Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/38312e32372e39362e302f32342d3234203d3e203234383531.roa
File: 38312e32372e39362e302f32342d3234203d3e203234383531.roa (raw, json)
Hash identifier: ZdZRlvPz8E9OObfHOShlKU2uuHjCBKEbQURGTOBsuE8=
Subject key identifier: 7B:5F:58:4F:ED:D7:87:54:50:7E:81:EE:90:70:31:81:1F:6C:1F:9D
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 07FA1A46B2C698D2583B0879630E8ED3F0B7FD68
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/38312e32372e39362e302f32342d3234203d3e203234383531.roa
Signing time: Mon 25 Nov 2024 12:43:28 +0000
ROA not before: Mon 25 Nov 2024 12:38:28 +0000
ROA not after: Mon 24 Nov 2025 12:43:28 +0000
asID: 24851
IP address blocks: 81.27.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:fa:1a:46:b2:c6:98:d2:58:3b:08:79:63:0e:8e:d3:f0:b7:fd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Nov 25 12:38:28 2024 GMT
Not After : Nov 24 12:43:28 2025 GMT
Subject: CN=7B5F584FEDD78754507E81EE907031811F6C1F9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:2f:79:c0:3b:35:ae:3b:40:43:b0:a2:29:
3d:b4:4d:9b:41:ed:ad:0e:69:5c:14:8f:bc:b8:d8:
7d:ab:48:0b:77:97:e0:41:21:4c:09:a4:a7:83:22:
22:2d:ec:cd:18:7e:ae:69:e6:d6:1f:5a:de:5e:a5:
07:ac:d6:54:eb:d1:e3:0c:2e:d3:03:38:e0:8b:ed:
5a:69:86:23:d8:6a:aa:4f:03:3c:cc:8c:c5:ab:eb:
cd:ee:30:35:3a:4b:c4:af:56:95:bc:55:5a:2b:29:
9a:36:78:77:3e:b2:8a:67:ad:3d:95:f2:b9:c3:41:
70:c6:11:4c:41:95:a5:44:78:99:63:13:8c:e3:c5:
14:54:5b:39:5d:b5:95:fc:e5:0c:00:77:49:7d:3e:
ef:28:11:55:07:27:c5:ea:bb:f6:17:d7:73:42:7d:
5e:75:39:44:a2:45:98:bf:7f:68:1d:ac:dd:b1:c6:
85:fd:4b:65:04:ce:42:35:86:f3:65:1e:2c:f9:0d:
31:48:72:e7:a8:fc:ca:9a:af:b7:36:fb:aa:3d:ec:
db:0b:07:ff:be:7c:ed:b1:2d:9c:9c:fe:2b:8a:55:
3f:7c:22:0b:bf:83:5d:b0:b0:b3:13:54:86:a7:a4:
dc:55:df:8f:bd:7f:a0:28:8c:13:40:15:84:53:fb:
63:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5F:58:4F:ED:D7:87:54:50:7E:81:EE:90:70:31:81:1F:6C:1F:9D
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/38312e32372e39362e302f32342d3234203d3e203234383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.96.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d3:4a:f6:6a:9d:37:51:59:bc:38:a2:c0:41:6c:1c:7e:88:
4e:15:bb:2e:35:e0:14:91:a1:b1:f1:5a:b3:37:24:3d:f3:5c:
53:da:86:d5:5d:07:c9:a4:83:83:9d:e8:96:b0:42:d0:c2:c6:
ae:92:e3:0c:17:c4:6c:87:81:7a:b5:55:50:42:d8:ba:7d:18:
9c:57:21:07:aa:e3:cf:aa:bf:b8:63:42:db:97:39:a5:d3:67:
9f:bc:c0:67:5d:e2:78:3d:73:03:ac:10:f3:91:5b:84:91:3a:
07:88:00:e3:af:17:a6:4b:7d:49:dc:32:57:13:58:c5:3f:68:
bc:4b:b3:6b:e8:a2:28:1a:9c:52:58:00:5d:78:41:13:2b:13:
7f:37:71:8c:6f:e9:3d:bd:21:fa:80:91:8e:75:4d:cf:5e:aa:
6c:d5:bf:a0:4d:eb:70:89:90:a2:1e:0e:3f:66:05:fb:29:aa:
b6:1d:1d:ec:c3:b7:34:3d:4b:ce:e4:31:5c:22:00:b0:07:1c:
fb:73:09:ad:9a:65:09:d0:25:71:88:4b:bc:79:8e:78:e9:5a:
d1:04:fb:1d:cd:7e:46:41:47:63:84:c9:f8:5a:c1:e5:4e:4f:
58:73:bd:db:29:9b:63:ca:80:3d:6b:2b:78:c1:97:88:9b:a2:
bc:5b:a2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:55:10 2025 by rpki-client