Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139382e302f32342d3234203d3e20313937303731.roa
File: 3139332e3130392e3139382e302f32342d3234203d3e20313937303731.roa (raw, json)
Hash identifier: Bz3X3UIeDcLQAnyr5vYdbJRbgvfZZPvbX7LKy1RHB/U=
Subject key identifier: F3:71:41:A6:96:A6:18:7F:82:51:49:30:81:7B:82:76:C5:6C:81:CB
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 72510C908B0190CE7A97C1F8B1069695F6425D9A
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139382e302f32342d3234203d3e20313937303731.roa
Signing time: Wed 09 Apr 2025 18:59:41 +0000
ROA not before: Wed 09 Apr 2025 18:54:41 +0000
ROA not after: Wed 08 Apr 2026 18:59:41 +0000
asID: 197071
IP address blocks: 193.109.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:51:0c:90:8b:01:90:ce:7a:97:c1:f8:b1:06:96:95:f6:42:5d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Apr 9 18:54:41 2025 GMT
Not After : Apr 8 18:59:41 2026 GMT
Subject: CN=F37141A696A6187F82514930817B8276C56C81CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ea:d6:fa:75:3f:e4:51:4b:57:b4:d9:ee:0a:
f2:c1:87:17:0b:71:7a:33:a6:3d:e9:ce:40:c3:01:
9a:e3:1d:52:1a:09:45:5c:49:10:54:ac:12:01:16:
55:3c:37:8a:31:b0:38:2f:30:d9:b2:c4:52:6b:39:
00:fb:c4:19:bf:f2:fd:d3:b1:7b:ab:8a:52:cd:5d:
97:d3:7f:d8:3c:3e:c2:d7:9a:b8:a0:0e:27:4f:14:
50:20:fb:0d:d3:54:5c:36:5d:c6:3f:81:9a:50:f1:
a3:2e:ae:76:7e:cb:18:38:95:ba:3b:51:0b:ad:e3:
2b:59:ee:0d:60:1f:73:8c:3f:1a:b1:62:5d:06:b3:
df:ab:37:ce:2b:c3:9b:30:43:5c:44:f3:9c:10:71:
e7:14:f4:78:eb:0e:91:78:2f:69:b3:00:84:58:13:
4a:6d:af:09:f1:0d:97:54:59:9a:56:54:ce:9a:7a:
46:c2:cf:5d:61:5a:f0:fe:b4:98:70:4d:ae:cf:66:
67:13:54:80:85:f5:9f:5b:f1:25:12:44:1f:87:da:
45:fb:30:2c:dc:94:57:9b:13:e9:e0:d4:35:8a:d3:
03:47:a1:c1:5c:c7:4f:db:af:f2:33:8a:06:6a:4e:
f7:b2:7e:1c:66:05:65:cf:b6:68:1a:4c:39:a5:59:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:71:41:A6:96:A6:18:7F:82:51:49:30:81:7B:82:76:C5:6C:81:CB
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139382e302f32342d3234203d3e20313937303731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1c:18:97:89:dd:e1:bf:ff:69:6d:43:99:ae:75:cf:29:c9:
6f:ab:6a:28:a2:43:fe:8d:f9:36:7e:40:2d:b9:d4:4a:0b:a9:
c8:df:39:4d:db:aa:53:74:a8:a1:ed:87:cd:2c:18:29:38:03:
38:18:9b:78:a5:05:3e:a5:4a:bf:4a:d9:94:23:3e:08:35:04:
6c:19:29:b7:0a:17:f2:e3:12:8b:32:ba:c5:ea:aa:18:f9:64:
ce:97:61:1a:0f:2f:c7:31:5b:4d:78:0d:10:ac:0b:2f:ad:d4:
78:7a:01:6e:a6:44:d2:fd:f7:a0:84:cf:e5:b6:83:41:16:13:
04:b4:34:49:bd:f2:6c:d8:54:eb:dd:2b:fa:72:63:79:0e:2e:
45:cf:ee:5d:43:8f:50:ac:bd:a2:d5:1c:d0:3c:97:37:d7:c0:
27:5a:5f:e6:04:d2:37:88:cd:63:4e:65:02:c6:6d:58:a5:23:
01:f7:7d:75:45:0f:9a:cb:4f:8d:05:25:06:6b:29:ff:34:fa:
22:d1:3e:d0:73:ae:b0:ec:fc:57:84:0c:6f:77:75:cb:4b:a7:
95:25:5a:f0:63:05:70:c2:f5:77:e6:08:bc:5a:4c:aa:03:4d:
1c:a7:3e:39:63:25:af:b7:98:45:13:cd:04:c3:2d:bd:08:d1:
ea:ef:4f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:27 2025 by rpki-client on console.sobornost.net