Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38312e32322e33372e302f32342d3234203d3e2030.roa
File: 38312e32322e33372e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: uwNadeYp81PSP55/gvIYGSYbya2n2E4QLKKSM6Kbfag=
Subject key identifier: 64:E4:9D:9E:FF:64:88:69:A3:BA:99:CC:B3:5A:D7:00:C5:2B:6F:84
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 4007896B691BEA970136FD00CE36E671CED7ED3D
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38312e32322e33372e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:58 +0000
ROA not before: Mon 27 Mar 2023 08:22:58 +0000
ROA not after: Mon 25 Mar 2024 08:27:58 +0000
asID: 0
IP address blocks: 81.22.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:07:89:6b:69:1b:ea:97:01:36:fd:00:ce:36:e6:71:ce:d7:ed:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 27 08:22:58 2023 GMT
Not After : Mar 25 08:27:58 2024 GMT
Subject: CN=64E49D9EFF648869A3BA99CCB35AD700C52B6F84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:ff:17:9a:5f:c1:fd:12:eb:89:99:f8:0a:
a5:3c:73:17:ed:7f:d5:d7:b9:33:9c:51:00:ed:ed:
01:23:b8:ab:f6:e2:02:10:ab:b4:e0:e7:01:cc:b2:
c2:a1:8b:e2:66:83:5b:38:2e:32:1f:1e:32:24:fb:
af:41:c2:9f:51:dc:ce:3b:6f:56:1b:2a:a6:9f:63:
99:91:f7:d7:ce:8f:ac:3a:18:b1:8f:a3:f6:82:67:
56:fc:6d:45:0a:d3:eb:cb:38:97:01:12:39:8a:2d:
a1:16:fa:e7:59:97:77:00:81:59:df:b8:6a:1a:63:
9d:95:00:52:60:75:13:f1:34:1b:0d:09:74:a7:a0:
2f:af:66:39:ad:dc:58:d2:9f:b0:7b:ff:9b:42:66:
20:f0:90:7e:55:97:b0:93:d0:c7:e0:6e:fa:15:15:
a2:67:4c:57:2c:99:3d:73:20:05:e0:4a:ba:f6:6f:
b5:b6:6f:c1:02:83:5e:a9:c8:e2:e4:e2:c3:54:be:
4f:c3:65:eb:67:7d:21:e7:1d:74:0a:0c:83:c2:0f:
1c:e8:a4:f0:b5:a5:1a:56:75:c0:be:05:3a:6c:35:
40:0e:80:75:29:c8:90:b0:4b:bc:e8:b4:4f:af:ff:
74:5e:2d:b6:d5:1e:56:d3:c9:ca:78:29:a5:6e:f1:
df:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:9D:9E:FF:64:88:69:A3:BA:99:CC:B3:5A:D7:00:C5:2B:6F:84
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38312e32322e33372e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.37.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d2:d4:31:19:b6:6c:39:f7:4a:af:f9:eb:f6:0e:cb:89:b7:
da:7e:85:15:80:72:be:db:da:fe:2a:13:6b:2d:6d:e0:56:f5:
d9:8c:da:af:ef:2f:52:7e:88:ae:f2:0e:34:5a:74:9a:e1:a4:
a1:f8:7f:bf:88:28:a4:56:ee:01:c1:8d:22:08:cf:e1:38:db:
7f:3d:c3:6a:d1:c8:d8:c1:29:87:96:fe:6b:b6:f2:a5:48:20:
fb:49:9a:75:5f:75:76:47:e4:bc:13:ff:37:1f:aa:69:90:19:
44:91:56:80:33:f2:50:84:9f:ba:68:79:96:bb:bd:0c:51:5c:
7a:55:56:18:95:05:12:2d:ec:55:0f:d3:1f:74:ff:fa:61:3b:
95:b8:59:b5:ec:27:87:26:d6:75:e1:25:fc:53:ef:b4:22:3b:
c5:13:b7:79:d9:12:e4:a7:6c:dc:26:aa:25:1e:7b:09:0b:b5:
41:75:12:8b:09:f9:cb:8f:f1:f0:03:7e:83:e9:91:a5:60:ca:
09:88:31:69:99:ed:04:76:c7:dd:4a:b7:14:3f:b0:ff:93:50:
f2:2c:9b:ce:51:82:d1:9b:7b:6c:a2:ec:3e:dd:6f:11:ca:e4:
14:ba:a8:56:49:0c:64:2e:68:ac:ee:01:74:17:8e:37:a3:57:
73:86:f0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:06 2025 by rpki-client