Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS32489.roa
File: AS32489.roa (raw, json)
Hash identifier: TRQlzovIRSPjJJyJag9zgnDdkwG2+o8B7oOMLcSSB1Y=
Subject key identifier: A8:5F:F8:3B:C0:AD:73:34:F5:33:04:F5:50:DF:99:2B:01:20:73:E0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1E125137AC5C99A1F0EC331E033EC7B74ADD77B9
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS32489.roa
Signing time: Fri 31 Jan 2025 17:47:46 +0000
ROA not before: Fri 31 Jan 2025 17:42:46 +0000
ROA not after: Fri 30 Jan 2026 17:47:46 +0000
asID: 32489
IP address blocks: 92.113.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:12:51:37:ac:5c:99:a1:f0:ec:33:1e:03:3e:c7:b7:4a:dd:77:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 31 17:42:46 2025 GMT
Not After : Jan 30 17:47:46 2026 GMT
Subject: CN=A85FF83BC0AD7334F53304F550DF992B012073E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d3:72:b3:2e:5c:e7:65:ea:ea:88:b1:11:d6:
5d:35:e2:fa:cf:44:10:78:ae:03:72:a1:8c:6d:19:
82:f8:66:ac:31:d7:e0:3c:e4:82:d3:cd:5a:19:b1:
19:a0:44:aa:36:c0:7f:00:59:24:cf:46:c4:0f:f6:
5f:ae:97:f8:ac:e0:2b:3c:d3:78:ad:1a:e0:c8:f6:
10:b6:4c:e7:2a:ee:3f:17:d0:1e:af:fe:53:ed:4e:
ee:96:03:de:e1:44:6d:5c:66:50:f6:c9:28:c5:5c:
ae:11:f8:b3:be:fd:77:5e:11:c7:7d:28:2e:83:de:
c6:ba:f5:7a:ec:3b:8e:0f:53:ce:c6:a7:a6:6f:67:
47:a5:ca:a8:8f:4a:79:d2:ad:fa:d2:bb:81:a1:82:
d9:4b:aa:1b:a6:c1:53:2a:8c:22:44:03:26:20:87:
54:12:b5:9c:b5:21:85:47:f7:2e:6a:63:05:8a:1d:
95:83:b9:50:d5:7f:a7:93:f0:0a:11:99:f9:c4:04:
9a:90:2b:7f:5d:5f:d2:0c:81:c4:a8:10:4f:eb:d6:
b4:ef:b0:02:94:b4:23:83:32:fb:76:80:3b:c0:82:
79:e0:88:66:57:6d:9b:3a:a0:ff:40:e0:8c:9b:6a:
fe:29:e8:14:87:16:b4:a1:a4:4c:52:09:a4:44:d0:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5F:F8:3B:C0:AD:73:34:F5:33:04:F5:50:DF:99:2B:01:20:73:E0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS32489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.113.91.0/24
Signature Algorithm: sha256WithRSAEncryption
25:5a:c8:ab:82:00:2d:d9:a9:e8:2d:7c:d1:0d:e2:7f:8a:bf:
19:86:2a:b8:ac:a9:05:ea:a1:0b:83:43:61:4e:6d:95:ae:c1:
d0:dd:4b:80:0c:8b:9c:24:44:df:53:32:43:89:77:0e:f7:43:
d5:00:17:5b:4e:5b:89:5f:79:d3:26:c9:4b:75:b0:08:82:64:
eb:4a:57:86:67:a3:ce:82:67:40:86:c7:99:82:75:5f:a8:ce:
fd:3c:fb:42:52:b4:09:4d:89:0e:25:3d:69:8e:10:45:18:df:
3e:7c:73:ea:18:62:42:6d:43:f9:d1:2c:7c:2c:f9:11:99:d5:
38:cc:aa:6c:a1:28:1b:e7:b5:37:4f:3f:03:88:8e:e2:22:71:
46:59:7c:89:2f:92:01:c0:10:03:92:99:36:cd:80:dc:54:c8:
61:04:66:30:fc:b8:e7:d1:13:8d:e7:29:c7:cc:e7:7e:3b:9c:
30:7c:1d:5f:1c:15:2e:73:95:1c:db:7b:3a:10:07:a6:7d:6b:
c3:ea:61:b0:d2:ef:79:f4:e9:10:2b:a8:b0:04:73:99:5b:ce:
53:ae:9c:1f:b8:bf:c1:a0:0b:ce:5a:7b:81:ac:df:27:1a:91:
af:01:51:12:4d:68:3f:9d:dc:78:e5:7a:27:5e:53:d7:c3:a6:
c1:a9:64:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:23 2025 by rpki-client