Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3139332e3136302e3130312e302f32342d3234203d3e20323037313337.roa
File: 3139332e3136302e3130312e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: j3QpBYdWP8mcDZbFFTJKf8S6tAEdGdgMtEezWr220bc=
Subject key identifier: A9:9D:AD:F3:01:EF:9D:6C:63:BA:33:CF:4C:E7:28:5A:06:D1:6B:4C
Certificate issuer: /CN=5d2125f62f509085753ba79e14ab685d68fb498d
Certificate serial: 3B49F5C7AC04697D2D745C4C158540A41C43A1F1
Authority key identifier: 5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3139332e3136302e3130312e302f32342d3234203d3e20323037313337.roa
Signing time: Mon 01 May 2023 13:24:25 +0000
ROA not before: Mon 01 May 2023 13:19:25 +0000
ROA not after: Mon 29 Apr 2024 13:24:25 +0000
asID: 207137
IP address blocks: 193.160.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:49:f5:c7:ac:04:69:7d:2d:74:5c:4c:15:85:40:a4:1c:43:a1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2125f62f509085753ba79e14ab685d68fb498d
Validity
Not Before: May 1 13:19:25 2023 GMT
Not After : Apr 29 13:24:25 2024 GMT
Subject: CN=A99DADF301EF9D6C63BA33CF4CE7285A06D16B4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:04:f1:c8:9f:96:ff:ba:4e:3d:31:e9:9c:
7d:1c:3e:c5:2e:f0:a1:04:9b:47:3a:17:57:5b:0d:
80:92:b9:09:52:66:0b:b4:12:25:ac:15:6b:6c:76:
50:31:02:18:0d:43:e7:a9:97:65:33:83:b0:1c:73:
95:4e:c2:27:e6:6f:2f:2a:1e:6e:3a:72:62:7c:e2:
33:8b:30:37:dd:a0:3f:b7:e9:5e:b2:71:9c:04:76:
f4:b3:30:91:c8:2f:a3:73:ca:81:01:60:1a:95:35:
11:e5:8e:43:60:b4:45:dc:f8:b4:8d:5e:de:4a:a3:
4d:42:ae:ba:ca:92:66:32:b5:13:da:d3:64:56:53:
c3:ff:73:3d:74:b7:07:4d:77:fc:36:86:36:f5:c9:
53:9e:de:d1:04:c4:2f:90:5a:6e:6a:a5:0f:62:65:
bd:bc:f8:de:53:99:a5:92:ac:7b:e8:d8:8e:70:70:
02:b4:84:79:f9:04:c4:3e:b6:34:1a:7b:b3:f8:45:
48:9c:ec:82:38:fe:25:7a:fd:89:d0:08:4c:13:d8:
4a:b6:3f:4b:50:01:6a:d2:e9:4f:60:c1:e7:6e:fa:
70:8e:1c:2d:50:a2:14:bf:9f:74:49:69:d0:48:6f:
de:fd:df:ff:fa:a8:30:6f:ae:09:86:89:28:14:fb:
2d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9D:AD:F3:01:EF:9D:6C:63:BA:33:CF:4C:E7:28:5A:06:D1:6B:4C
X509v3 Authority Key Identifier:
keyid:5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/5D2125F62F509085753BA79E14AB685D68FB498D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3139332e3136302e3130312e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.101.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:06:2c:2f:83:14:ee:8c:6d:ef:2b:7a:ea:04:c3:26:ae:09:
39:50:8d:c3:29:05:be:3c:4e:39:bf:55:c9:aa:cf:00:dd:80:
40:de:31:f0:fe:e2:8b:90:a0:96:41:b4:4e:3b:e2:ed:6c:49:
47:ea:a6:84:56:05:ce:8b:2d:1e:ba:3f:10:4f:f7:0a:47:28:
84:33:98:0c:2d:8e:d2:1f:ab:d5:69:38:37:44:34:bf:9f:73:
97:31:34:59:ab:18:5b:7e:c8:99:e5:1d:70:a2:bb:c6:a2:cd:
bc:53:6e:b1:42:65:aa:64:9f:25:d0:2c:63:db:29:ab:68:31:
d0:37:11:f6:8e:78:af:a3:5f:d5:07:ab:9d:2f:9b:61:a3:29:
27:c5:e9:03:c3:cb:f2:1b:79:44:13:ee:1a:cc:6e:f8:3f:76:
79:8c:9f:8e:96:cd:9e:ed:d1:3e:51:7a:78:a6:50:fc:94:d6:
b3:dd:42:d5:e6:08:96:20:d6:2e:93:ce:4b:75:3b:b1:9e:38:
b5:84:a1:7d:2e:76:95:f5:20:e5:e5:a6:d5:45:83:4c:55:f0:
ee:51:eb:e5:90:07:c2:09:03:d7:5f:78:9f:a3:a9:62:52:7a:
3e:37:a6:1a:e6:31:11:49:0f:e1:a5:9f:4f:7a:be:0b:d9:36:
43:35:07:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org