Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39342e3130312e3131352e302f32342d3234203d3e20313336373837.roa
File: 39342e3130312e3131352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Xj6Wl+tfv/finypfaFxMmblwEr3YKCkTqFmO8/w/YKM=
Subject key identifier: 46:72:5B:52:61:0F:C3:DD:3F:F0:3B:B5:D5:1E:13:05:A7:E6:F0:E5
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 0A188BF5B4D1A240194F181DE5053C0476D8F8DB
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39342e3130312e3131352e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 01 May 2023 13:22:25 +0000
ROA not before: Mon 01 May 2023 13:17:25 +0000
ROA not after: Mon 29 Apr 2024 13:22:25 +0000
asID: 136787
IP address blocks: 94.101.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:18:8b:f5:b4:d1:a2:40:19:4f:18:1d:e5:05:3c:04:76:d8:f8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: May 1 13:17:25 2023 GMT
Not After : Apr 29 13:22:25 2024 GMT
Subject: CN=46725B52610FC3DD3FF03BB5D51E1305A7E6F0E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:82:df:5d:24:82:7b:c4:ea:48:fd:ed:8d:
7b:26:51:d3:e6:8f:c4:eb:82:8a:9d:fc:76:36:68:
91:c8:e3:7f:1a:b1:ba:52:2c:e6:12:b3:b7:2d:62:
fa:e0:04:e4:bf:14:df:99:3d:27:79:d3:5d:07:e0:
1d:a3:17:94:cb:b3:50:21:6a:93:e1:6d:88:e7:ea:
cc:06:fe:f5:87:02:bd:14:cd:cf:fb:62:cb:6e:c9:
ca:8e:97:f4:a5:fb:a6:3d:f2:98:33:eb:ef:08:48:
b3:7b:1c:38:34:e7:aa:0d:48:f2:37:d8:e6:a4:a6:
49:aa:2d:47:60:13:ff:50:90:a3:cc:c2:df:1f:63:
29:cd:5f:46:f1:ef:91:91:6a:0f:a5:71:c6:d6:88:
b4:2d:da:93:ce:e0:a5:6c:8e:20:0f:8e:6e:ed:85:
3e:f6:1c:40:a0:7f:a9:c6:82:10:39:46:e0:c1:fb:
f1:f8:3f:13:28:d9:a8:98:b6:d4:85:a2:c6:de:9b:
89:37:b2:73:52:6d:f6:bb:42:81:af:2a:39:19:43:
30:82:35:98:75:87:e8:ef:c6:87:97:af:90:b6:32:
13:0f:3f:2e:0f:7a:fd:07:ae:eb:53:65:a3:0c:a5:
fa:62:1a:8c:80:43:8d:83:17:ad:6e:84:c8:6c:9c:
6d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:72:5B:52:61:0F:C3:DD:3F:F0:3B:B5:D5:1E:13:05:A7:E6:F0:E5
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39342e3130312e3131352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.115.0/24
Signature Algorithm: sha256WithRSAEncryption
87:78:a4:58:95:0b:e8:5b:58:dd:9c:af:bd:24:fc:64:c4:c8:
4b:98:1d:cc:56:4f:24:96:91:a6:51:8f:41:33:df:dc:7c:4d:
96:34:e0:c3:fc:7b:a1:1b:14:65:22:af:5c:f1:9f:e8:68:ad:
a0:fe:79:6e:7d:65:ed:5f:86:3e:76:1e:b3:9f:3a:1a:36:36:
d8:1e:7a:4b:aa:48:68:50:12:4e:b9:fd:58:24:d7:23:9a:54:
73:89:fc:5e:51:e9:03:4b:20:5e:8f:d9:c7:3b:9c:73:ae:c8:
76:13:ec:b8:41:be:99:75:95:a6:97:0f:10:31:a1:31:89:c6:
6e:04:1a:14:e7:96:c2:bb:b2:bc:ff:a7:4b:21:a0:95:9e:f2:
9d:7d:a7:ea:7f:d0:97:f2:b7:61:c5:6b:f1:77:7e:13:85:ab:
2d:7a:bf:7e:35:34:4a:82:f5:45:e4:49:4b:a4:c5:01:38:33:
e8:4f:50:10:16:0c:7f:ac:6b:7a:10:d8:56:94:46:cf:65:a6:
32:2e:72:68:b6:99:07:26:54:22:27:f6:54:57:03:b0:b3:c7:
b1:2e:5f:f4:de:ba:66:18:cb:69:d0:74:2b:db:cd:05:a6:b5:
74:53:bd:b1:f1:57:ec:06:f7:95:bf:ff:3f:64:1f:ea:e0:71:
71:76:81:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:46 2025 by rpki-client