Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3139332e3136302e3131392e302f32342d3234203d3e203437353833.roa
File: 3139332e3136302e3131392e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: r2RPpMohQYmIFu4rRFBO3DphlFTiUWgBI9TeWuCagBs=
Subject key identifier: 03:E2:FF:81:55:B0:5F:86:25:65:58:B6:EA:3D:C6:29:D2:D0:5F:8E
Certificate issuer: /CN=5d2125f62f509085753ba79e14ab685d68fb498d
Certificate serial: 472F6004958FCD415404719A161C73C3147A891E
Authority key identifier: 5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3139332e3136302e3131392e302f32342d3234203d3e203437353833.roa
Signing time: Mon 27 Mar 2023 08:27:48 +0000
ROA not before: Mon 27 Mar 2023 08:22:48 +0000
ROA not after: Mon 25 Mar 2024 08:27:48 +0000
asID: 47583
IP address blocks: 193.160.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:2f:60:04:95:8f:cd:41:54:04:71:9a:16:1c:73:c3:14:7a:89:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2125f62f509085753ba79e14ab685d68fb498d
Validity
Not Before: Mar 27 08:22:48 2023 GMT
Not After : Mar 25 08:27:48 2024 GMT
Subject: CN=03E2FF8155B05F86256558B6EA3DC629D2D05F8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f3:6f:1b:39:9d:2f:e3:a7:93:bb:94:13:58:
34:f0:f6:4d:16:81:3f:66:17:bb:0a:ca:03:b3:5b:
71:33:75:b8:97:ee:0d:91:fe:0b:1b:01:6e:ee:fe:
8a:d4:1f:e3:77:8a:16:4d:2b:8b:03:e5:58:c5:fc:
10:8f:83:ba:7d:92:bd:8b:d1:ab:22:69:13:d5:db:
5c:20:44:8d:34:2f:69:a1:f4:32:d1:0b:a2:86:ca:
03:da:de:fc:59:8e:c9:fe:58:ab:10:d9:97:52:f5:
0c:ad:74:67:85:37:d1:c1:2a:e6:6e:93:f2:4b:dc:
bd:29:ef:88:62:95:d2:83:0c:55:f6:fa:d4:ff:69:
a5:92:22:aa:bf:5e:95:8e:0f:6c:11:6f:24:8c:3d:
4d:a6:f1:da:02:05:b7:f1:35:03:6b:c1:14:e6:d5:
16:e2:30:ff:99:94:10:03:6c:65:1f:e5:9e:db:f5:
cd:ea:2f:4b:13:24:af:3f:a9:9e:41:b7:61:f4:36:
4b:75:82:80:a2:aa:44:e2:34:08:86:e0:13:e3:22:
03:35:50:c2:d2:aa:5f:1f:cf:7a:e4:b7:f2:d8:17:
dc:a4:49:79:47:00:d5:1e:c4:44:bf:65:dc:51:f2:
7a:ee:c3:0a:27:1a:cc:d8:6c:4c:8f:58:ca:50:29:
88:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E2:FF:81:55:B0:5F:86:25:65:58:B6:EA:3D:C6:29:D2:D0:5F:8E
X509v3 Authority Key Identifier:
keyid:5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/5D2125F62F509085753BA79E14AB685D68FB498D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3139332e3136302e3131392e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.119.0/24
Signature Algorithm: sha256WithRSAEncryption
60:da:1a:19:21:28:f3:d9:bb:07:72:56:1a:64:bb:41:bf:5c:
77:a9:e4:e8:c8:9e:83:54:5c:e5:8a:07:90:e9:5c:60:ac:16:
f0:4c:4f:78:4a:63:14:5e:05:38:db:d9:4e:e7:85:dd:d2:e1:
23:ef:53:49:19:2a:7d:61:09:6b:82:6e:cd:43:54:1c:30:3c:
ff:d5:cb:fd:f2:82:16:de:71:0a:b5:82:0d:76:c0:b6:e7:9d:
15:b3:e7:4f:96:b5:da:4f:4c:bd:84:02:94:90:f2:40:c4:c7:
32:33:50:1e:d1:40:68:e3:c5:d3:bb:f6:94:8c:b0:56:3c:d7:
5b:d6:87:b5:d9:c0:a2:2d:62:60:6a:fe:8f:9c:0c:e2:71:94:
9a:a7:21:38:25:ff:c4:51:de:5c:ee:2d:f7:61:fd:a7:b7:78:
bd:15:8c:85:57:6c:4c:10:c1:b7:5c:89:74:e4:a3:d8:17:ca:
bd:f0:cd:ea:97:ad:69:94:7f:0f:6c:12:8c:c2:cb:04:f9:df:
88:23:48:0d:e2:44:c4:cd:cd:c1:35:d1:6e:d2:2d:a3:0e:a7:
1d:96:c4:b4:89:86:ff:da:07:0c:36:d3:41:31:e0:da:d9:96:
9a:51:07:d6:a2:a9:ef:33:99:70:0a:69:a9:fe:0f:f2:07:b0:
b1:60:31:6f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org