Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3139332e3136302e3130302e302f32342d3234203d3e20323037313337.roa
File: 3139332e3136302e3130302e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: H5KZAByAkAHp48PJTSmbbTz9qiUcWgbM4/Bmjlk3+/U=
Subject key identifier: 9D:00:9D:90:0A:E7:65:FF:E2:62:97:84:A8:CC:19:8F:E2:60:26:81
Certificate issuer: /CN=5d2125f62f509085753ba79e14ab685d68fb498d
Certificate serial: 17E1B1989C684C6BD66C0BA25A75286D6CDAD4D1
Authority key identifier: 5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3139332e3136302e3130302e302f32342d3234203d3e20323037313337.roa
Signing time: Mon 01 May 2023 13:24:18 +0000
ROA not before: Mon 01 May 2023 13:19:18 +0000
ROA not after: Mon 29 Apr 2024 13:24:18 +0000
asID: 207137
IP address blocks: 193.160.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:e1:b1:98:9c:68:4c:6b:d6:6c:0b:a2:5a:75:28:6d:6c:da:d4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2125f62f509085753ba79e14ab685d68fb498d
Validity
Not Before: May 1 13:19:18 2023 GMT
Not After : Apr 29 13:24:18 2024 GMT
Subject: CN=9D009D900AE765FFE2629784A8CC198FE2602681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:06:67:dd:b3:2e:76:e4:7b:40:89:45:ec:
e5:35:40:8e:86:e0:df:43:a4:bf:8e:7e:72:a2:91:
b6:85:41:06:cd:50:34:d7:62:0f:71:71:d8:01:13:
7e:b0:25:2d:f0:dc:14:18:bf:32:60:fb:f6:a5:c5:
2d:a3:97:06:36:1f:77:d1:2b:16:52:0a:0a:9d:c0:
c4:89:ec:14:46:27:a5:61:21:61:30:86:ff:7d:ab:
7d:88:d7:4d:1b:e5:cf:1f:b2:8c:ee:ca:54:53:c6:
30:3d:a9:0f:fd:43:f9:42:68:61:c9:3d:d9:a7:25:
f0:8c:05:56:8e:12:db:62:af:31:66:e3:08:f7:5c:
ab:3a:9e:c6:1e:2d:fa:87:4d:f7:e6:b0:49:42:e7:
af:94:50:dd:83:ba:53:ed:ba:26:8b:b8:81:8e:e3:
da:69:c2:12:be:0c:f0:55:c3:35:95:24:ba:6d:f8:
3d:85:ae:c9:e3:07:c1:db:94:56:db:a7:80:7b:1f:
da:b7:c7:8a:5e:ed:95:0d:0c:a2:10:b4:bb:ab:da:
6b:dc:6e:a1:70:f5:02:9d:20:f4:ad:46:d3:a5:58:
90:27:be:29:f9:0a:1a:89:22:a6:07:b9:54:75:dc:
96:6e:cd:2e:72:a4:83:30:c3:87:6f:b3:38:92:a2:
eb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:00:9D:90:0A:E7:65:FF:E2:62:97:84:A8:CC:19:8F:E2:60:26:81
X509v3 Authority Key Identifier:
keyid:5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/5D2125F62F509085753BA79E14AB685D68FB498D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3139332e3136302e3130302e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.100.0/24
Signature Algorithm: sha256WithRSAEncryption
13:fb:64:47:89:4b:35:2b:86:43:52:9e:c3:7e:59:9f:7c:93:
a0:96:5a:c3:3d:e1:16:4f:f8:8c:74:a2:ca:a7:13:75:7e:a9:
07:53:1a:50:b9:72:9f:0c:9e:ef:35:dc:f1:55:98:5e:65:95:
fa:81:1c:25:ef:2f:5e:56:26:4e:18:bb:25:76:5f:38:2d:b4:
ed:66:9c:39:e4:71:47:57:f1:1d:64:8a:08:3f:30:50:8d:74:
70:56:e3:34:06:5d:af:29:c7:9c:7d:ce:47:5b:ad:7e:d3:2a:
c5:28:2c:06:64:90:b0:f7:28:9f:fc:c2:7e:4f:18:26:fc:25:
94:9b:ab:a8:9d:38:98:27:75:0f:1b:04:bb:cc:fa:0f:95:35:
7b:ff:6a:76:50:9c:9c:46:dd:31:5f:57:c5:e4:12:29:bc:39:
68:17:58:10:cd:71:e4:fc:28:a1:b0:76:64:8b:27:55:f0:51:
f7:b3:b7:5c:ff:3c:81:52:b5:d8:70:cd:e7:39:26:f4:b6:c2:
5e:43:72:41:e5:28:d7:10:01:a5:c5:46:0e:eb:be:71:a8:2c:
90:35:15:e1:5f:84:a3:61:87:44:48:3a:97:cf:eb:6d:78:bb:
bd:13:e2:bd:b0:a4:9e:99:fa:39:85:74:48:a1:03:02:6e:ef:
07:6b:08:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org