Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/201/3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa
File: 3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa (raw, json)
Hash identifier: erbhmrC0zUWVvyWqOf+2U2ZDOmzFKhAqq6NnX+CMqAA=
Subject key identifier: 98:94:9A:F7:86:30:D9:2D:AB:EF:B7:87:F2:DE:78:FB:31:FB:4D:41
Certificate issuer: /CN=957fd0fb562156b5819afce5032c10483b016cd8
Certificate serial: 202CA31DA337D02C60129FD939DA7367C76CB7C0
Authority key identifier: 95:7F:D0:FB:56:21:56:B5:81:9A:FC:E5:03:2C:10:48:3B:01:6C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lX_Q-1YhVrWBmvzlAywQSDsBbNg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/201/3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa
Signing time: Mon 27 Mar 2023 08:27:11 +0000
ROA not before: Mon 27 Mar 2023 08:22:11 +0000
ROA not after: Mon 25 Mar 2024 08:27:11 +0000
asID: 205659
IP address blocks: 193.46.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:2c:a3:1d:a3:37:d0:2c:60:12:9f:d9:39:da:73:67:c7:6c:b7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=957fd0fb562156b5819afce5032c10483b016cd8
Validity
Not Before: Mar 27 08:22:11 2023 GMT
Not After : Mar 25 08:27:11 2024 GMT
Subject: CN=98949AF78630D92DABEFB787F2DE78FB31FB4D41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:58:d9:a5:3e:cd:9a:54:d8:8b:f2:58:99:
75:97:9f:8f:11:7e:1c:d7:45:de:ee:30:00:cb:92:
4a:56:e1:48:5f:9a:e1:d6:73:27:a0:5c:b1:fd:6e:
85:56:aa:8e:51:6d:0c:ac:9e:9e:bf:d0:13:2a:04:
3d:5b:43:f7:42:1a:fb:36:6c:7f:68:82:4e:fe:3a:
c0:8d:06:74:70:4f:be:7e:03:88:73:a3:2e:cd:b3:
44:25:e6:18:c1:04:88:cf:2e:ae:b0:4b:44:12:d5:
0d:a1:6c:ef:f3:38:4f:6e:6b:df:ec:57:aa:ea:ae:
d2:2b:8d:55:04:03:8e:5e:d9:09:4f:2a:af:d6:af:
1e:e1:1b:ee:85:4e:eb:8a:af:15:66:e3:ab:8f:37:
75:b2:29:32:2e:70:3a:66:26:e4:b7:9d:db:9a:ff:
99:fb:27:24:ed:30:ef:15:bb:23:cf:27:fe:52:23:
93:9e:82:9c:e5:b4:ef:60:51:dc:8d:ed:1b:7e:a3:
e4:36:85:f5:0f:65:3a:eb:3c:e0:d0:21:b4:eb:97:
1e:c7:c4:08:e4:46:3d:5f:31:76:9c:fb:f0:27:f0:
6f:94:9b:15:3e:42:29:4d:7b:73:b5:25:a0:58:f5:
0a:1a:86:c7:09:85:16:79:48:a7:75:b5:95:e7:3a:
83:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:94:9A:F7:86:30:D9:2D:AB:EF:B7:87:F2:DE:78:FB:31:FB:4D:41
X509v3 Authority Key Identifier:
keyid:95:7F:D0:FB:56:21:56:B5:81:9A:FC:E5:03:2C:10:48:3B:01:6C:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/201/957FD0FB562156B5819AFCE5032C10483B016CD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lX_Q-1YhVrWBmvzlAywQSDsBbNg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/201/3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.221.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f7:75:a5:1e:eb:7b:f5:cc:c0:8d:69:98:82:9a:17:3e:f9:
c4:9e:40:80:18:ff:83:bd:a6:35:d8:33:46:b1:c2:e5:7d:43:
ea:6c:06:2f:4f:28:2b:08:df:9c:d8:17:c3:7a:b5:8a:96:7a:
30:dd:ee:d5:de:fe:63:fa:ad:80:58:89:d0:95:9e:9c:46:5d:
2e:29:6f:42:b2:85:20:84:ec:bc:a0:ae:4f:67:30:a5:8f:f6:
fe:50:b3:a2:7a:3f:cc:25:c2:22:94:a7:20:47:bd:d9:5a:b0:
ec:ff:35:fc:f9:49:d0:80:08:41:e8:ab:47:3a:3c:0e:e9:cb:
08:a7:27:1e:9c:d0:db:e2:aa:6b:f6:ef:b0:31:ab:43:1a:e1:
e2:06:d8:bc:89:a7:cf:15:45:1c:69:31:50:ca:2a:6c:d6:85:
0c:ed:56:fa:b9:e0:57:76:30:3e:70:0f:8b:d5:6e:7e:90:0c:
f0:12:b5:1f:20:70:a4:e3:63:8e:60:05:19:78:dc:7f:c2:e1:
58:5e:cd:f4:c5:5c:a2:3e:f3:b9:1b:d2:b9:6e:4b:ab:fc:37:
57:22:02:34:24:fd:c9:35:9a:3f:81:94:77:2f:46:31:d0:37:
e4:ae:50:24:20:c0:79:45:83:c8:1b:e1:d0:8b:f0:e9:32:6c:
0f:7f:af:3a
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUICyjHaM30CxgEp/ZOdpzZ8dst8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU3ZmQwZmI1NjIxNTZiNTgxOWFmY2U1MDMyYzEwNDgz
YjAxNmNkODAeFw0yMzAzMjcwODIyMTFaFw0yNDAzMjUwODI3MTFaMDMxMTAvBgNV
BAMTKDk4OTQ5QUY3ODYzMEQ5MkRBQkVGQjc4N0YyREU3OEZCMzFGQjRENDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBK1jZpT7NmlTYi/JYmXWXn48R
fhzXRd7uMADLkkpW4UhfmuHWcyegXLH9boVWqo5RbQysnp6/0BMqBD1bQ/dCGvs2
bH9ogk7+OsCNBnRwT75+A4hzoy7Ns0Ql5hjBBIjPLq6wS0QS1Q2hbO/zOE9ua9/s
V6rqrtIrjVUEA45e2QlPKq/Wrx7hG+6FTuuKrxVm46uPN3WyKTIucDpmJuS3ndua
/5n7JyTtMO8VuyPPJ/5SI5OegpzltO9gUdyN7Rt+o+Q2hfUPZTrrPODQIbTrlx7H
xAjkRj1fMXac+/An8G+UmxU+QilNe3O1JaBY9QoahscJhRZ5SKd1tZXnOoOLAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUmJSa94Yw2S2r77eH8t54+zH7TUEwHwYDVR0j
BBgwFoAUlX/Q+1YhVrWBmvzlAywQSDsBbNgwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8yMDEvOTU3RkQwRkI1NjIxNTZCNTgxOUFGQ0U1MDMyQzEwNDgzQjAxNkNE
OC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2xYX1EtMVloVnJXQm12emxBeXdR
U0RzQmJOZy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIwMS8zMTM5MzMyZTM0MzYy
ZTMyMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNTM2MzUzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMEu3TANBgkqhkiG9w0BAQsFAAOCAQEAFfd1pR7re/XMwI1pmIKaFz75
xJ5AgBj/g72mNdgzRrHC5X1D6mwGL08oKwjfnNgXw3q1ipZ6MN3u1d7+Y/qtgFiJ
0JWenEZdLilvQrKFIITsvKCuT2cwpY/2/lCzono/zCXCIpSnIEe92Vqw7P81/PlJ
0IAIQeirRzo8DunLCKcnHpzQ2+Kqa/bvsDGrQxrh4gbYvImnzxVFHGkxUMoqbNaF
DO1W+rngV3YwPnAPi9VufpAM8BK1HyBwpONjjmAFGXjcf8LhWF7N9MVcoj7zuRvS
uW5Lq/w3VyICNCT9yTWaP4GUdy9GMdA35K5QJCDAeUWDyBvh0Ivw6TJsD3+vOg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:23 2024 by rpki-client on console-fra.rpki-client.org