Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139322e3134352e33362e302f32342d3234203d3e2030.roa
File: 3139322e3134352e33362e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: nYrzTOw0Cfx8xpqAlZlW0OmP5hMo0U5MKvSzxYiluVQ=
Subject key identifier: 44:EB:1A:F0:98:EC:63:02:F7:3D:AB:0A:57:60:96:C1:10:23:62:77
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 344336267B7037AB8F22E77608FFE778E8774640
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139322e3134352e33362e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:51 +0000
ROA not before: Mon 27 Mar 2023 08:22:51 +0000
ROA not after: Mon 25 Mar 2024 08:27:51 +0000
asID: 0
IP address blocks: 192.145.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:43:36:26:7b:70:37:ab:8f:22:e7:76:08:ff:e7:78:e8:77:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 27 08:22:51 2023 GMT
Not After : Mar 25 08:27:51 2024 GMT
Subject: CN=44EB1AF098EC6302F73DAB0A576096C110236277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e9:71:d1:57:47:e8:56:93:df:38:0f:46:73:
5c:49:7b:cb:de:9d:e7:45:ec:f9:1f:c8:30:bc:0a:
df:84:7c:f2:09:d0:97:f2:47:3f:8b:98:14:01:fe:
a8:a5:ea:29:da:50:2a:76:1f:5e:bf:a6:0c:32:84:
b1:df:c5:71:ec:e1:46:83:33:3e:60:00:ba:51:02:
e9:2d:d3:ad:92:b6:a8:f0:d6:86:02:ba:0e:a9:55:
4e:ea:c9:3a:47:10:20:49:e6:b1:c7:60:bb:62:22:
50:4c:a1:58:79:f2:54:63:14:d5:f8:3b:18:88:5c:
0b:71:ce:67:65:1a:bc:b0:dc:4c:c5:48:1d:5a:49:
f7:8d:36:fa:a7:8d:2d:bc:61:92:2e:5d:03:ba:3e:
db:76:b4:13:97:77:27:e6:85:9c:70:68:7d:47:aa:
39:d2:c4:6f:0a:a8:19:48:bb:61:d5:9f:59:3c:6f:
9f:0e:b6:24:6e:56:4e:15:0c:e9:30:42:25:dc:ff:
f9:59:1c:0b:97:aa:5e:e1:60:8c:b4:24:53:7b:2e:
e7:56:8f:7b:02:f7:3e:bd:af:18:66:07:57:c8:a1:
7f:29:96:a4:a5:fa:73:a0:56:bc:ef:6c:c1:49:57:
d6:fe:a4:dc:b6:a8:9e:5d:da:63:ad:f0:01:59:fc:
14:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EB:1A:F0:98:EC:63:02:F7:3D:AB:0A:57:60:96:C1:10:23:62:77
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139322e3134352e33362e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.36.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:30:91:3f:3f:63:5a:e2:3c:12:e8:ed:b7:5f:38:30:78:15:
93:7a:50:c6:7b:0c:5e:57:41:5c:4f:54:59:74:c0:50:1e:37:
63:2f:7a:83:95:13:2a:fe:c9:49:36:7b:4a:9c:57:ce:8b:d6:
bb:e0:82:81:fe:e7:c8:05:20:b2:0a:bb:fd:03:c5:30:5c:8d:
98:06:68:2c:e4:e9:23:b9:67:e9:24:33:ea:5c:aa:3f:83:8e:
c7:ff:e4:58:45:3b:3b:48:27:24:16:1c:38:07:b7:16:78:32:
12:d8:d6:20:58:e2:f6:03:86:23:64:02:61:21:92:f0:21:2d:
d7:9e:19:5b:34:5c:b7:63:fc:5a:44:b1:0d:1a:16:49:d8:3f:
db:89:67:ef:99:21:bf:84:b6:d5:e4:40:9b:68:b3:ec:d8:e6:
71:83:3d:a0:69:90:91:82:e9:eb:df:41:ac:96:27:99:64:35:
ed:6f:4b:3d:e3:7c:e1:77:c8:c9:8d:58:2f:77:d9:a0:22:8b:
ea:3c:62:fb:b6:b7:91:04:be:12:0c:bf:7c:86:22:ef:7d:e3:
8a:76:e0:6f:c2:ce:39:43:69:a2:c6:f0:5a:5f:d9:3f:a2:2a:
9d:37:7f:5e:70:05:fe:15:e9:d4:81:1e:db:a2:ce:81:e6:3a:
1a:9c:91:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:04 2025 by rpki-client