Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3139332e3136302e3131382e302f32342d3234203d3e20313336373837.roa
File: 3139332e3136302e3131382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: vJmgzXItwH/nMw3x8P+9YYl42aGEjw0KJXWfRYYyFnI=
Subject key identifier: C3:93:5A:EE:66:7E:1C:CE:F5:19:1C:97:88:55:65:39:DF:7E:6E:B7
Certificate issuer: /CN=5d2125f62f509085753ba79e14ab685d68fb498d
Certificate serial: 16CF0CBFE3AA2927C42193E7756736A829158FAC
Authority key identifier: 5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3139332e3136302e3131382e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Mar 2023 08:27:48 +0000
ROA not before: Mon 27 Mar 2023 08:22:48 +0000
ROA not after: Mon 25 Mar 2024 08:27:48 +0000
asID: 136787
IP address blocks: 193.160.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:cf:0c:bf:e3:aa:29:27:c4:21:93:e7:75:67:36:a8:29:15:8f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2125f62f509085753ba79e14ab685d68fb498d
Validity
Not Before: Mar 27 08:22:48 2023 GMT
Not After : Mar 25 08:27:48 2024 GMT
Subject: CN=C3935AEE667E1CCEF5191C9788556539DF7E6EB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:4e:1a:a1:75:d4:49:d4:e5:6c:c5:71:d8:
4a:cd:08:06:0e:11:63:a9:09:72:4a:35:08:85:33:
bf:ae:11:31:a4:b5:f4:35:2a:ef:56:2f:86:76:83:
b5:14:f4:65:ba:15:cf:99:8b:07:fd:b9:fb:e4:38:
29:bb:1a:3b:18:1c:2e:ed:85:f0:f1:e0:95:d2:81:
11:9c:23:5d:80:a3:78:24:70:80:a1:d7:32:88:cc:
07:02:b5:ef:66:04:f6:98:b4:80:99:97:4f:94:3b:
b8:69:48:ff:9b:37:b8:af:a7:8a:ce:8b:35:b5:d3:
82:73:fd:f9:07:81:98:35:b7:90:90:91:26:10:a3:
a5:fd:40:67:aa:3d:4c:c6:13:f4:0b:d8:9a:e2:d5:
a6:de:0d:00:51:9e:3e:db:0b:4e:83:44:17:6c:c3:
b0:7c:f1:1a:88:7c:fd:dd:74:1b:6b:39:69:f9:67:
45:b9:c6:e5:2d:55:38:cb:36:10:b4:81:8e:ca:02:
df:9e:16:18:8d:9d:25:7e:e1:96:85:bb:23:2a:f5:
ca:31:d6:37:fe:83:66:c3:1b:44:02:9a:cd:e8:c4:
b5:9f:3a:fb:32:13:43:5f:dc:b4:b1:f3:f2:52:e6:
b5:61:1a:54:09:35:9e:89:45:4c:ed:21:ba:ff:36:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:93:5A:EE:66:7E:1C:CE:F5:19:1C:97:88:55:65:39:DF:7E:6E:B7
X509v3 Authority Key Identifier:
keyid:5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/5D2125F62F509085753BA79E14AB685D68FB498D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3139332e3136302e3131382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.118.0/24
Signature Algorithm: sha256WithRSAEncryption
54:df:a2:4e:7c:8c:3e:c0:a3:60:57:1b:53:e0:aa:6f:32:3f:
94:af:dd:c9:53:b3:63:7c:43:0a:00:e2:94:8d:40:25:87:24:
0a:7f:8f:af:29:c2:c0:53:40:de:29:02:8f:d7:6d:c9:a5:cc:
de:ba:3e:7a:df:04:5f:32:a9:93:dd:ac:32:84:ba:0d:c3:aa:
64:9c:8e:be:1c:1c:95:2f:f7:85:ec:33:ff:b2:a1:17:87:4a:
40:af:e3:bb:b1:29:a3:bf:0d:88:c8:df:8b:67:16:d9:01:6c:
79:00:98:77:6b:65:65:ce:bf:79:2d:80:60:d6:57:f4:f2:7a:
7c:a9:c0:ac:62:95:58:13:a7:2c:96:47:be:18:cf:98:f6:b6:
63:16:88:62:8b:81:84:a2:ff:42:a5:97:3d:73:7e:53:00:cc:
5e:fa:9a:08:7c:98:9b:7b:85:1a:c3:3f:93:0c:df:82:1a:b3:
bd:aa:7e:81:f1:4f:2f:ab:e5:cd:fb:1d:65:9f:36:d8:ae:ac:
fa:7e:e2:ac:70:ef:d6:5f:64:1f:01:82:40:c1:6a:6e:ec:16:
7c:19:12:00:0d:a8:da:9d:1a:c6:7a:a7:d2:bd:92:44:55:b4:
99:48:ac:b4:32:ff:67:19:76:73:32:fb:05:1e:56:a5:de:2f:
4a:0c:96:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org