ae:2c:91:3a:78:2b:f3:ab:0f:a9:9d:78:85:6b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:20 2024 GMT
Not After : Dec 29 15:41:20 2025 GMT
Subject: CN=3012539595A049649577A6E3738C134CC251B9F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:e2:0e:a7:d8:98:9b:86:25:ff:85:71:f7:
35:77:fa:9c:7b:5f:cc:15:a2:49:7d:4e:33:64:b4:
0b:3f:c6:5b:67:e6:fc:09:9b:7f:87:27:a5:6a:e6:
41:11:cc:2b:65:9f:cf:cb:bf:31:f1:df:bb:6d:7b:
6c:95:ac:85:13:ae:05:f9:14:d8:5b:64:0a:68:e8:
09:f8:ac:da:db:c1:d4:69:18:61:3d:b6:62:78:1e:
98:0b:5d:4d:ae:07:b8:3b:8a:f8:89:1a:43:c2:8b:
86:2c:85:a2:01:52:27:ad:82:8b:75:7d:ea:22:81:
28:2a:ba:8f:a2:aa:7b:3e:2f:2d:75:c1:67:d5:c8:
a2:47:eb:a3:8d:7c:a5:bc:93:06:a6:4b:5a:16:e3:
78:20:c2:4e:bf:71:85:2d:90:f9:87:0e:4e:0e:b5:
bf:73:ef:2c:74:39:28:07:9e:a2:1c:8b:6f:a2:33:
a1:38:0f:bb:bc:8b:ce:6c:d4:a2:29:ae:aa:ff:cf:
f1:63:4f:99:3b:55:a5:7f:f4:5b:ac:6b:72:d2:d2:
5e:ac:45:c8:eb:e4:3f:3b:ba:5e:11:c8:d9:7c:af:
58:36:18:c9:a3:c3:23:e0:7b:00:e5:96:fb:60:19:
e5:86:e7:12:1a:0a:be:a8:37:d3:0c:00:62:21:ca:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:12:53:95:95:A0:49:64:95:77:A6:E3:73:8C:13:4C:C2:51:B9:F0
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e35352e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.55.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:35:7e:5f:b0:e2:8d:db:d6:ad:c4:8d:f3:a8:98:32:bc:6d:
10:ee:66:4f:0c:fa:56:18:69:61:94:0a:df:c5:18:46:c7:9b:
b3:af:5e:4a:3d:91:15:99:b3:7b:d4:f6:a0:1b:fd:ae:4d:b2:
85:b3:b1:fe:8f:a9:37:39:fe:08:fa:2b:59:47:98:76:36:b3:
1d:62:fe:9a:7a:56:c1:c3:0f:ff:99:de:d5:96:9d:1b:f2:a1:
e2:77:c3:07:91:34:bf:c2:68:ea:61:5a:4a:59:c3:bd:ca:46:
a2:e2:df:d4:9a:0d:c4:13:94:27:ea:90:98:22:2c:ae:08:13:
e1:87:89:7c:f6:a1:6e:d6:31:29:39:7b:ad:31:5f:63:7a:6b:
0f:3a:fa:ed:06:22:be:4f:72:50:ae:37:55:0d:c6:26:bc:2a:
88:07:e5:e6:fc:4c:e8:37:ce:05:a6:4f:3e:8e:48:f4:8e:73:
09:dc:23:68:63:65:0c:e4:9b:a5:62:51:64:17:36:c9:e4:12:
03:1a:20:a1:33:24:7f:dd:fd:a5:47:17:36:54:26:61:eb:2a:
ee:94:fe:9d:ca:7a:1c:77:01:5b:95:f1:43:c1:39:e2:fa:10:
91:3a:92:bf:83:25:ff:f3:e5:bf:a8:83:fb:21:66:d5:ce:dc:
9c:c1:d6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:59 2025 by rpki-client