Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/6/3139332e3139342e31362e302f32322d3234203d3e203630383538.roa
File: 3139332e3139342e31362e302f32322d3234203d3e203630383538.roa (raw, json)
Hash identifier: w7OU8IWFJb1/7sJewX4FdLCIeZ6fOstd7yh3FwNoJ+c=
Subject key identifier: 5C:BD:7B:A5:F9:CA:60:18:6C:61:A9:2B:C2:AA:28:3F:C8:8F:9D:97
Certificate issuer: /CN=53bb2b93d467bf2e561ae522544a00eb73e4713b
Certificate serial: D6F7EF826E1BECE9436294513C656CCDFB9596
Authority key identifier: 53:BB:2B:93:D4:67:BF:2E:56:1A:E5:22:54:4A:00:EB:73:E4:71:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7srk9Rnvy5WGuUiVEoA63PkcTs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/6/3139332e3139342e31362e302f32322d3234203d3e203630383538.roa
Signing time: Tue 21 May 2024 14:57:22 +0000
ROA not before: Tue 21 May 2024 14:52:22 +0000
ROA not after: Tue 20 May 2025 14:57:22 +0000
asID: 60858
IP address blocks: 193.194.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d6:f7:ef:82:6e:1b:ec:e9:43:62:94:51:3c:65:6c:cd:fb:95:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bb2b93d467bf2e561ae522544a00eb73e4713b
Validity
Not Before: May 21 14:52:22 2024 GMT
Not After : May 20 14:57:22 2025 GMT
Subject: CN=5CBD7BA5F9CA60186C61A92BC2AA283FC88F9D97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:71:94:9d:cb:63:f8:ac:60:0a:1e:ab:7f:03:
2b:9e:55:d5:88:d9:22:1c:26:ac:c9:e1:78:a7:82:
09:93:bf:e9:37:5a:87:ef:35:7c:ce:5e:92:e5:9e:
cc:f9:33:5a:7f:d6:02:38:69:ad:82:85:b9:5e:8b:
90:18:4b:fa:d3:8e:b5:33:76:25:4a:86:59:2b:32:
29:5a:b9:ab:60:b7:01:7f:8c:2e:34:ec:aa:e7:89:
d8:9e:6f:73:ad:40:3b:29:e0:fc:1f:66:a0:0b:f8:
31:e0:59:6e:b0:f3:42:b9:09:5f:88:63:35:3c:9a:
35:27:94:ef:86:32:c7:fb:db:ba:fc:d5:f2:51:1b:
b4:dd:5e:38:b9:7b:ad:0a:b0:ea:56:e4:31:a8:db:
76:0b:be:26:9e:99:ec:1d:ce:11:65:e3:d6:d7:4d:
22:d2:ae:cf:83:c4:dd:b1:85:4c:96:f5:2e:f1:65:
db:13:e6:52:38:b7:7c:d8:d8:a3:73:d4:cb:61:08:
0d:3f:b0:f0:c5:83:01:dd:10:3f:72:78:55:bb:1a:
92:c5:06:02:dc:20:80:f6:27:a9:2b:3f:68:9d:8a:
30:ab:b2:74:54:a5:86:d5:f2:b0:b0:e3:2e:bd:76:
53:19:dc:cd:cb:21:58:dd:01:21:12:78:98:00:5f:
87:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BD:7B:A5:F9:CA:60:18:6C:61:A9:2B:C2:AA:28:3F:C8:8F:9D:97
X509v3 Authority Key Identifier:
keyid:53:BB:2B:93:D4:67:BF:2E:56:1A:E5:22:54:4A:00:EB:73:E4:71:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/6/53BB2B93D467BF2E561AE522544A00EB73E4713B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7srk9Rnvy5WGuUiVEoA63PkcTs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/6/3139332e3139342e31362e302f32322d3234203d3e203630383538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.16.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:9a:3e:c6:76:0e:2e:de:72:39:8f:94:ee:e3:a9:bd:1a:0e:
2d:da:f1:09:69:6f:e9:42:d6:26:ef:99:76:fb:a7:63:0e:6f:
f5:19:3b:d0:77:2f:d0:7f:42:d5:57:c0:35:78:86:76:cc:83:
2a:90:aa:4c:9a:1f:88:8f:2d:a5:b7:d8:73:9b:b6:57:35:4e:
3c:2f:59:39:95:02:82:55:46:e5:0b:8e:69:ee:e6:2a:f9:78:
9a:c8:b2:a5:bc:b2:09:52:76:10:71:9f:76:02:78:1d:2d:16:
0f:a8:2b:1f:ee:6b:37:92:e0:c7:43:94:ad:65:27:c9:86:a9:
05:c7:3d:16:6a:64:19:01:77:06:0f:0c:cd:ff:3d:ed:22:3c:
b9:7b:d5:d2:49:9a:f2:17:1d:d4:c7:0c:ac:c8:81:03:6b:b3:
53:b7:7a:fd:4f:02:18:7b:cd:11:10:1c:df:46:f9:d8:29:62:
51:55:26:2f:d1:18:6b:86:02:b7:b3:89:dd:70:71:62:73:b4:
b1:00:25:2c:21:27:c4:39:7c:6a:86:f8:c4:18:c9:38:43:34:
b1:e5:ce:46:65:bd:6e:92:61:b8:15:99:60:2e:29:1d:a8:a5:
53:af:ba:9d:8a:19:cc:84:a4:97:95:16:a6:ee:a9:b2:33:e9:
e5:f6:00:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-fra.rpki-client.org