Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e352e3135332e302f32342d3234203d3e203432333636.roa
File: 3139342e352e3135332e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: NcUvCBk75K01lu2afiCYYsLuwLhinaemNuwiZG95h8Q=
Subject key identifier: 88:47:B2:A2:A6:96:8C:3B:A6:FD:D3:0F:20:BB:47:76:2F:4A:8F:75
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 45BB56C05D68D129ACC0E3BB7221630F7923185E
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e352e3135332e302f32342d3234203d3e203432333636.roa
Signing time: Fri 31 Mar 2023 12:16:46 +0000
ROA not before: Fri 31 Mar 2023 12:11:46 +0000
ROA not after: Fri 29 Mar 2024 12:16:46 +0000
asID: 42366
IP address blocks: 194.5.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:bb:56:c0:5d:68:d1:29:ac:c0:e3:bb:72:21:63:0f:79:23:18:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 31 12:11:46 2023 GMT
Not After : Mar 29 12:16:46 2024 GMT
Subject: CN=8847B2A2A6968C3BA6FDD30F20BB47762F4A8F75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:40:b1:1e:e8:a8:fc:50:55:16:e3:38:6c:
7b:8f:e3:0b:e9:da:91:73:fc:5b:51:86:5c:05:69:
e3:ea:8d:a9:5c:da:a9:17:57:b2:2b:b1:14:3f:8f:
8d:68:80:74:e6:84:de:46:bc:42:61:f5:00:f7:b5:
85:88:4e:f4:44:e9:15:84:0c:22:d9:24:36:3d:0b:
ed:f8:8c:c7:ae:4b:e5:c9:ec:38:33:f4:b3:76:c9:
c4:1d:ec:0f:7a:a4:28:86:90:5b:fe:13:7b:68:31:
59:49:18:4e:b4:8b:05:b6:30:0d:b5:3b:1a:44:6f:
00:e8:ad:43:29:43:81:81:0d:b2:a4:4b:b6:01:10:
a5:77:14:c2:32:f8:e3:0b:eb:2a:2d:31:a8:b8:05:
67:f2:f9:f3:13:4e:e9:42:ff:a1:74:e9:91:9d:62:
c7:63:51:3b:c4:62:87:07:42:48:be:b8:9b:b1:6b:
71:c4:c5:bf:bf:bd:d4:ff:84:ce:46:19:38:23:40:
b8:11:ae:25:70:c2:ce:48:44:8d:b1:83:50:51:74:
0f:63:f9:bc:8c:f6:65:08:27:b4:36:71:65:a3:5e:
20:75:01:18:d6:c2:df:f5:d5:87:fc:a4:8d:ee:8b:
7a:76:31:39:64:db:f6:2b:1b:5d:ac:78:66:94:84:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:47:B2:A2:A6:96:8C:3B:A6:FD:D3:0F:20:BB:47:76:2F:4A:8F:75
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e352e3135332e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.153.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:8d:ad:f2:a8:98:bc:1b:bf:ad:9a:fd:b8:bd:b0:ff:a1:da:
49:eb:b4:13:50:25:a4:b9:92:f1:38:d5:16:02:51:7c:1f:c8:
56:c4:fd:e0:dc:fa:36:d7:b7:f4:d8:6c:a5:3d:17:ae:e2:bf:
07:08:3a:38:1a:cf:c7:cc:23:a3:94:81:d4:3e:f3:86:74:75:
b2:b1:22:0c:81:47:5c:9f:b2:98:47:a4:55:e8:7d:13:c6:45:
3c:04:1e:5c:6c:15:a1:28:40:73:70:f5:b5:d6:df:1a:c5:82:
cf:45:ed:14:ad:0f:af:49:e0:7a:a7:9b:04:6e:1a:72:bf:ea:
3b:36:c4:96:7a:ff:d1:8c:95:75:f6:ef:f9:c7:0d:1d:29:b2:
5f:95:ef:d5:85:ca:41:25:08:3d:c8:d6:13:a8:07:e9:08:27:
c9:e3:e8:23:2f:97:82:84:6c:08:ba:3c:b2:89:d2:26:67:6e:
f5:86:ef:84:93:85:90:d6:97:ec:ec:71:32:21:fc:1d:06:d1:
04:78:98:cd:9e:aa:59:cd:a4:37:68:41:7f:4c:c4:09:d2:ed:
bd:0f:c6:72:2b:10:51:10:3a:44:9f:f0:c3:9b:23:fb:99:54:
f1:ab:f7:e8:b8:68:4d:24:2a:d2:4f:92:08:94:05:b1:dd:76:
27:a1:44:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:55 2025 by rpki-client