Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3137362e3131392e3139352e302f32342d3234203d3e203439343533.roa
File: 3137362e3131392e3139352e302f32342d3234203d3e203439343533.roa (raw, json)
Hash identifier: RydYlU5m8J4mUdftQsHAILPbUX8G6RucNmU/OBv7yyk=
Subject key identifier: F9:84:01:57:87:22:54:AE:A4:2C:8E:40:46:BC:C6:03:9F:C8:65:25
Certificate issuer: /CN=5d2125f62f509085753ba79e14ab685d68fb498d
Certificate serial: 345D4DFCCF9240806C4A19A7B745D9AAD8D53F66
Authority key identifier: 5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3137362e3131392e3139352e302f32342d3234203d3e203439343533.roa
Signing time: Mon 27 Mar 2023 08:27:48 +0000
ROA not before: Mon 27 Mar 2023 08:22:48 +0000
ROA not after: Mon 25 Mar 2024 08:27:48 +0000
asID: 49453
IP address blocks: 176.119.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:5d:4d:fc:cf:92:40:80:6c:4a:19:a7:b7:45:d9:aa:d8:d5:3f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2125f62f509085753ba79e14ab685d68fb498d
Validity
Not Before: Mar 27 08:22:48 2023 GMT
Not After : Mar 25 08:27:48 2024 GMT
Subject: CN=F9840157872254AEA42C8E4046BCC6039FC86525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:52:0c:9a:a9:e6:88:e7:ac:93:fc:f9:58:0f:
44:d3:3a:de:79:e0:11:9d:b4:07:11:28:51:e4:fa:
88:f3:c7:14:46:16:27:7d:64:fa:fd:4e:9a:21:1e:
40:37:bf:ed:57:8d:61:b3:70:b2:58:a0:b5:e3:d0:
eb:11:e3:b8:83:76:4c:67:8d:6a:69:04:22:9b:f7:
85:c3:6d:c3:f4:58:54:d4:64:25:ac:81:53:fc:62:
42:fd:c8:2d:4d:53:f7:d0:1f:cb:ad:63:df:82:36:
05:1f:64:a2:e4:2c:3e:8f:ae:80:cb:4f:0a:5f:71:
bd:e9:29:1c:03:b5:3a:ce:ff:fc:ef:5a:4c:ee:28:
43:c7:b4:f3:0e:54:a4:14:05:6b:a7:a6:b7:f0:5e:
c1:db:b8:ef:cc:ce:80:18:79:70:2b:71:ee:bf:c3:
21:b8:73:a9:87:84:56:ab:69:ba:93:07:3a:25:97:
fa:c0:5f:43:4c:fe:24:55:f1:4b:d8:7b:ad:86:54:
32:e1:46:4d:38:f4:19:42:61:c8:ce:ba:8e:7a:53:
c6:82:23:70:eb:15:f0:bd:40:0d:de:49:a4:8d:4d:
5f:e8:c3:8d:03:ca:40:c6:1e:c9:3e:0a:da:ae:55:
c0:cf:c7:dd:ad:08:b0:d1:99:f4:11:49:b3:00:be:
81:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:84:01:57:87:22:54:AE:A4:2C:8E:40:46:BC:C6:03:9F:C8:65:25
X509v3 Authority Key Identifier:
keyid:5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/5D2125F62F509085753BA79E14AB685D68FB498D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3137362e3131392e3139352e302f32342d3234203d3e203439343533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.195.0/24
Signature Algorithm: sha256WithRSAEncryption
07:82:69:a1:87:3e:de:69:78:1e:1b:65:00:d2:78:6c:6d:94:
46:b3:1b:ce:2f:90:5e:bc:d6:a4:42:df:9e:4f:10:6c:c2:c2:
71:81:14:1d:8c:8d:a8:dd:5c:c7:55:2b:62:6f:03:19:17:42:
06:54:df:6d:39:e0:18:03:cd:c1:6a:58:29:ca:dc:ef:2e:a8:
2b:de:75:e3:91:a9:97:6f:e4:c2:b9:fe:7b:92:d2:79:51:bd:
b6:aa:ad:14:a4:56:19:56:42:5b:8f:ae:54:b0:91:e0:2c:e9:
60:75:82:d1:00:71:40:2a:57:b2:0d:7f:eb:12:47:04:d5:7c:
03:e9:88:84:8f:25:a6:eb:4d:1e:a2:8c:23:6f:8b:c6:65:31:
3f:8d:f9:b1:96:0b:62:84:7b:1b:37:52:0b:50:b9:b9:fa:e7:
e0:3c:d5:99:6e:6f:71:c7:dc:f5:16:bb:13:e2:63:ab:cf:0d:
7d:7f:6f:0f:45:56:30:96:08:f3:e4:5c:c5:df:40:76:c8:f3:
22:f5:46:a7:95:c2:17:28:7b:91:16:1c:fa:db:38:74:b2:5a:
95:2e:8c:d2:e0:4b:de:54:9d:7b:6d:e5:43:27:d9:f6:56:dc:
0f:a0:96:9b:c9:c5:0f:d9:0e:11:9d:c3:4c:73:06:f4:80:4d:
ec:bc:c1:f1
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUNF1N/M+SQIBsShmnt0XZqtjVP2YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWQyMTI1ZjYyZjUwOTA4NTc1M2JhNzllMTRhYjY4NWQ2
OGZiNDk4ZDAeFw0yMzAzMjcwODIyNDhaFw0yNDAzMjUwODI3NDhaMDMxMTAvBgNV
BAMTKEY5ODQwMTU3ODcyMjU0QUVBNDJDOEU0MDQ2QkNDNjAzOUZDODY1MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDUgyaqeaI56yT/PlYD0TTOt55
4BGdtAcRKFHk+ojzxxRGFid9ZPr9TpohHkA3v+1XjWGzcLJYoLXj0OsR47iDdkxn
jWppBCKb94XDbcP0WFTUZCWsgVP8YkL9yC1NU/fQH8utY9+CNgUfZKLkLD6ProDL
Twpfcb3pKRwDtTrO//zvWkzuKEPHtPMOVKQUBWunprfwXsHbuO/MzoAYeXArce6/
wyG4c6mHhFarabqTBzoll/rAX0NM/iRV8UvYe62GVDLhRk049BlCYcjOuo56U8aC
I3DrFfC9QA3eSaSNTV/ow40DykDGHsk+CtquVcDPx92tCLDRmfQRSbMAvoE/AgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQU+YQBV4ciVK6kLI5ARrzGA5/IZSUwHwYDVR0j
BBgwFoAUXSEl9i9QkIV1O6eeFKtoXWj7SY0wDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNjQvNUQyMTI1RjYyRjUwOTA4NTc1M0JBNzlFMTRBQjY4NUQ2OEZCNDk4
RC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hTRWw5aTlRa0lWMU82ZWVGS3Rv
WFdqN1NZMC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE2NC8zMTM3MzYyZTMxMzEz
OTJlMzEzOTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzOTM0MzUzMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEALB3wzANBgkqhkiG9w0BAQsFAAOCAQEAB4JpoYc+3ml4HhtlANJ4bG2U
RrMbzi+QXrzWpELfnk8QbMLCcYEUHYyNqN1cx1UrYm8DGRdCBlTfbTngGAPNwWpY
Kcrc7y6oK95145Gpl2/kwrn+e5LSeVG9tqqtFKRWGVZCW4+uVLCR4CzpYHWC0QBx
QCpXsg1/6xJHBNV8A+mIhI8lputNHqKMI2+LxmUxP435sZYLYoR7GzdSC1C5ufrn
4DzVmW5vccfc9Ra7E+Jjq88NfX9vD0VWMJYI8+Rcxd9AdsjzIvVGp5XCFyh7kRYc
+ts4dLJalS6M0uBL3lSde23lQyfZ9lbcD6CWm8nFD9kOEZ3DTHMG9IBN7LzB8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org