Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: tOfV5v9gipD5h60ww9vKJZsjPrBqkcpvj5gbYOgXnfY=
Subject key identifier: CB:2B:C5:71:ED:C6:CB:AD:1E:A2:F4:E1:B9:D6:A0:D3:48:E2:94:DC
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 02BBD3797BD6A7A133849DFA577AC22A696AAAD4
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS29802.roa
Signing time: Tue 28 Jan 2025 18:00:56 +0000
ROA not before: Tue 28 Jan 2025 17:55:56 +0000
ROA not after: Tue 27 Jan 2026 18:00:56 +0000
asID: 29802
IP address blocks: 193.29.98.0/24 maxlen: 24
193.176.129.0/24 maxlen: 24
194.147.6.0/24 maxlen: 24
194.147.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:bb:d3:79:7b:d6:a7:a1:33:84:9d:fa:57:7a:c2:2a:69:6a:aa:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 28 17:55:56 2025 GMT
Not After : Jan 27 18:00:56 2026 GMT
Subject: CN=CB2BC571EDC6CBAD1EA2F4E1B9D6A0D348E294DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:3e:2e:3b:08:57:2b:87:29:a2:71:ec:6d:
d5:d9:77:33:01:8c:48:b9:b5:8c:77:4a:00:01:d8:
15:eb:2d:af:8c:57:4c:6a:c6:1f:40:44:a6:52:2e:
e8:73:31:bd:df:75:27:99:bf:31:8d:41:d8:d5:66:
3b:ce:1e:1c:30:5a:c7:92:32:d6:ce:33:ac:4c:93:
2f:9d:35:b1:81:3c:4c:e3:81:3d:27:f2:e6:83:06:
c8:a8:39:43:49:7e:77:a6:9b:98:79:c9:8d:ee:48:
07:d0:a4:af:3b:d4:2e:59:10:52:fa:25:64:7d:30:
a1:0b:80:60:1b:53:e5:e3:4a:94:7e:32:07:bb:18:
ec:f0:fc:b0:9f:b8:e3:8e:df:f2:07:a1:1a:fb:78:
aa:70:6f:3e:da:c8:3c:ec:49:1e:b5:e5:cc:a3:46:
3c:e2:cb:37:d7:61:8a:7b:4a:27:36:18:6e:f7:cf:
1e:75:67:0a:1f:f8:e3:11:25:db:09:f0:5f:95:29:
12:5d:1b:c9:81:65:82:77:b0:4a:22:49:2f:ed:73:
45:19:ec:c7:fb:33:d0:a1:f9:33:43:9f:c1:dc:cf:
10:95:e7:18:37:00:9d:72:32:2b:10:47:1a:db:ed:
ae:0b:c4:52:9e:67:95:bc:31:2f:ec:65:68:e8:34:
d1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2B:C5:71:ED:C6:CB:AD:1E:A2:F4:E1:B9:D6:A0:D3:48:E2:94:DC
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.98.0/24
193.176.129.0/24
194.147.6.0/23
Signature Algorithm: sha256WithRSAEncryption
51:9d:12:78:3c:f3:72:28:09:e0:96:cf:ff:d3:d5:ca:79:25:
9f:77:61:18:69:6e:44:a9:25:f7:bb:4a:ef:cf:66:c9:46:62:
19:c0:43:38:e5:bc:45:b5:2e:e5:24:e7:b8:2f:1b:08:28:86:
e9:d8:ae:6c:0d:d5:cf:99:3e:60:b3:b7:8e:9f:04:55:22:f8:
e0:5e:e7:af:76:70:00:e0:95:db:04:50:d0:b5:4e:c9:30:88:
57:0c:b7:23:21:73:a7:b0:10:2d:02:20:a3:32:e2:91:40:d9:
fb:d7:17:eb:18:60:2a:a0:d7:6d:6a:5c:31:54:f6:e2:f5:06:
ee:66:4c:f6:89:ea:1d:41:73:44:5e:0f:53:3a:87:8d:54:83:
e7:da:42:a8:56:bb:d6:b8:85:c1:42:5d:ce:38:22:83:32:31:
f2:dd:46:97:76:df:a7:59:17:9e:db:57:8b:d8:2f:94:20:9b:
27:60:48:9e:53:1c:24:66:02:6e:93:d4:a5:19:5d:1e:69:95:
b3:e1:90:81:1f:89:b4:6f:c8:71:68:c7:7a:ca:a2:68:76:2a:
3d:2e:c6:90:78:23:bc:11:f2:d3:8b:45:0c:d9:73:27:a4:0e:
8e:c0:da:4e:f5:da:9a:54:de:56:63:16:01:ad:93:26:c3:6a:
f2:24:66:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:22:59 2025 by rpki-client