Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3139352e3231312e35312e302f32342d3234203d3e20383334.roa
File: 3139352e3231312e35312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: eyRt037wO+yLPz4WGlq5trs2r5s7a1QGY2iKrPDb2SQ=
Subject key identifier: 25:0F:56:92:D8:70:94:39:33:80:E6:44:C8:CE:C4:7E:4D:64:B9:39
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 4E9AABC17616445B1C697613B32E3435229B6208
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3139352e3231312e35312e302f32342d3234203d3e20383334.roa
Signing time: Sat 06 Jul 2024 11:15:27 +0000
ROA not before: Sat 06 Jul 2024 11:10:27 +0000
ROA not after: Sat 05 Jul 2025 11:15:27 +0000
asID: 834
IP address blocks: 195.211.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:9a:ab:c1:76:16:44:5b:1c:69:76:13:b3:2e:34:35:22:9b:62:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Jul 6 11:10:27 2024 GMT
Not After : Jul 5 11:15:27 2025 GMT
Subject: CN=250F5692D87094393380E644C8CEC47E4D64B939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:a7:2b:34:69:f5:1a:37:6e:44:21:34:ba:
a3:5c:35:ad:44:6e:a7:fa:24:8f:ce:ad:6b:a7:e6:
94:7a:d3:73:1f:ad:f9:0c:22:51:b1:f7:39:00:ae:
6f:1e:ca:64:cf:98:b8:16:02:4e:ac:c1:01:bb:59:
e8:0f:58:ab:98:9c:6d:b8:5b:d5:d7:77:b0:9c:da:
7f:fb:df:03:76:86:b4:35:b2:cf:f7:36:1c:56:5f:
9b:57:ab:fd:f2:3a:d3:17:70:85:76:c4:ab:b5:8e:
e7:ee:89:23:c6:68:89:52:cf:37:45:6f:6c:8c:74:
fa:ac:88:d8:df:d2:18:65:94:e0:56:89:f9:29:af:
54:4f:68:79:17:98:4f:15:27:21:85:ed:eb:44:42:
18:47:0a:cb:5e:da:0c:95:32:1e:1c:9d:75:02:5a:
8d:ca:74:df:b8:aa:cd:07:f8:1c:d5:19:ad:b7:96:
4f:f3:69:d4:5d:ea:0d:4c:3a:72:38:2a:af:9e:40:
f7:cb:bc:ce:63:d1:4f:1d:50:a5:91:4e:20:38:7b:
9e:46:12:d4:2b:9a:8a:b7:98:41:fb:b2:64:4c:eb:
ad:15:1b:35:18:95:90:a4:ed:7d:61:7b:f7:98:8a:
4d:60:dd:ee:1e:17:8e:e2:b3:b0:7f:54:ad:09:b9:
a0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0F:56:92:D8:70:94:39:33:80:E6:44:C8:CE:C4:7E:4D:64:B9:39
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3139352e3231312e35312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.51.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ce:1b:ed:19:98:08:fc:1d:bb:60:a8:64:24:86:5b:72:82:
45:ea:bf:23:ab:5f:5e:b5:81:b0:42:81:9e:fc:22:45:00:e7:
46:c7:61:1d:3d:49:0c:56:eb:b5:c1:58:86:93:24:f3:39:5d:
d6:ee:7b:60:62:df:b5:17:b1:92:a2:2b:ab:e1:7a:97:3c:7b:
3d:f7:cc:76:5c:c3:73:71:e9:73:be:f3:d9:42:04:94:ef:20:
c3:cb:32:88:7c:24:13:08:23:03:19:a1:b1:2f:ab:b4:5e:fc:
b1:ad:c8:a3:ec:84:67:95:64:82:b2:78:13:8e:ea:d1:02:62:
6a:8b:4f:a4:6f:7f:ec:9f:94:2f:f2:bd:9e:23:58:43:78:bb:
4e:12:0e:5d:0b:eb:58:77:4a:98:73:e6:8c:0a:98:c7:b6:b8:
66:d0:fa:3b:68:8c:d7:e1:9a:bf:5e:7c:26:6c:2c:5e:fc:c7:
27:a9:1f:db:af:fa:b6:fd:6e:17:10:2f:0f:86:87:db:a7:e9:
fc:e1:f4:43:50:d3:cf:8f:2b:33:0b:e0:77:dd:54:b9:ee:e3:
f2:ef:3c:13:78:57:e1:7b:41:a6:ac:70:29:f7:59:32:e3:79:
9a:fc:3a:d2:06:43:18:c7:36:d1:6c:ef:e3:49:08:88:ed:5d:
9e:34:aa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 04:51:23 2024 by rpki-client on console.sobornost.net