Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3139352e3231362e3231392e302f32342d3332203d3e20313336373837.roa
File: 3139352e3231362e3231392e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: zNfd0ETDZMcsgQnc2JKHALlbkkiqqz4BIV7VjwdIKeU=
Subject key identifier: 1D:54:20:AA:46:E6:1D:3B:AD:16:61:B8:7E:FD:7E:21:2B:FE:11:7C
Certificate issuer: /CN=5d2125f62f509085753ba79e14ab685d68fb498d
Certificate serial: 5D322A90BE0DAA780716F1E25CEFA47422FEAF92
Authority key identifier: 5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3139352e3231362e3231392e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 27 Mar 2023 08:27:48 +0000
ROA not before: Mon 27 Mar 2023 08:22:48 +0000
ROA not after: Mon 25 Mar 2024 08:27:48 +0000
asID: 136787
IP address blocks: 195.216.219.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:32:2a:90:be:0d:aa:78:07:16:f1:e2:5c:ef:a4:74:22:fe:af:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2125f62f509085753ba79e14ab685d68fb498d
Validity
Not Before: Mar 27 08:22:48 2023 GMT
Not After : Mar 25 08:27:48 2024 GMT
Subject: CN=1D5420AA46E61D3BAD1661B87EFD7E212BFE117C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:83:64:5e:0e:c0:a4:0b:e4:77:76:46:2a:
cb:be:3f:28:bc:69:00:b4:99:21:50:ee:0d:3a:1c:
93:7a:9d:8c:1d:73:0c:85:50:a6:78:a0:b5:ce:4e:
ca:67:78:13:d0:64:f4:c4:b8:25:33:f2:79:77:45:
2b:f5:57:ac:10:5e:a8:d5:69:c7:0a:58:00:70:5c:
23:dd:de:55:aa:ef:a8:df:57:4d:34:2a:0f:71:ea:
6a:7f:0d:e8:26:c8:7d:ca:af:f5:9e:1c:ec:14:e7:
44:a7:36:d1:c3:80:49:e7:6f:ff:57:1d:65:68:04:
f3:17:88:52:e7:b6:da:99:f8:cd:19:07:18:d8:55:
24:64:4f:41:f9:ea:20:53:df:78:1b:61:91:09:df:
63:ce:44:3b:64:0b:5b:0d:3f:10:fb:49:a3:43:6a:
65:8d:a2:96:01:7a:cc:eb:d3:00:18:78:b9:f9:30:
5a:98:8a:10:23:4c:52:94:5c:55:19:ef:dd:6e:33:
30:19:11:3a:62:d9:a2:00:76:28:6f:ea:05:43:e3:
ea:4a:7d:d0:bb:c9:f8:20:a0:61:10:8e:54:3a:48:
83:4a:75:57:10:37:5a:09:e8:15:52:a2:64:18:cb:
dd:22:20:5f:b4:1a:7c:ab:56:f7:55:d9:fb:90:0d:
f1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:54:20:AA:46:E6:1D:3B:AD:16:61:B8:7E:FD:7E:21:2B:FE:11:7C
X509v3 Authority Key Identifier:
keyid:5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/5D2125F62F509085753BA79E14AB685D68FB498D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/3139352e3231362e3231392e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.219.0/24
Signature Algorithm: sha256WithRSAEncryption
25:95:dd:8a:3b:32:b8:4c:f6:cc:aa:02:44:11:0e:27:51:b9:
7a:a7:69:cf:4a:32:db:e1:15:22:83:44:52:5b:3c:69:c5:6a:
7f:11:b8:9a:e5:9e:eb:28:59:cf:ee:31:a1:59:a5:5f:7c:f9:
0d:d1:ea:3f:48:be:91:dd:99:07:fe:89:5c:34:53:02:f9:7b:
9a:a9:e8:ea:ec:2e:f0:b6:8f:26:e0:09:be:cf:59:d9:4e:65:
09:da:84:e3:d6:15:32:da:d8:40:bc:6e:95:de:cf:f3:4c:67:
c6:98:6d:29:2b:1f:ec:03:ff:fe:9c:7d:ae:77:92:13:e6:f9:
9c:36:6c:c7:2b:74:42:c1:ff:d3:b8:2a:85:d8:9d:ed:22:52:
49:b7:b9:be:a4:0c:7c:61:21:33:d1:3f:b4:a3:71:40:c5:e8:
86:99:7f:65:8f:38:db:c2:9a:89:aa:96:9f:3a:ad:d2:fa:6e:
6b:01:a3:d9:d2:59:81:f6:9a:c8:ed:93:65:74:19:d2:28:ba:
5f:1b:1c:91:66:51:59:00:6c:59:79:d4:8e:92:d6:e6:ca:f5:
a1:aa:2d:22:be:02:2a:28:c7:74:f2:0f:af:51:bc:d8:e0:85:
37:59:1a:83:a2:6b:10:42:12:a7:a5:18:60:53:ad:3a:4b:5e:
99:c8:5f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org