Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39322e3131382e35322e302f32322d3234203d3e203432333636.roa
File: 39322e3131382e35322e302f32322d3234203d3e203432333636.roa (raw, json)
Hash identifier: UOQHlPagHGQtasu105jUtOIWfphXqIFdZ+YlB/rmSQ8=
Subject key identifier: D8:10:A1:47:60:09:4C:BA:AF:B9:E9:76:40:A3:27:45:72:10:C8:0F
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 3ED705322BF44FF20D900116DE1CE1F9BC3FB597
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39322e3131382e35322e302f32322d3234203d3e203432333636.roa
Signing time: Fri 31 Mar 2023 12:19:36 +0000
ROA not before: Fri 31 Mar 2023 12:14:36 +0000
ROA not after: Fri 29 Mar 2024 12:19:36 +0000
asID: 42366
IP address blocks: 92.118.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d7:05:32:2b:f4:4f:f2:0d:90:01:16:de:1c:e1:f9:bc:3f:b5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 31 12:14:36 2023 GMT
Not After : Mar 29 12:19:36 2024 GMT
Subject: CN=D810A14760094CBAAFB9E97640A327457210C80F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:9a:36:ea:51:1a:0e:36:f3:50:af:ba:da:
74:14:08:03:ce:0b:46:6c:bf:2c:6c:80:df:fd:4e:
66:38:db:af:e7:4f:50:5b:bf:5f:3b:4a:4e:4f:bc:
c1:02:23:20:58:e0:9b:3b:19:57:c5:5b:7b:a7:c6:
58:d3:ae:e5:11:f7:4f:d7:a9:73:81:33:8d:a2:b6:
8a:d8:6f:a6:32:7b:2f:a8:41:5c:03:54:0d:30:cb:
4e:8a:2c:21:96:11:4a:fd:13:a8:82:4c:83:67:bf:
9e:b5:00:9c:f3:d2:e1:28:11:3b:b1:8e:04:65:48:
52:f5:03:6a:66:e2:ee:8f:6d:ba:d5:fd:e1:ab:02:
3f:97:ea:09:fa:b1:b3:65:8d:34:15:c1:e5:ef:7f:
f3:92:cc:10:16:9b:26:81:23:60:37:14:59:77:c2:
8d:ca:d4:68:ae:1c:60:07:43:c2:1c:ff:8c:e0:26:
0f:a3:f5:a8:6d:42:a7:ca:4a:77:eb:d1:fd:1c:fe:
8c:44:58:c3:f4:8a:ac:69:36:7c:18:97:04:f2:59:
5c:e0:68:47:c7:c4:6e:d2:d8:a4:11:fd:dc:91:21:
e4:1b:0b:a6:53:4d:ae:f1:51:f8:09:e7:14:5f:27:
0b:a5:8e:92:8f:7f:bd:fd:1f:3b:6a:d6:0b:c8:04:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:10:A1:47:60:09:4C:BA:AF:B9:E9:76:40:A3:27:45:72:10:C8:0F
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39322e3131382e35322e302f32322d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.52.0/22
Signature Algorithm: sha256WithRSAEncryption
85:cc:38:15:db:48:01:86:5d:d1:c6:34:a5:30:fd:bd:15:94:
2f:94:38:eb:64:ba:82:1d:c7:67:ee:16:77:9c:78:a9:0e:f5:
90:c3:1c:83:a2:c7:62:3c:5a:9b:01:db:23:a2:35:74:75:05:
f1:d6:2b:2f:a4:5d:4b:c4:38:57:98:19:0b:ca:86:30:63:57:
56:bb:80:86:24:cb:9d:ff:30:c8:1a:d4:a2:e3:5e:51:5f:44:
c5:74:2b:23:b7:d5:ab:a9:f4:72:6e:c7:fa:a0:fd:2c:9d:94:
f4:a0:32:ff:0a:20:f3:f2:81:78:8c:ce:b5:b0:8f:d7:95:43:
4f:f1:eb:52:8c:fd:b0:95:a6:f5:68:ff:67:0f:78:be:ef:8d:
0f:65:43:a7:ae:3c:92:3e:67:2a:7e:59:55:6e:fd:ff:67:f2:
3c:64:40:36:01:d8:2a:35:4f:3c:89:7a:d6:04:00:69:67:c1:
1c:0d:ef:89:28:d0:4f:88:fc:8e:5a:ca:49:d7:76:b5:4c:ca:
02:98:36:8b:83:e0:a8:79:01:82:34:f5:64:db:0e:ae:0e:dc:
9e:02:e6:ef:80:ea:38:4a:43:59:ae:68:ff:bd:9c:36:9b:5c:
96:93:45:f5:0d:33:40:9d:a4:24:59:2c:27:e2:96:ec:84:6f:
ad:9d:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:43 2025 by rpki-client