Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/218/3137362e3130302e34332e302f32342d3234203d3e20313437303439.roa
File: 3137362e3130302e34332e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: R/JEE9o765tE39Vl3phZZRW65TYjDrbD40t0UN1jBOE=
Subject key identifier: E3:8E:CE:59:45:B0:71:76:6C:4B:CB:63:29:04:65:F9:2B:27:AE:03
Certificate issuer: /CN=c260a3c7b7d3d21aed99f15df5bee1f58e4eea7d
Certificate serial: 2AE2C7B497DF7D21EBF8B567C7ABEEE48BF766CC
Authority key identifier: C2:60:A3:C7:B7:D3:D2:1A:ED:99:F1:5D:F5:BE:E1:F5:8E:4E:EA:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wmCjx7fT0hrtmfFd9b7h9Y5O6n0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/218/3137362e3130302e34332e302f32342d3234203d3e20313437303439.roa
Signing time: Mon 27 Mar 2023 08:27:36 +0000
ROA not before: Mon 27 Mar 2023 08:22:36 +0000
ROA not after: Mon 25 Mar 2024 08:27:36 +0000
asID: 147049
IP address blocks: 176.100.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e2:c7:b4:97:df:7d:21:eb:f8:b5:67:c7:ab:ee:e4:8b:f7:66:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c260a3c7b7d3d21aed99f15df5bee1f58e4eea7d
Validity
Not Before: Mar 27 08:22:36 2023 GMT
Not After : Mar 25 08:27:36 2024 GMT
Subject: CN=E38ECE5945B071766C4BCB63290465F92B27AE03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:a6:a6:96:73:35:59:aa:20:66:aa:ab:c9:
a9:ed:06:b9:e1:7a:2e:7e:5a:52:7e:da:c0:03:1a:
ff:01:42:76:0f:48:9f:6d:65:39:1f:df:48:f5:ca:
16:6d:40:bb:53:2e:13:9c:33:c6:09:fe:00:66:95:
ea:2d:93:a9:22:e5:20:03:07:82:61:9c:54:e6:18:
4d:6c:3c:46:22:25:21:08:09:d0:06:0b:af:81:e8:
58:ca:5f:bd:e3:e5:5e:f7:6a:90:1e:c9:95:4d:83:
36:9d:f7:f5:05:53:8e:dc:53:38:ea:9b:49:9a:b5:
c8:c5:a2:cd:14:53:73:4d:b8:93:40:65:16:4c:95:
2c:38:99:2d:30:4d:98:df:d5:be:9c:8e:32:cd:49:
1d:22:4d:ae:c5:6c:d2:49:4c:8f:ad:d3:7a:94:e9:
80:e2:24:ff:b1:ca:71:75:07:ae:ae:d0:bd:1d:de:
48:d2:ec:e1:46:41:f4:da:4a:94:7a:5f:fc:c5:6f:
c4:31:1c:dc:71:a9:f2:e0:1a:df:be:8d:22:61:5f:
c7:01:7d:3d:b8:7c:11:f9:df:12:46:4e:fc:fa:bb:
4a:58:8e:85:3c:98:1f:a8:bb:5a:c6:30:6b:62:a3:
4b:f2:29:b0:1c:99:6d:15:08:7d:ae:9e:e7:a0:39:
f7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8E:CE:59:45:B0:71:76:6C:4B:CB:63:29:04:65:F9:2B:27:AE:03
X509v3 Authority Key Identifier:
keyid:C2:60:A3:C7:B7:D3:D2:1A:ED:99:F1:5D:F5:BE:E1:F5:8E:4E:EA:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/218/C260A3C7B7D3D21AED99F15DF5BEE1F58E4EEA7D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmCjx7fT0hrtmfFd9b7h9Y5O6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/218/3137362e3130302e34332e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.43.0/24
Signature Algorithm: sha256WithRSAEncryption
08:7b:b8:b8:ba:f3:b1:be:ca:7c:e0:dc:c4:a3:de:26:60:53:
5d:ee:af:22:f7:f2:aa:70:1c:c3:06:61:1e:bd:ae:d0:ae:5d:
6d:a2:22:f2:1a:82:3a:d5:0b:52:ff:e1:57:13:99:59:58:83:
33:e0:b6:a1:8c:6a:d4:81:5b:d6:4a:be:86:38:7e:20:71:fb:
05:b0:ab:e1:f8:6b:02:c3:a7:ab:d2:0d:53:d8:57:62:14:8e:
07:a5:a2:0b:79:a1:0f:f8:22:db:44:34:22:a7:49:7f:75:a8:
ea:b6:4f:08:d4:5a:be:ea:9e:0f:9e:08:ed:55:33:1f:b7:f0:
a8:46:85:4a:7a:81:7e:51:fc:3b:87:6a:80:4f:54:b4:89:cb:
e8:0e:68:06:e9:91:89:c7:fa:73:ab:36:69:b8:9f:06:51:53:
d2:22:61:2f:d0:70:74:6a:a2:ef:e2:d5:22:fe:de:da:15:cc:
00:0b:c6:70:1c:77:ea:ab:85:af:eb:a7:ca:db:53:f1:be:9c:
df:d7:49:2f:9e:90:14:d0:67:c4:1c:42:75:e9:c3:17:82:ca:
e5:da:37:c1:58:01:ca:44:68:1f:d5:d8:7f:8d:41:24:c4:38:
b8:d4:14:e4:b6:aa:e7:8b:35:07:f5:0a:b5:30:bf:99:ba:8d:
55:32:4f:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org