Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233342e302f32342d3234203d3e203231383539.roa
File: 3139332e32342e3233342e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: 48bMUhezluXOmNmFag/NXrQ3+D1opR/rZgo+OK4J0sQ=
Subject key identifier: 87:C9:C8:08:A5:46:DB:B8:60:DB:A1:4B:CF:3F:D3:9B:45:52:48:5C
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 71BEAB75F2358092389F77E5B64D18F9B34A7DF4
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233342e302f32342d3234203d3e203231383539.roa
Signing time: Wed 05 Feb 2025 15:32:32 +0000
ROA not before: Wed 05 Feb 2025 15:27:32 +0000
ROA not after: Wed 04 Feb 2026 15:32:32 +0000
asID: 21859
IP address blocks: 193.24.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:be:ab:75:f2:35:80:92:38:9f:77:e5:b6:4d:18:f9:b3:4a:7d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Feb 5 15:27:32 2025 GMT
Not After : Feb 4 15:32:32 2026 GMT
Subject: CN=87C9C808A546DBB860DBA14BCF3FD39B4552485C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:f5:7d:71:8a:f6:81:8f:48:5d:41:e6:33:
c6:29:c8:a9:4e:3f:b6:b3:bd:76:f1:55:f7:d7:b9:
b0:32:5d:22:87:4d:b9:41:58:7e:82:30:69:f3:73:
f4:f4:70:36:04:f1:0c:d3:35:c5:fc:0e:e9:41:1b:
31:83:27:11:ef:01:89:7d:17:29:7a:74:20:86:85:
3a:7d:f8:b9:49:dc:70:44:4d:c5:93:fd:22:84:9c:
0f:dd:f4:6c:df:c0:00:76:ee:64:38:d9:b4:63:21:
da:98:28:20:69:8d:ea:da:1c:1f:ea:29:f2:6b:a8:
f2:9a:3b:56:ee:67:ee:90:dd:32:6f:cb:e6:6f:2d:
d5:a8:26:a5:5f:28:b5:a9:19:b8:c7:ba:bb:95:ef:
eb:e3:1c:ed:b0:eb:24:75:ac:78:c6:8d:7e:1a:68:
f4:d2:d6:92:42:ac:01:aa:93:c6:5d:e2:a4:b2:a2:
8f:e4:a9:5c:90:59:12:27:42:b8:0c:ed:c5:42:f1:
a6:a9:85:76:75:32:e5:b7:0b:74:43:d4:42:fc:c5:
a0:fc:bc:c7:48:d2:80:cd:ab:f8:e3:c1:45:09:cd:
f1:3a:8c:32:d2:c2:ac:3d:7c:f7:1b:e7:f8:df:12:
53:03:4a:a7:3f:d4:d6:f3:ab:6d:0e:60:4c:61:9d:
74:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C9:C8:08:A5:46:DB:B8:60:DB:A1:4B:CF:3F:D3:9B:45:52:48:5C
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233342e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.234.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ff:d0:e0:04:f2:a7:cc:68:dc:8b:a7:82:d3:43:63:d9:54:
6b:9e:cf:56:a7:ed:a2:11:bc:2e:dc:17:d3:c8:5b:4f:01:16:
53:e0:78:35:7b:e6:5f:f0:97:12:86:62:4c:56:c6:b7:8c:15:
f8:29:b2:8c:5d:96:54:b9:91:0f:9b:ee:14:76:f9:4f:ed:46:
0b:28:05:d8:74:9e:59:d4:a3:e2:31:ba:3f:8d:5c:57:78:71:
ab:02:fa:a5:68:9c:a3:65:eb:fd:a9:75:7e:13:af:37:81:d8:
48:8e:0a:ea:3f:ca:75:6b:2c:3f:0c:55:5d:c2:f5:aa:3c:38:
a6:7f:04:5c:08:f0:a5:68:31:3e:d2:d9:3b:97:37:d5:27:4a:
22:82:73:4a:b1:09:4e:2f:9a:9c:83:65:e4:e2:e5:3b:55:ed:
03:2c:f7:b4:68:31:35:c7:8b:82:84:f4:5b:a3:28:ea:a6:99:
43:19:e8:f8:da:cb:2d:6a:6e:4a:f5:61:24:37:da:27:0b:a5:
31:85:4a:a4:29:d8:6a:be:c2:1a:f9:74:ad:ac:a2:fb:03:69:
58:02:20:6a:d9:8e:4f:f4:e0:23:99:f1:cd:d2:3a:b0:a2:be:
bf:ab:42:fb:c9:cd:8a:fe:e4:91:e8:7b:77:b4:22:1c:a0:bf:
d1:bf:82:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:58:44 2025 by rpki-client on console.sobornost.net