Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e31352e3131302e302f32332d3234203d3e203432333636.roa
File: 3139342e31352e3131302e302f32332d3234203d3e203432333636.roa (raw, json)
Hash identifier: azC3u5BDSOLeCOpm3+EFFVijxegn4aoYKl8/+cO0En0=
Subject key identifier: 45:0C:23:23:1C:4B:ED:1A:84:7C:3B:EA:3D:87:3D:EB:5A:CD:CD:0D
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 797D23A59A4876E3F93A0D46F1FE0CB025A53E64
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e31352e3131302e302f32332d3234203d3e203432333636.roa
Signing time: Fri 31 Mar 2023 12:18:05 +0000
ROA not before: Fri 31 Mar 2023 12:13:05 +0000
ROA not after: Fri 29 Mar 2024 12:18:05 +0000
asID: 42366
IP address blocks: 194.15.110.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:7d:23:a5:9a:48:76:e3:f9:3a:0d:46:f1:fe:0c:b0:25:a5:3e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 31 12:13:05 2023 GMT
Not After : Mar 29 12:18:05 2024 GMT
Subject: CN=450C23231C4BED1A847C3BEA3D873DEB5ACDCD0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:12:a1:d0:15:47:dc:62:61:81:87:99:8a:
81:a0:e8:7a:57:b8:ec:c0:57:3b:c6:e8:a9:f8:28:
ca:d1:02:d9:36:05:e0:03:0d:4a:a3:c5:07:9c:d0:
8c:00:1d:c6:0e:fd:16:9e:7d:4a:9c:49:20:45:38:
01:0a:3f:2e:0b:2d:dc:d5:01:e3:63:bd:4f:3b:4c:
40:db:c1:3b:ad:82:8d:82:a1:7f:19:e9:5b:36:28:
f1:53:80:65:95:59:fe:69:90:ec:f5:90:fa:ab:5f:
5d:e1:cb:bd:e1:f4:07:86:a3:71:13:d8:99:4e:01:
41:32:1a:d7:47:24:74:5f:e7:17:50:76:aa:27:07:
86:c2:7e:50:a7:3b:56:01:68:a2:75:c6:20:12:40:
59:fd:73:52:09:92:cc:09:fb:ae:06:ba:30:17:1f:
ce:2d:f7:fd:7e:a3:1d:99:b2:cf:0e:e3:50:10:26:
b2:ef:6f:39:cd:43:3b:ff:27:9c:2c:2e:5e:86:6d:
f9:1d:4e:d2:55:f2:cd:61:c5:7e:7a:fd:3a:7b:e8:
7e:a3:62:d2:a8:fb:92:3c:bb:6d:f9:6b:58:41:ef:
ad:ba:0a:af:12:ad:4c:d3:a2:6e:c7:97:39:a5:fd:
13:ff:b7:3f:bb:05:21:b8:7b:e8:7a:fd:2c:1b:b8:
b2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0C:23:23:1C:4B:ED:1A:84:7C:3B:EA:3D:87:3D:EB:5A:CD:CD:0D
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e31352e3131302e302f32332d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.110.0/23
Signature Algorithm: sha256WithRSAEncryption
51:30:55:9a:19:b8:48:ae:d1:e4:fd:97:3a:e4:62:e0:a1:e8:
4f:e3:56:de:68:5e:b3:6b:c0:9f:e9:d6:82:2d:5e:52:ea:f7:
8c:f3:a9:eb:98:f0:70:82:99:ca:b5:29:d9:1a:2c:4c:63:1d:
4c:d2:0f:fb:12:1b:45:36:e9:54:7a:75:93:63:eb:1f:07:e9:
c1:3c:71:c2:13:10:a3:53:e4:ca:ff:c5:d5:7b:46:3f:3a:f0:
9b:f2:cb:4e:a4:59:a2:c3:bb:eb:8e:b6:99:db:ab:b7:c0:7f:
6a:37:ab:31:15:c5:02:c8:8a:70:33:41:8a:e7:32:3e:31:53:
4b:dc:13:83:ad:4f:6d:1c:00:1c:06:45:6e:0c:c5:2a:0b:a4:
c6:26:e4:ad:d6:78:c2:7f:c2:d3:ad:3f:e9:e1:92:3b:b5:e8:
2e:ca:f7:f7:40:1c:8c:79:f9:21:59:18:4a:90:66:35:90:71:
60:88:69:3c:8d:a5:06:46:7f:b8:6e:c9:57:7c:67:8d:91:ec:
86:7c:c7:7c:ef:2f:c3:19:15:04:f6:60:46:8c:34:3c:ed:76:
4a:4d:2b:d0:73:73:a0:df:0b:da:fc:3e:6c:65:36:b4:3a:84:
ac:a1:4c:a0:1e:22:de:3e:13:10:bb:cc:2c:1c:74:bd:55:cf:
a0:d9:e5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:38 2025 by rpki-client