Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233342e302f32342d3234203d3e20383334.roa
File: 3139332e32342e3233342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: zJJG7VoT4Kt0tFDIVdSQP5pvruNZ9RVl5vYwDOxtyqM=
Subject key identifier: 7B:50:54:2D:50:C2:D9:FE:E1:A9:E7:C6:D9:87:B8:35:EE:20:E6:21
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 021D0458B22D968AEF468002242CFD0919869093
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233342e302f32342d3234203d3e20383334.roa
Signing time: Thu 30 Jan 2025 11:06:12 +0000
ROA not before: Thu 30 Jan 2025 11:01:12 +0000
ROA not after: Thu 29 Jan 2026 11:06:12 +0000
asID: 834
IP address blocks: 193.24.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:1d:04:58:b2:2d:96:8a:ef:46:80:02:24:2c:fd:09:19:86:90:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Jan 30 11:01:12 2025 GMT
Not After : Jan 29 11:06:12 2026 GMT
Subject: CN=7B50542D50C2D9FEE1A9E7C6D987B835EE20E621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:a2:29:12:3f:8e:5f:33:58:2d:98:58:ea:
7c:19:a6:a0:93:d3:eb:68:5a:1e:96:61:ae:ac:41:
17:24:73:ae:be:cd:0e:1e:51:5d:1f:27:40:97:ff:
10:f3:8b:2a:0f:3b:cd:81:19:70:ff:18:31:4a:fd:
1b:6d:3a:73:dd:e1:9b:50:d4:6b:22:a7:8b:8e:04:
14:fd:0c:05:e6:d5:03:d2:77:bc:1d:ab:97:82:1e:
b6:72:45:9c:2b:87:30:ca:8e:19:53:38:ff:b9:88:
37:2b:87:fc:de:d9:8e:3b:c1:ab:05:29:24:71:67:
81:7a:f7:a7:15:35:87:76:55:4b:83:68:d0:c4:38:
5e:de:e2:2c:a4:cd:6e:0e:46:45:30:78:e0:0a:84:
06:9f:e8:05:6c:3e:c4:57:22:31:fb:5d:83:8e:de:
d2:43:75:96:bd:96:c2:1f:d9:de:be:e2:6b:d7:07:
2c:9e:39:b7:a8:95:06:e5:1a:c6:40:94:b9:68:e9:
a2:09:46:09:79:b7:f2:9a:9e:54:47:79:a2:bd:94:
1e:aa:a7:45:0c:5a:69:73:55:83:c3:c7:d5:57:f6:
b0:9c:1f:59:71:ce:a6:22:96:78:f2:0b:62:84:20:
82:be:89:55:56:db:ea:98:2d:85:cf:c8:c6:86:cb:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:50:54:2D:50:C2:D9:FE:E1:A9:E7:C6:D9:87:B8:35:EE:20:E6:21
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.234.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:11:5d:c9:aa:bb:41:5f:d0:eb:17:95:37:78:a9:bf:48:86:
19:34:3e:92:8e:7a:27:e5:4b:23:54:de:fc:64:aa:11:26:f5:
3a:af:49:4e:e8:4e:b9:b5:94:60:e8:01:69:58:75:a6:0b:7c:
82:dd:44:63:a5:02:d4:bd:57:ea:e5:a4:9c:0a:d9:34:1e:e0:
ba:81:4c:23:4b:3d:5b:4b:dd:02:82:12:b8:77:c0:62:0f:71:
7a:f9:a1:de:1a:d0:53:ac:86:ac:99:32:1c:dd:b7:9b:dc:d7:
d1:a1:75:2f:8f:d5:0c:81:b0:d3:16:e4:90:2e:11:7d:39:e1:
be:89:b6:4e:30:7d:ba:88:46:ba:5b:06:81:85:71:4c:3f:ad:
be:b6:c9:1e:37:5f:0d:dd:07:76:3f:92:9f:aa:9a:18:8e:42:
ea:f7:d5:16:b7:98:21:2e:93:97:57:cd:3e:3b:73:5a:6b:1f:
b0:ec:7c:50:98:e3:22:b7:0a:31:12:04:01:3e:57:c2:c2:34:
7c:69:bf:d6:e2:fa:2c:bf:63:02:18:50:36:50:57:28:d6:f6:
61:76:e2:08:09:03:66:81:a2:01:57:52:64:c8:b4:af:c8:26:
33:66:ef:75:bf:fa:2e:26:6f:b5:01:dd:86:13:ac:73:28:b6:
1e:97:55:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:28:39 2025 by rpki-client