Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39342e3130312e3131352e302f32342d3234203d3e203432333636.roa
File: 39342e3130312e3131352e302f32342d3234203d3e203432333636.roa (raw, json)
Hash identifier: SbNjZZ+rTkgG6Q5/8vYTWGuSyv4xe95qXxl9NqK+EJ4=
Subject key identifier: 11:16:AA:8E:79:CD:D5:B0:E7:C0:82:05:0A:50:EA:35:F2:C9:A6:71
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 618278AA6D511475BC910AC75C648B552C2D9990
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39342e3130312e3131352e302f32342d3234203d3e203432333636.roa
Signing time: Fri 31 Mar 2023 12:17:37 +0000
ROA not before: Fri 31 Mar 2023 12:12:37 +0000
ROA not after: Fri 29 Mar 2024 12:17:37 +0000
asID: 42366
IP address blocks: 94.101.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:82:78:aa:6d:51:14:75:bc:91:0a:c7:5c:64:8b:55:2c:2d:99:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 31 12:12:37 2023 GMT
Not After : Mar 29 12:17:37 2024 GMT
Subject: CN=1116AA8E79CDD5B0E7C082050A50EA35F2C9A671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:51:81:f5:90:d8:ad:1f:bc:a2:29:fb:32:08:
4c:c0:1a:86:df:39:72:74:40:c6:a7:db:03:f6:9f:
fc:bd:b5:b8:b8:3f:46:b0:26:30:60:cd:15:65:9c:
75:a2:8a:2e:60:cc:b6:1c:88:ef:59:3f:4f:16:72:
3f:ba:7c:61:ec:f8:24:d2:f1:5b:03:99:a7:73:f3:
e6:b6:69:3b:32:70:8f:63:b9:ff:f4:77:92:3d:72:
67:92:64:cc:2d:a8:80:57:98:4d:13:97:72:77:a1:
77:c9:cc:59:e0:a4:44:65:1e:83:d5:ab:3b:1c:dc:
67:df:35:01:2c:12:b1:33:37:5e:80:80:5b:77:2f:
c8:10:a1:5f:4d:30:ec:f5:2f:e9:9f:94:a3:42:03:
b7:44:3f:2c:16:78:b0:d4:e2:45:8b:40:84:d6:f4:
c8:fe:a4:a2:da:c0:4a:82:a6:e9:ae:3e:65:f2:ef:
30:25:c9:e4:a9:21:c2:1e:a0:fb:bf:69:8a:6c:4f:
b1:8a:0d:a1:b1:29:f0:86:1f:9f:dd:3a:a9:78:44:
87:0d:3f:85:1a:91:e7:2a:06:9d:14:26:a3:b5:80:
cb:5b:d0:3e:5d:40:d9:67:7b:39:a4:5c:fd:f6:52:
d2:4e:b6:63:60:ea:dc:d1:6d:58:f1:1c:1a:94:a4:
32:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:16:AA:8E:79:CD:D5:B0:E7:C0:82:05:0A:50:EA:35:F2:C9:A6:71
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39342e3130312e3131352e302f32342d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.115.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:73:a8:de:2f:d6:94:2d:81:8c:3c:5e:d3:5e:70:2b:99:b5:
bc:91:c4:74:a5:ab:0c:7f:a0:be:ef:45:da:44:2e:d6:35:52:
85:21:ad:e8:0e:fd:87:d4:d2:e6:75:49:25:e8:e9:a2:f5:d5:
f4:b1:48:94:f6:d5:07:6e:0a:0d:25:77:e4:60:80:d8:0b:56:
2a:43:13:2b:5b:e5:20:d2:4e:da:95:ba:fd:49:35:de:2c:b7:
fb:e3:4a:87:ca:a3:a8:e7:39:7b:ca:08:16:46:d3:0c:ad:e6:
a5:22:9d:05:a7:fa:6b:87:e3:f2:a1:77:d9:0d:9a:6e:15:a3:
dc:aa:c6:f9:92:f3:4b:7b:18:c8:e7:01:02:34:b5:d4:fd:a7:
ed:50:04:74:43:e9:3a:34:6d:4a:4b:ff:a5:51:49:a7:41:fe:
2d:fc:15:b7:68:da:0d:c3:4e:8c:72:3e:36:68:04:c0:7f:7b:
66:b7:1b:66:2c:9c:2e:b5:69:5b:76:38:f4:b9:3a:2d:ad:f8:
42:56:2e:bb:f2:5d:c5:a8:9f:e2:96:57:ee:56:37:64:75:59:
63:b7:04:a4:ad:0d:43:37:b3:e6:d5:47:29:a8:31:d0:8a:19:
6e:e8:ab:82:b4:28:66:38:29:7d:cb:32:46:8e:8f:85:73:df:
4c:d2:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:20 2025 by rpki-client