Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/38392e32332e36362e302f32332d3233203d3e203238393634.roa
File: 38392e32332e36362e302f32332d3233203d3e203238393634.roa (raw, json)
Hash identifier: 12otlYqex6tk1FgaFR33/TMSAvmz2+ZgWSrFaXrCguk=
Subject key identifier: 07:25:C3:CC:B4:95:FB:76:8D:78:FD:85:B5:9A:51:CE:75:22:FC:A3
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 3B605E5B104379B32FC9E1663F11A5F12A33440F
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/38392e32332e36362e302f32332d3233203d3e203238393634.roa
Signing time: Tue 06 Jun 2023 09:22:32 +0000
ROA not before: Tue 06 Jun 2023 09:17:32 +0000
ROA not after: Tue 04 Jun 2024 09:22:32 +0000
asID: 28964
IP address blocks: 89.23.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:60:5e:5b:10:43:79:b3:2f:c9:e1:66:3f:11:a5:f1:2a:33:44:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:17:32 2023 GMT
Not After : Jun 4 09:22:32 2024 GMT
Subject: CN=0725C3CCB495FB768D78FD85B59A51CE7522FCA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:43:c0:29:06:7b:cc:5b:29:71:9e:6f:0d:95:
a9:dc:06:ce:d7:7e:41:4b:51:9f:45:de:5b:49:2c:
48:c8:16:f6:f2:2b:1d:72:e5:41:30:ba:44:6a:bd:
0f:49:13:3c:ac:63:2c:bf:da:0a:b6:c2:2e:06:78:
6d:29:b7:5d:69:20:4e:24:5d:67:bc:05:f9:f9:be:
16:87:95:99:95:0f:15:76:94:9a:92:8e:c9:97:62:
0c:6d:04:22:e3:23:6a:c5:e7:1d:e5:46:ee:f7:7c:
61:ff:08:b1:12:24:e1:c6:19:39:a6:61:3e:5d:1e:
8a:5b:01:d4:a4:a5:4d:00:bc:0d:12:9d:c6:8a:c8:
27:b7:7c:51:a9:6d:8d:b0:fa:0f:21:6c:58:63:a8:
94:1c:36:4c:31:50:55:bf:43:a5:03:6a:56:79:19:
b6:8b:0d:b9:d0:22:89:1f:18:4d:ae:7d:a7:3e:17:
9d:8c:fe:20:0a:74:2b:ee:8e:06:f7:b1:c4:b8:f6:
12:37:60:08:1a:ad:c2:72:85:26:ac:b6:91:92:c9:
42:af:c1:d2:52:93:3f:4d:91:9c:12:39:99:e2:e0:
ff:9b:ca:1e:ab:19:15:7a:78:0c:1b:13:6a:7e:c3:
dd:09:1a:25:0d:96:eb:0f:69:c1:a2:39:72:4a:da:
22:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:25:C3:CC:B4:95:FB:76:8D:78:FD:85:B5:9A:51:CE:75:22:FC:A3
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/38392e32332e36362e302f32332d3233203d3e203238393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.66.0/23
Signature Algorithm: sha256WithRSAEncryption
69:c2:7e:6f:d8:fc:bf:65:c8:1d:ae:48:1a:63:66:16:8a:cc:
ee:ff:3b:93:e1:b8:fb:4e:74:5b:12:bd:dd:a9:71:ac:f4:30:
e5:0d:0e:b8:0e:96:42:e8:d2:bd:a2:c0:f1:33:15:86:04:b4:
70:af:bf:be:ea:10:c5:f5:b7:de:e8:8d:ea:7e:f9:4a:fe:ea:
f0:0f:2b:de:99:9a:8b:6f:87:c4:0a:20:2f:d2:03:43:31:5d:
4d:09:c2:48:6b:b0:df:c9:aa:07:ee:21:92:93:e0:72:0c:43:
f0:47:0a:1f:83:2b:44:6b:77:25:a5:b8:c2:07:04:ff:d3:4a:
2b:48:17:77:14:06:48:f1:bf:c3:fd:d0:94:db:74:69:e5:08:
6a:ab:d4:da:9f:18:a2:39:1d:79:df:33:32:c2:80:68:e3:f9:
f9:d4:c3:90:58:e6:ac:69:0d:bc:fa:98:46:ce:a0:6d:b0:bb:
ab:e8:29:d7:1c:7c:0a:07:a4:37:28:88:24:36:21:bf:5b:e7:
c0:5a:52:eb:13:40:4d:d1:b4:af:a5:53:fc:71:16:10:32:6d:
86:4f:ae:07:98:2a:fe:ba:9d:8d:dc:d7:63:45:df:8f:de:48:
7d:1a:96:e5:22:07:06:f8:65:fb:40:1d:0f:3a:c7:b0:51:e3:
57:e1:4f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:38:07 2025 by rpki-client