Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e3131332e36362e302f32342d3234203d3e203632353739.roa
File: 3139342e3131332e36362e302f32342d3234203d3e203632353739.roa (raw, json)
Hash identifier: oNSXFVGrKwqFz5H4sGLpS+CJhP5scGaUauINLVWRWuQ=
Subject key identifier: BF:F1:96:02:71:9C:4C:D6:E4:A9:00:80:48:BE:04:3F:67:17:B0:8C
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 692394A4EF1E616AAD7B6D219A080036CD09FFF1
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e3131332e36362e302f32342d3234203d3e203632353739.roa
Signing time: Mon 27 Mar 2023 08:27:31 +0000
ROA not before: Mon 27 Mar 2023 08:22:31 +0000
ROA not after: Mon 25 Mar 2024 08:27:31 +0000
asID: 62579
IP address blocks: 194.113.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:23:94:a4:ef:1e:61:6a:ad:7b:6d:21:9a:08:00:36:cd:09:ff:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:31 2023 GMT
Not After : Mar 25 08:27:31 2024 GMT
Subject: CN=BFF19602719C4CD6E4A9008048BE043F6717B08C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:85:ea:2e:55:f0:9c:1f:1a:af:43:09:92:
61:dc:39:60:d5:99:c4:15:e2:e6:d6:4d:9e:c6:aa:
5e:70:5e:05:95:4b:9a:3b:32:3c:3f:cc:a0:6f:eb:
26:87:9a:ae:10:78:d2:a0:97:84:71:f3:6e:0d:b7:
9e:35:be:3c:bf:66:34:19:0f:94:92:17:06:86:8b:
32:c1:10:15:7c:f9:6a:11:3e:eb:b6:0c:3f:3b:31:
50:ab:66:8f:8b:28:de:86:17:fd:0c:15:25:4a:e1:
f1:51:9d:59:c6:af:e2:2d:68:70:20:ec:01:0a:03:
8b:69:ac:8f:15:34:d7:77:ca:8a:7c:50:72:e5:47:
50:9b:25:ec:d8:ba:20:34:f5:91:f8:6f:c8:fe:01:
d2:ef:ed:95:74:7a:b9:19:e9:e6:40:48:71:cc:31:
63:86:51:48:46:fd:64:5c:a1:a9:38:37:ae:c2:bd:
2c:bf:6f:c8:9e:96:b6:59:29:94:ee:13:c1:f6:53:
cd:a7:42:3e:01:db:21:3e:b2:ee:7c:96:c9:4c:ba:
d7:b8:1f:3c:b9:0a:3d:43:4f:71:fb:9c:05:97:a2:
39:2a:e1:15:3a:76:c9:30:55:72:cb:26:01:6f:14:
2c:da:90:b4:c1:0c:b3:ef:63:5b:a3:6b:29:67:8c:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F1:96:02:71:9C:4C:D6:E4:A9:00:80:48:BE:04:3F:67:17:B0:8C
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e3131332e36362e302f32342d3234203d3e203632353739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.66.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:45:5e:69:28:b8:50:7c:02:3d:6a:fe:ff:ca:7f:05:24:ae:
b6:e6:38:fb:81:0c:e6:70:79:94:ea:8b:50:ab:9d:9f:fb:57:
c4:79:f5:85:17:74:8f:4d:6e:ff:a7:7b:7d:72:eb:f9:61:a5:
32:71:06:62:ab:99:1d:3b:1b:c3:92:11:0d:80:8f:9e:5b:e2:
9b:37:14:85:08:2a:07:eb:13:6d:e7:b7:1e:a1:a9:61:d1:22:
b6:a9:b7:ae:98:de:81:b2:98:f0:cc:fc:eb:d7:ef:1a:70:e6:
aa:12:ce:74:db:03:ae:de:d7:e5:1f:5c:7c:e3:f6:0e:10:f7:
ce:d7:34:c5:4e:d2:ff:92:90:bf:43:e8:cc:cf:51:19:bc:5b:
34:6d:38:9b:2f:09:42:42:aa:fd:a7:34:23:1d:91:d4:3e:49:
68:e1:55:3f:0a:a9:05:f0:41:b0:43:68:b5:6f:61:65:74:92:
5c:46:a4:9e:07:f0:5a:2f:4e:c0:e8:1e:2e:70:ba:d0:5b:38:
71:05:3c:a3:7a:4f:cf:f9:60:07:88:d0:9e:00:cd:91:c1:19:
ce:0e:9e:fb:61:db:60:ed:52:b4:b4:11:ce:aa:26:9a:5b:1e:
47:84:fe:4d:6b:7a:3e:6f:85:c8:65:46:2f:1a:d9:72:89:6f:
a1:43:27:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:39 2025 by rpki-client