Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/38392e32332e36342e302f32342d3234203d3e203238393634.roa
File: 38392e32332e36342e302f32342d3234203d3e203238393634.roa (raw, json)
Hash identifier: IUKWA7eIK6aupiI+REN57ewbpbxiKXNSffM87D7F91k=
Subject key identifier: 8B:6C:FC:92:64:1D:2A:61:D4:E8:77:A3:57:EB:07:8A:AC:9C:17:1E
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 5C7429661C93C74BF06AC6BC21FE71338692415D
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/38392e32332e36342e302f32342d3234203d3e203238393634.roa
Signing time: Tue 06 Jun 2023 09:22:17 +0000
ROA not before: Tue 06 Jun 2023 09:17:17 +0000
ROA not after: Tue 04 Jun 2024 09:22:17 +0000
asID: 28964
IP address blocks: 89.23.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:74:29:66:1c:93:c7:4b:f0:6a:c6:bc:21:fe:71:33:86:92:41:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:17:17 2023 GMT
Not After : Jun 4 09:22:17 2024 GMT
Subject: CN=8B6CFC92641D2A61D4E877A357EB078AAC9C171E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:7d:86:47:3c:68:60:20:a9:57:97:e8:b0:
a4:86:04:55:72:7d:bf:d3:35:4e:4c:b1:06:c8:35:
73:5e:80:af:da:cd:56:62:df:84:b5:af:be:8e:3e:
41:63:56:f1:d7:1b:e1:82:80:74:3a:bb:05:34:e6:
71:5f:9d:72:df:7d:d4:05:1a:53:13:e5:58:3d:f0:
a3:1a:79:c8:2c:e0:cd:06:b8:28:a2:f8:95:51:88:
69:71:03:a7:33:65:59:2c:b6:61:7d:12:36:e0:9d:
a8:0a:89:74:76:2f:5a:d4:42:db:0c:57:cb:e2:d8:
33:81:1d:28:6f:db:ac:74:1a:ff:03:c6:88:e4:8a:
e0:8a:4a:c7:91:78:2f:c6:cf:e0:5c:f6:c8:8b:ba:
d2:1a:e4:34:63:5a:90:43:95:2a:55:70:e5:0c:43:
a6:cd:bf:ad:aa:fe:25:c9:08:a9:f4:03:60:0f:34:
14:27:f5:ec:96:a3:ba:4a:46:aa:72:4e:a8:07:33:
58:81:c8:d7:f2:5e:ec:d7:4a:bf:ab:a8:f6:8f:5f:
56:e4:99:03:4f:d6:bc:c7:9f:26:0f:28:c3:6c:f3:
f7:a9:75:69:da:0d:0e:f1:ab:53:1f:80:f5:c5:b3:
2e:9f:29:22:b1:ce:f6:64:92:9e:10:a0:36:13:1e:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6C:FC:92:64:1D:2A:61:D4:E8:77:A3:57:EB:07:8A:AC:9C:17:1E
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/38392e32332e36342e302f32342d3234203d3e203238393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.64.0/24
Signature Algorithm: sha256WithRSAEncryption
25:02:a8:f4:06:d9:b2:06:30:f2:71:6f:bd:8d:6e:02:4b:87:
42:a9:2f:8f:ac:66:d3:99:ab:58:4e:40:82:94:2c:de:87:26:
2b:b3:e8:4c:64:e3:c1:5f:ca:f2:87:44:8e:79:35:d3:b3:79:
67:ec:85:01:4d:ba:6f:68:2a:18:d9:2a:17:da:20:3e:36:12:
4d:33:bc:94:3f:cd:96:30:5d:ac:97:f1:cf:5c:d0:4d:ae:da:
26:82:f9:d1:a9:42:f5:1c:d5:24:d8:77:33:26:c9:c9:64:09:
0d:2d:1c:0a:e3:71:cb:4e:48:53:3b:9d:77:1b:2d:ab:50:08:
9c:44:ef:fa:db:73:5f:7c:28:6f:f2:9e:b8:89:52:f0:40:de:
9a:2e:bb:84:9f:8b:89:6b:d2:90:a7:49:91:c7:86:6a:38:45:
3c:82:81:57:50:2f:2b:2f:e1:5f:19:cf:cb:1c:2a:6d:4e:2b:
7f:91:78:b2:2f:ec:fe:8a:b4:9a:f5:c7:5e:4c:ff:94:18:2f:
b3:32:ae:aa:52:2d:90:2e:35:e1:3e:ad:2c:e4:fc:4d:ea:8e:
1f:9c:e4:37:41:a4:84:57:2b:3a:4e:38:8b:17:79:95:4e:0f:
c8:83:76:18:8d:96:ca:41:e7:e8:29:bb:f3:b3:6a:9a:17:d3:
6e:18:14:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:27:16 2025 by rpki-client