Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139352e36342e39392e302f32342d3234203d3e20313336373837.roa
File: 3139352e36342e39392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: aXNLoRCmbkVjr4nX/UUPo+pZcLTe9xPce4IFguiSYiI=
Subject key identifier: 54:80:C2:AF:EA:F8:24:3A:AC:A0:0F:30:2F:72:B2:C8:65:F8:FA:33
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 5FBE57A949FFDD7FA9E1E1E12687BB0318704BFB
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139352e36342e39392e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 30 Dec 2024 15:41:16 +0000
ROA not before: Mon 30 Dec 2024 15:36:16 +0000
ROA not after: Mon 29 Dec 2025 15:41:16 +0000
asID: 136787
IP address blocks: 195.64.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:be:57:a9:49:ff:dd:7f:a9:e1:e1:e1:26:87:bb:03:18:70:4b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Dec 30 15:36:16 2024 GMT
Not After : Dec 29 15:41:16 2025 GMT
Subject: CN=5480C2AFEAF8243AACA00F302F72B2C865F8FA33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:06:33:36:4a:e8:84:2b:80:84:90:66:9d:
c9:3f:9f:28:9c:0c:4b:ea:1c:01:53:c2:54:95:51:
67:7e:ea:f2:c7:cb:e6:4e:28:0f:e0:1f:94:26:58:
23:6d:e6:d3:e9:c9:c8:74:b2:c4:37:62:97:72:6f:
7b:51:9a:ef:c0:a4:8f:5c:aa:05:36:c3:3c:30:82:
0e:c4:03:d9:14:a6:80:44:62:cb:a6:de:df:8e:d3:
63:e7:06:53:6b:8f:6b:37:0d:5f:6a:3d:98:ca:c4:
d4:0d:cb:9b:c8:90:86:f4:28:d9:a4:eb:df:51:9c:
d1:2b:c9:cb:10:2d:53:36:36:86:34:73:56:94:86:
1e:72:77:72:bd:f1:3c:e6:cd:c7:ec:8a:84:73:cf:
4c:05:df:c3:05:38:f1:fd:d1:e3:af:f4:dc:45:2e:
29:26:80:9a:0f:5d:e8:d7:30:68:56:03:f0:47:b9:
f5:ae:d5:e8:30:cc:7c:62:82:0b:40:e1:5a:09:5d:
2b:39:fc:e7:d0:e2:7d:56:a5:0c:a7:66:17:e0:44:
47:24:fa:6e:85:d3:90:47:00:b2:00:d3:f5:e8:5a:
95:5a:67:1e:6b:f3:85:9b:07:31:78:7f:5b:89:0c:
3e:f0:99:c5:90:68:e9:8d:6b:2a:f4:73:d6:e2:15:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:80:C2:AF:EA:F8:24:3A:AC:A0:0F:30:2F:72:B2:C8:65:F8:FA:33
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139352e36342e39392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.99.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d3:49:58:a4:e9:77:7d:36:d0:50:de:db:a9:a6:51:ec:d5:
c3:44:eb:a4:9f:ce:d7:57:e5:a7:3e:1a:2c:be:ec:d7:b6:61:
3c:27:d3:8f:2b:65:32:2b:7d:49:8d:f6:49:b2:66:26:6a:83:
5c:1a:e1:ec:97:32:44:b4:b6:d0:a9:b0:9e:35:f6:5f:22:c0:
7f:1b:9c:33:41:5e:01:04:db:ad:e6:7d:be:35:b0:57:64:40:
1e:9d:e1:a9:54:cf:9d:e8:17:5d:6b:89:22:0e:a3:3f:b9:3d:
8b:41:b1:53:a9:6d:08:cd:32:57:06:46:25:36:9e:85:a2:45:
9d:19:29:92:4c:b0:dc:57:7e:af:83:e3:b5:c6:c6:e6:36:75:
ff:10:39:a7:0f:0f:c2:20:02:9d:83:99:43:eb:73:1e:a2:32:
ed:69:1d:35:2e:a1:e4:9e:13:60:3e:45:dc:de:d7:df:9c:22:
42:df:c1:ab:43:d8:ec:c5:85:39:3d:83:7d:b4:4c:44:0d:23:
9a:44:be:0b:e4:8c:da:85:e0:70:70:67:14:90:22:d5:c3:f9:
24:25:01:4d:db:fe:14:2b:39:38:00:37:20:71:b8:88:2c:e0:
54:1d:bf:ef:14:28:cf:ef:6d:54:57:16:fc:a9:d5:29:95:86:
66:df:a6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:45 2025 by rpki-client