Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa
File: 3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa (raw, json)
Hash identifier: Wt7cVymDfWBwMzR8hqsJLmmyo1G55vHli1MG8ova8P4=
Subject key identifier: D7:7C:15:B1:D9:50:A0:68:48:C1:FA:50:00:20:96:44:95:E9:DD:20
Certificate issuer: /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial: 3F9029DF44955179E761B56CE9F816F811634D97
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa
Signing time: Sun 30 Mar 2025 05:13:36 +0000
ROA not before: Sun 30 Mar 2025 05:08:36 +0000
ROA not after: Sun 29 Mar 2026 05:13:36 +0000
asID: 59813
IP address blocks: 194.124.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:90:29:df:44:95:51:79:e7:61:b5:6c:e9:f8:16:f8:11:63:4d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Validity
Not Before: Mar 30 05:08:36 2025 GMT
Not After : Mar 29 05:13:36 2026 GMT
Subject: CN=D77C15B1D950A06848C1FA500020964495E9DD20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:e4:1e:b6:23:68:fc:db:64:97:35:cc:c0:
0a:6c:80:f2:3d:e4:b6:f2:d4:bc:a3:47:9c:96:39:
f2:b1:b1:e8:e6:e8:28:92:2a:74:47:b9:9a:4c:ce:
6a:9e:9d:1e:a6:f3:df:fb:33:52:c4:ed:9d:25:c4:
cd:1c:35:de:5c:74:05:12:37:ac:55:ba:48:18:0c:
d6:b8:07:16:cb:f1:33:b9:81:31:0e:08:ee:4d:d2:
0e:02:97:18:3e:5d:23:71:3c:c3:62:a7:db:15:6c:
69:39:c5:3c:3e:5a:5d:a4:02:13:61:8a:70:07:6c:
84:16:d8:99:77:cc:0d:80:fb:bf:1d:4b:69:9b:06:
aa:ef:be:fd:29:21:2e:94:7b:b7:2d:11:c5:95:b0:
62:cf:c1:ab:47:96:0e:35:9d:1f:58:ca:a1:34:12:
92:ca:45:ed:0f:8c:08:9a:76:c1:97:92:73:20:bb:
ad:89:ea:76:af:f6:40:b2:4b:46:48:39:91:82:ca:
6a:92:e8:cd:bb:c0:72:0e:d0:76:07:d6:df:25:69:
5e:8c:3e:f1:91:00:40:ad:2b:d2:d4:87:54:e4:3a:
d2:52:a4:27:55:dc:85:44:4a:4f:0a:be:26:95:00:
58:e1:f2:45:cb:63:ea:8a:86:5a:e6:13:b4:79:01:
4b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7C:15:B1:D9:50:A0:68:48:C1:FA:50:00:20:96:44:95:E9:DD:20
X509v3 Authority Key Identifier:
keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233372e302f32342d3234203d3e203539383133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:5b:6b:34:5b:60:7a:db:ea:1c:3a:1d:8d:86:40:1b:49:71:
b1:00:5d:29:8e:fd:38:5e:a7:6a:62:05:27:95:3e:82:f1:0c:
c3:2a:8a:54:bc:fd:91:ea:a5:0a:0a:55:62:88:31:16:af:31:
65:4c:48:85:31:1d:b9:17:42:aa:15:ef:9e:53:60:36:4f:b7:
cd:5f:15:b1:f9:3a:d1:22:f4:ff:c8:6a:9f:b8:af:04:69:b9:
54:18:a8:29:81:b2:22:27:d8:28:c7:f3:d6:c3:48:39:b7:9b:
c1:af:cf:3c:8c:4b:df:c2:b2:e5:fb:b5:1d:c9:fa:92:12:6e:
db:a3:87:33:01:64:56:9f:25:52:19:62:4f:10:b4:bb:14:45:
3a:56:04:2a:b0:40:2c:55:1a:7e:0a:bf:bc:24:62:cf:45:26:
d9:9f:81:df:28:7a:da:72:0c:ac:de:94:db:bc:e6:ac:cd:18:
fc:26:d2:2f:30:48:2d:a6:33:06:ce:02:b3:68:e4:10:70:ab:
8f:3b:04:3e:75:dd:df:10:97:c8:55:ce:2e:35:7e:27:ff:e9:
fb:7b:fe:f8:0b:09:3b:7e:b9:0d:1f:74:65:29:96:d3:7f:e8:
72:5c:1a:62:aa:c2:e8:c5:4c:9c:b8:f6:a2:f3:dd:be:e4:bf:
cf:a2:b3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:29 2025 by rpki-client on console.sobornost.net