Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/215/39312e3139392e3132322e302f32342d3234203d3e20323033303631.roa
File: 39312e3139392e3132322e302f32342d3234203d3e20323033303631.roa (raw, json)
Hash identifier: 2T92KEJPmh9VrcOEsFi5CMatw6U9b4QD9jactejyOpY=
Subject key identifier: 2E:4B:A2:40:30:28:52:8C:44:24:9A:EB:B8:41:C4:05:44:B5:92:19
Certificate issuer: /CN=709f1c51c0a2e86d0df1d693d4988ee1e92000ca
Certificate serial: 2DF83CD7C4DBF99CFD8E0784DA5B69A3D88C211D
Authority key identifier: 70:9F:1C:51:C0:A2:E8:6D:0D:F1:D6:93:D4:98:8E:E1:E9:20:00:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ8cUcCi6G0N8daT1JiO4ekgAMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/215/39312e3139392e3132322e302f32342d3234203d3e20323033303631.roa
Signing time: Mon 27 Mar 2023 08:27:47 +0000
ROA not before: Mon 27 Mar 2023 08:22:47 +0000
ROA not after: Mon 25 Mar 2024 08:27:47 +0000
asID: 203061
IP address blocks: 91.199.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:f8:3c:d7:c4:db:f9:9c:fd:8e:07:84:da:5b:69:a3:d8:8c:21:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709f1c51c0a2e86d0df1d693d4988ee1e92000ca
Validity
Not Before: Mar 27 08:22:47 2023 GMT
Not After : Mar 25 08:27:47 2024 GMT
Subject: CN=2E4BA2403028528C44249AEBB841C40544B59219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:ce:65:f1:3a:98:90:d7:ae:f7:71:90:21:
02:8b:d3:31:ec:df:14:87:fd:0c:c7:48:18:15:0d:
f9:14:69:cc:0e:58:3b:8e:32:79:a2:cf:33:dc:5c:
56:66:94:46:74:23:c9:5f:60:ec:45:e2:a9:64:38:
9e:1b:ca:82:32:18:0b:2b:3b:58:03:42:2f:f7:42:
9e:35:a7:fa:b5:84:55:0c:4e:2d:3b:1f:d8:6b:74:
02:57:24:d3:20:f6:0d:83:49:2c:e3:7d:e5:bb:8a:
f9:f2:37:5d:a8:4b:66:4b:76:89:e9:4c:06:59:82:
d8:28:8c:d6:bf:f8:35:db:e8:55:a5:18:27:c9:a3:
0d:e1:16:92:47:76:31:ea:fd:cf:ce:eb:fb:22:36:
ef:02:86:c8:66:f1:56:0c:e5:3a:ee:d6:a8:34:2d:
64:93:f3:bd:df:f8:69:3f:2c:59:f1:01:b2:03:17:
7b:33:9d:5c:10:1a:66:59:0c:b9:f0:68:63:f0:a3:
3b:07:d5:56:68:4b:34:c6:d0:2e:19:a2:39:1e:00:
ee:5f:e4:0a:58:71:66:10:07:bd:de:1e:3c:82:5a:
36:2e:70:7c:78:9c:9f:b6:7c:7b:23:4a:83:00:d9:
00:93:3c:ce:61:34:da:d2:25:8e:cf:0c:8f:0a:d8:
52:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4B:A2:40:30:28:52:8C:44:24:9A:EB:B8:41:C4:05:44:B5:92:19
X509v3 Authority Key Identifier:
keyid:70:9F:1C:51:C0:A2:E8:6D:0D:F1:D6:93:D4:98:8E:E1:E9:20:00:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/215/709F1C51C0A2E86D0DF1D693D4988EE1E92000CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ8cUcCi6G0N8daT1JiO4ekgAMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/215/39312e3139392e3132322e302f32342d3234203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.122.0/24
Signature Algorithm: sha256WithRSAEncryption
34:96:26:68:f7:70:6d:6a:a7:16:24:7a:b2:3a:62:a9:dc:12:
f4:9e:50:50:73:0e:54:b5:ea:6b:73:bc:ca:9a:d6:25:3b:bd:
67:fd:f7:ca:c0:85:d3:4a:ee:3e:99:c3:e5:3b:58:67:17:7b:
c4:a5:2f:8c:0c:79:29:16:04:f1:d7:02:d4:50:17:a5:e7:3b:
1a:b8:38:30:dc:a3:44:c5:6a:ed:e2:97:97:3c:b2:4b:27:50:
4a:39:07:e5:18:e0:4f:d6:2c:18:04:c9:02:dd:32:81:ec:40:
e4:6a:c3:2a:a4:94:7a:80:6b:a8:db:fe:0b:14:7a:89:f5:9d:
95:41:54:95:4f:30:07:ff:16:9c:7e:d2:41:65:0e:46:fb:a3:
76:a9:fa:47:c7:ff:53:9d:63:41:c5:54:ea:99:3b:91:e3:ab:
f9:64:c4:85:e7:72:94:66:fb:20:9f:1b:3a:6c:df:04:d5:16:
98:b0:b0:67:18:2c:75:be:66:31:f1:07:62:59:4a:63:4c:8e:
ea:cd:4c:0d:90:19:9e:4e:30:89:19:80:5c:6e:5a:ad:61:ef:
58:b5:71:35:6c:1a:b6:db:4f:57:8c:c6:00:99:cf:53:78:9b:
18:61:97:ce:db:f1:b5:5f:c4:01:73:c6:cf:72:a2:fe:ef:8e:
eb:1a:f5:a8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org