Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39322e3131382e36332e302f32342d3234203d3e2030.roa
File: 39322e3131382e36332e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: TpTG0Ho89foJ7i4E741DneVY4XYJv5zlAxnjG5xDdj0=
Subject key identifier: 42:70:0D:7E:5A:76:FC:4F:95:EE:80:B0:95:25:8E:50:76:6B:1A:D7
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 7C2010375EEA6DD96251E7E9ADFF3E73B8D7EFBE
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39322e3131382e36332e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:27 +0000
ROA not before: Mon 27 Mar 2023 08:22:27 +0000
ROA not after: Mon 25 Mar 2024 08:27:27 +0000
asID: 0
IP address blocks: 92.118.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:20:10:37:5e:ea:6d:d9:62:51:e7:e9:ad:ff:3e:73:b8:d7:ef:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:27 2023 GMT
Not After : Mar 25 08:27:27 2024 GMT
Subject: CN=42700D7E5A76FC4F95EE80B095258E50766B1AD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:ae:45:8e:b8:a1:92:0d:c5:a3:ee:5b:36:
e6:e0:36:4d:3f:3d:9d:83:82:af:6f:60:ad:e3:f1:
86:3b:43:58:ab:98:3d:58:0a:7a:26:50:5f:6d:44:
27:6d:2f:10:4e:c5:df:37:2d:5e:64:4e:fa:ed:83:
3f:9a:e9:f3:c2:c4:be:73:7d:d8:2e:26:10:7c:d1:
a5:d7:9f:d9:e5:b1:d2:92:5e:1f:a8:d7:08:3c:63:
f6:b1:f5:93:53:5a:29:b2:06:ec:6b:ac:80:66:26:
57:eb:61:80:62:2c:f7:82:33:ca:4f:b3:66:6c:e4:
8e:05:63:72:20:6a:9c:a4:54:06:a0:93:30:b7:8a:
fb:7b:e2:67:e5:ff:c3:5a:36:31:b2:56:43:a2:27:
13:6b:e5:61:84:ef:3c:a7:2d:b8:41:4b:50:83:28:
1b:41:4e:ec:13:64:37:36:1f:5e:32:55:f0:ec:ba:
0e:d5:b2:e7:a5:10:95:01:ff:03:b9:0d:ef:ec:69:
ae:2d:ae:f0:38:f1:c2:2b:c0:27:f0:d6:e3:73:b0:
90:34:2a:33:7f:db:5a:06:05:7a:48:1b:09:57:86:
a2:81:5f:69:54:d6:d2:84:e5:ea:37:3e:58:ee:29:
0e:63:75:3b:6b:a9:98:e4:15:37:47:7b:57:24:2a:
8a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:70:0D:7E:5A:76:FC:4F:95:EE:80:B0:95:25:8E:50:76:6B:1A:D7
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39322e3131382e36332e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.63.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e0:ae:14:94:52:0c:c6:35:15:2f:a4:30:50:23:f2:bd:93:
d6:95:93:77:26:3f:09:df:1c:92:14:4f:49:eb:fc:f0:a4:3f:
dd:3a:bc:5a:93:ae:f2:fb:e3:30:c6:da:b4:77:eb:fd:40:7a:
87:45:11:67:5a:3e:2a:b1:48:cf:ad:6e:c8:0c:3f:f3:ee:4a:
08:56:f1:50:78:52:d2:e6:43:b1:92:6f:12:6f:83:b3:16:fb:
05:05:80:0f:76:06:bd:46:7e:94:5d:07:29:27:71:98:53:05:
a7:a7:90:2c:a0:cc:5c:7e:43:22:86:f4:d6:cd:f5:2b:3e:4f:
14:d7:97:84:46:26:cc:95:39:af:89:52:7a:bf:02:0f:b6:55:
63:da:20:b7:6a:a1:3b:08:13:36:2a:cd:6e:9b:e8:50:99:27:
c0:28:e5:d0:d1:89:83:78:7b:ac:a3:6c:56:fe:5f:8c:b3:ac:
74:15:0c:66:2b:40:ca:4f:72:84:3c:47:69:b8:96:3d:73:c2:
bd:f7:1f:f3:6c:c6:85:a9:e0:88:73:a8:06:46:bf:bb:e1:b3:
db:b5:f8:03:0e:70:9d:45:da:29:4f:e7:63:44:26:0d:38:3d:
ce:ef:73:b7:91:e0:0c:45:5d:c5:dd:1f:59:cb:80:0d:e4:56:
a6:b9:24:f8
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUfCAQN17qbdliUefprf8+c7jX774wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTJjMmE4MzU0Njg5YWVjMmE3NGZjYTE0OTQ0OTI3NjIx
YmEyN2M5NDAeFw0yMzAzMjcwODIyMjdaFw0yNDAzMjUwODI3MjdaMDMxMTAvBgNV
BAMTKDQyNzAwRDdFNUE3NkZDNEY5NUVFODBCMDk1MjU4RTUwNzY2QjFBRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLyq5Fjrihkg3Fo+5bNubgNk0/
PZ2Dgq9vYK3j8YY7Q1irmD1YCnomUF9tRCdtLxBOxd83LV5kTvrtgz+a6fPCxL5z
fdguJhB80aXXn9nlsdKSXh+o1wg8Y/ax9ZNTWimyBuxrrIBmJlfrYYBiLPeCM8pP
s2Zs5I4FY3IgapykVAagkzC3ivt74mfl/8NaNjGyVkOiJxNr5WGE7zynLbhBS1CD
KBtBTuwTZDc2H14yVfDsug7VsuelEJUB/wO5De/saa4trvA48cIrwCfw1uNzsJA0
KjN/21oGBXpIGwlXhqKBX2lU1tKE5eo3PljuKQ5jdTtrqZjkFTdHe1ckKop1AgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQUQnANflp2/E+V7oCwlSWOUHZrGtcwHwYDVR0j
BBgwFoAUEsKoNUaJrsKnT8oUlEknYhuifJQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzcvMTJDMkE4MzU0Njg5QUVDMkE3NEZDQTE0OTQ0OTI3NjIxQkEyN0M5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VzS29OVWFKcnNLblQ4b1VsRWtuWWh1
aWZKUS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzcvMzkzMjJlMzEzMTM4MmUzNjMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABcdj8wDQYJKoZI
hvcNAQELBQADggEBAG3grhSUUgzGNRUvpDBQI/K9k9aVk3cmPwnfHJIUT0nr/PCk
P906vFqTrvL74zDG2rR36/1AeodFEWdaPiqxSM+tbsgMP/PuSghW8VB4UtLmQ7GS
bxJvg7MW+wUFgA92Br1GfpRdBykncZhTBaenkCygzFx+QyKG9NbN9Ss+TxTXl4RG
JsyVOa+JUnq/Ag+2VWPaILdqoTsIEzYqzW6b6FCZJ8Ao5dDRiYN4e6yjbFb+X4yz
rHQVDGYrQMpPcoQ8R2m4lj1zwr33H/NsxoWp4IhzqAZGv7vhs9u1+AMOcJ1F2ilP
52NEJg04Pc7vc7eR4AxFXcXdH1nLgA3kVqa5JPg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:52 2025 by rpki-client