Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e33362e3233382e302f32332d3234203d3e2030.roa
File: 3139332e33362e3233382e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: MUyeXLis2HAdlB7l5tSyAZWAzXr2VsUULU1Ib7+Pt5s=
Subject key identifier: 35:89:0F:DD:61:8E:BD:CF:1E:DE:C6:27:07:0B:F4:E6:36:31:5D:05
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 47B28796F2FB8B0DCC15BD517980E8C8898DDD58
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e33362e3233382e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:26 +0000
ROA not before: Mon 27 Mar 2023 08:22:26 +0000
ROA not after: Mon 25 Mar 2024 08:27:26 +0000
asID: 0
IP address blocks: 193.36.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b2:87:96:f2:fb:8b:0d:cc:15:bd:51:79:80:e8:c8:89:8d:dd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:26 2023 GMT
Not After : Mar 25 08:27:26 2024 GMT
Subject: CN=35890FDD618EBDCF1EDEC627070BF4E636315D05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:42:b2:16:84:72:da:63:ee:7b:40:df:22:
7a:e2:a9:69:8e:94:7a:4e:93:9b:ba:ee:51:dd:62:
16:db:84:03:9b:70:38:50:ca:11:89:df:6d:ce:13:
de:d5:98:84:46:b5:32:02:e8:5e:20:44:30:c6:02:
f2:f8:15:9a:16:4e:ca:91:05:80:67:b3:16:c4:53:
89:b6:ba:1e:a4:39:40:93:71:be:4f:11:bc:b2:4e:
e2:ff:2f:4a:33:b8:b9:6c:56:c1:28:65:19:64:36:
9a:a4:93:0e:13:c4:10:d8:15:93:76:d6:b8:e5:34:
76:ba:22:36:00:4a:52:7e:4b:2a:88:f3:df:cc:ab:
bb:8c:c5:39:38:54:21:49:50:0f:52:ee:af:58:9c:
36:2c:5f:85:cb:8f:77:17:28:86:6f:f6:4f:cb:ec:
fa:7d:6c:6b:3e:a6:fa:bc:d0:79:65:4f:e2:35:56:
05:d7:f9:69:e0:2e:23:de:3c:7c:20:e4:25:8d:e8:
ca:0b:95:43:e7:84:17:27:cf:b3:ca:9d:80:2f:f4:
20:0a:16:42:06:b5:b0:73:2f:b3:91:2e:3d:20:03:
a8:d1:7c:39:b2:41:70:b7:48:3f:bd:02:7b:36:2f:
7f:ac:75:b0:8c:64:b9:8a:59:1b:46:40:96:28:9b:
ab:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:89:0F:DD:61:8E:BD:CF:1E:DE:C6:27:07:0B:F4:E6:36:31:5D:05
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e33362e3233382e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.238.0/23
Signature Algorithm: sha256WithRSAEncryption
70:cd:12:52:a5:75:a9:7a:62:e2:c9:22:6d:cb:54:52:71:f2:
c5:26:6c:7d:1e:fa:65:7c:71:46:8b:95:7e:14:d0:90:01:34:
fe:1e:3a:36:80:8b:52:c0:03:cf:83:fa:0b:2a:05:c1:67:35:
16:cc:66:9f:6d:c5:9f:e7:98:d7:9d:92:64:9d:3c:15:de:05:
75:1f:ac:8c:6e:4d:10:0c:50:0b:7c:88:63:47:57:bf:b8:d3:
be:86:db:ce:42:29:c7:88:36:c8:fe:14:c4:79:f2:a8:16:4f:
7b:01:a8:d9:67:c9:bd:db:25:86:d5:43:33:62:84:12:9d:95:
33:08:1e:f0:51:31:5c:0a:b9:1b:39:44:ac:97:64:ed:84:4b:
25:b5:80:57:bc:ed:7d:5f:81:45:e2:4e:4d:22:85:98:50:91:
98:06:bf:65:fb:45:06:45:96:70:1b:c7:75:00:79:78:d7:34:
45:4c:95:8a:3d:ce:4e:c8:40:6d:a3:a1:17:59:4a:b9:fb:c7:
9d:ab:d8:bd:e8:96:18:40:cb:7b:16:dc:78:97:46:50:f1:5d:
89:1e:7b:72:0e:7c:8d:a7:63:73:b5:76:99:d1:eb:81:3d:a9:
45:da:18:62:0d:e2:70:1e:c0:5c:fc:7c:a1:f3:b7:88:b3:14:
1f:1f:e0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:09 2025 by rpki-client