Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3139352e3230302e3232312e302f32342d3332203d3e20313336373837.roa
File: 3139352e3230302e3232312e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: amXPCOdt4BiZMc+N3lI1u6UotdomwMbbHBqnmZb3PTc=
Subject key identifier: 0F:61:ED:8B:D6:D2:7B:16:56:C3:C6:31:D3:70:23:E1:16:31:E3:95
Certificate issuer: /CN=5d2125f62f509085753ba79e14ab685d68fb498d
Certificate serial: 5D5CC2597EC9CAEDC1FA29B91D4BF3C01E50484B
Authority key identifier: 5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3139352e3230302e3232312e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 27 Mar 2023 08:27:48 +0000
ROA not before: Mon 27 Mar 2023 08:22:48 +0000
ROA not after: Mon 25 Mar 2024 08:27:48 +0000
asID: 136787
IP address blocks: 195.200.221.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:5c:c2:59:7e:c9:ca:ed:c1:fa:29:b9:1d:4b:f3:c0:1e:50:48:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2125f62f509085753ba79e14ab685d68fb498d
Validity
Not Before: Mar 27 08:22:48 2023 GMT
Not After : Mar 25 08:27:48 2024 GMT
Subject: CN=0F61ED8BD6D27B1656C3C631D37023E11631E395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:c7:43:cd:a3:73:36:38:4a:89:df:71:13:
2e:90:c6:0c:a8:0e:f2:04:a9:c9:75:d0:14:45:1f:
b6:1e:88:81:8e:cd:5a:ef:34:fd:27:f4:4f:e3:1d:
46:5a:90:99:6f:aa:7d:85:db:19:db:45:c4:79:14:
f6:da:34:f6:3e:26:bb:65:86:d4:2d:c9:3f:87:0a:
6f:c8:47:7f:37:a9:17:7a:42:5e:b7:0f:80:38:d1:
a5:d5:42:b8:3a:33:ff:ab:8b:ec:ca:e0:10:bb:18:
34:91:8c:2f:59:73:4c:b2:ad:9b:a3:5d:a9:55:b1:
77:2d:5a:82:9a:88:dc:6a:e2:85:5d:7a:ec:a6:e0:
7e:7a:50:cb:92:0c:a2:65:c4:9c:25:65:8d:80:11:
2b:66:d1:2c:90:ea:4c:85:66:35:6a:84:55:99:1c:
18:d0:44:0f:c4:66:98:bb:1e:d9:3e:bf:e9:37:1d:
a4:82:98:76:bb:76:6d:12:aa:ae:1e:bd:0c:e7:83:
b9:36:db:0b:26:75:83:60:e1:72:d8:16:15:90:06:
e4:57:c5:52:5a:d6:b8:2c:46:6a:cb:b3:ff:06:28:
40:e4:ca:6c:2c:d5:e4:6c:9a:f5:cb:57:74:e9:c9:
ad:c1:97:b4:0b:46:69:9d:14:9d:c5:94:f0:49:de:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:61:ED:8B:D6:D2:7B:16:56:C3:C6:31:D3:70:23:E1:16:31:E3:95
X509v3 Authority Key Identifier:
keyid:5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/5D2125F62F509085753BA79E14AB685D68FB498D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3139352e3230302e3232312e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.221.0/24
Signature Algorithm: sha256WithRSAEncryption
af:89:38:a3:f4:83:5e:2b:bf:40:86:0c:37:76:9d:87:f0:3a:
5c:53:4e:91:6c:ae:b6:f0:7f:7e:1d:6d:d1:4c:e3:ca:ee:43:
d6:29:6a:45:86:a4:8a:60:ff:0f:e5:cc:a1:40:56:e5:38:58:
40:13:a0:a1:31:9d:d8:b2:f4:ca:8b:01:34:c9:78:a0:9b:1e:
ca:72:d5:e6:6c:e9:6b:28:d5:d6:01:b7:f3:94:52:8c:f4:cb:
55:18:33:f9:0a:16:48:37:ae:2c:e5:de:fa:15:21:e7:ff:7d:
0f:52:d1:4e:ef:1d:59:39:51:4d:9c:e9:5c:c2:9f:ac:02:44:
0e:d4:80:9c:66:84:49:60:b7:c9:6c:74:f7:40:30:3e:55:dc:
da:16:7b:5d:bf:b9:a0:51:eb:09:be:36:48:61:9b:20:57:30:
a4:0e:40:c1:ea:51:d3:65:94:d5:10:d8:52:8a:69:c2:82:a2:
18:e0:99:d0:3e:0f:43:b7:df:1b:e8:57:96:4a:7c:a5:d8:31:
ef:7c:83:18:4f:f8:7c:40:8f:00:1a:36:d8:1f:ec:f2:ac:c3:
eb:c3:20:ab:fc:c2:20:75:f3:95:76:1d:1d:7d:8f:84:d1:02:
48:bc:6f:0d:a5:30:6d:62:ef:6d:e1:ef:34:a1:33:3e:1c:e4:
97:74:20:01
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUXVzCWX7Jyu3B+im5HUvzwB5QSEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWQyMTI1ZjYyZjUwOTA4NTc1M2JhNzllMTRhYjY4NWQ2
OGZiNDk4ZDAeFw0yMzAzMjcwODIyNDhaFw0yNDAzMjUwODI3NDhaMDMxMTAvBgNV
BAMTKDBGNjFFRDhCRDZEMjdCMTY1NkMzQzYzMUQzNzAyM0UxMTYzMUUzOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+NMdDzaNzNjhKid9xEy6Qxgyo
DvIEqcl10BRFH7YeiIGOzVrvNP0n9E/jHUZakJlvqn2F2xnbRcR5FPbaNPY+Jrtl
htQtyT+HCm/IR383qRd6Ql63D4A40aXVQrg6M/+ri+zK4BC7GDSRjC9Zc0yyrZuj
XalVsXctWoKaiNxq4oVdeuym4H56UMuSDKJlxJwlZY2AEStm0SyQ6kyFZjVqhFWZ
HBjQRA/EZpi7Htk+v+k3HaSCmHa7dm0Sqq4evQzng7k22wsmdYNg4XLYFhWQBuRX
xVJa1rgsRmrLs/8GKEDkymws1eRsmvXLV3Tpya3Bl7QLRmmdFJ3FlPBJ3gTrAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUD2Hti9bSexZWw8Yx03Aj4RYx45UwHwYDVR0j
BBgwFoAUXSEl9i9QkIV1O6eeFKtoXWj7SY0wDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNjQvNUQyMTI1RjYyRjUwOTA4NTc1M0JBNzlFMTRBQjY4NUQ2OEZCNDk4
RC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hTRWw5aTlRa0lWMU82ZWVGS3Rv
WFdqN1NZMC5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE2NC8zMTM5MzUyZTMyMzAz
MDJlMzIzMjMxMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzMzM2MzczODM3LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAw8jdMA0GCSqGSIb3DQEBCwUAA4IBAQCviTij9INeK79Ahgw3dp2H
8DpcU06RbK628H9+HW3RTOPK7kPWKWpFhqSKYP8P5cyhQFblOFhAE6ChMZ3YsvTK
iwE0yXigmx7KctXmbOlrKNXWAbfzlFKM9MtVGDP5ChZIN64s5d76FSHn/30PUtFO
7x1ZOVFNnOlcwp+sAkQO1ICcZoRJYLfJbHT3QDA+VdzaFntdv7mgUesJvjZIYZsg
VzCkDkDB6lHTZZTVENhSimnCgqIY4JnQPg9Dt98b6FeWSnyl2DHvfIMYT/h8QI8A
GjbYH+zyrMPrwyCr/MIgdfOVdh0dfY+E0QJIvG8NpTBtYu9t4e80oTM+HOSXdCAB
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org