Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22e1f014-9d9f-4e91-a0c3-55f8bee32737/0/3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa
File: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (raw, json)
Hash identifier: LAQU8xT08WvtV3ziCg80jzet4BzVnmn+yGyar6G9zqw=
Subject key identifier: 1F:A0:A8:F6:6F:D3:02:44:12:91:8D:A1:54:59:CD:75:DF:32:DB:AB
Certificate issuer: /CN=63172433dfb02f1deb3381aed8c6c0967bd9a0d4
Certificate serial: 3F41E0B18F61E1EC12DCECC861A41E0C12078684
Authority key identifier: 63:17:24:33:DF:B0:2F:1D:EB:33:81:AE:D8:C6:C0:96:7B:D9:A0:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxckM9-wLx3rM4Gu2MbAlnvZoNQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22e1f014-9d9f-4e91-a0c3-55f8bee32737/0/3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa
Signing time: Sun 14 May 2023 19:28:20 +0000
ROA not before: Sun 14 May 2023 19:23:20 +0000
ROA not after: Sun 12 May 2024 19:28:20 +0000
asID: 198883
IP address blocks: 130.193.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:41:e0:b1:8f:61:e1:ec:12:dc:ec:c8:61:a4:1e:0c:12:07:86:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63172433dfb02f1deb3381aed8c6c0967bd9a0d4
Validity
Not Before: May 14 19:23:20 2023 GMT
Not After : May 12 19:28:20 2024 GMT
Subject: CN=1FA0A8F66FD3024412918DA15459CD75DF32DBAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:04:25:22:e9:a9:cd:96:fe:cc:d0:90:8d:5e:
cd:21:13:96:be:dc:79:62:f0:66:e5:e6:0a:45:f7:
ef:77:22:54:86:59:51:20:d6:87:6a:f7:f0:91:a6:
22:36:8b:ea:c9:5b:3b:81:69:ad:61:9e:95:04:03:
70:2d:b9:c6:f9:7a:bb:31:76:a3:f0:ef:d6:ad:4e:
28:6f:60:5d:dd:85:6f:c6:c4:eb:b6:d0:dc:f4:75:
8a:14:6a:cd:4f:a6:3a:80:4a:83:c8:f8:c9:f7:96:
0d:7f:fa:34:af:3f:d3:c7:14:93:65:57:4f:24:c8:
1e:84:f1:80:3d:c9:b0:2f:78:4b:de:7c:96:01:d2:
a1:55:ff:b8:c1:0d:90:2a:f5:f8:5b:85:fd:31:11:
75:4e:46:65:36:a9:b8:63:7a:00:55:18:68:15:f7:
51:57:59:f3:66:da:17:5e:3e:81:aa:35:b6:ad:05:
df:27:96:88:7c:a0:c4:3b:b4:da:21:4c:3f:b7:34:
a7:e3:f8:7d:f1:4a:7c:13:1a:a7:bd:3d:ef:0d:47:
4a:fa:c8:0e:4d:00:67:25:c0:04:82:13:b1:fd:71:
4b:77:7d:b9:69:e6:8d:e3:81:50:db:6f:59:57:99:
a6:41:d9:6b:b6:4d:47:4a:cb:09:9b:5d:a7:7a:5b:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A0:A8:F6:6F:D3:02:44:12:91:8D:A1:54:59:CD:75:DF:32:DB:AB
X509v3 Authority Key Identifier:
keyid:63:17:24:33:DF:B0:2F:1D:EB:33:81:AE:D8:C6:C0:96:7B:D9:A0:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22e1f014-9d9f-4e91-a0c3-55f8bee32737/0/63172433DFB02F1DEB3381AED8C6C0967BD9A0D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxckM9-wLx3rM4Gu2MbAlnvZoNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22e1f014-9d9f-4e91-a0c3-55f8bee32737/0/3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:bb:42:f8:ab:85:05:c4:12:1d:4b:d8:63:a2:00:b4:88:2e:
27:dc:c3:d3:bd:39:2e:3c:7d:b7:18:05:d9:3e:37:c8:55:2c:
08:22:c3:6d:0f:f8:11:15:fc:32:35:2b:31:cd:e3:7f:29:26:
0d:8c:0c:19:bb:f7:ed:14:41:44:b1:8e:ff:ce:42:b0:d1:77:
b8:26:68:72:cf:f1:13:35:c8:ea:07:97:46:3a:fc:09:18:cb:
d7:2c:1c:d3:a2:9a:ad:27:f8:f1:1e:71:09:d7:d7:2d:d2:8f:
c4:5e:9c:b5:2a:70:a5:28:a8:7a:7e:7c:9f:8a:c4:39:46:4a:
13:bb:0f:a0:25:02:de:ec:c2:cc:c4:ea:08:52:14:2d:7d:c2:
3a:3e:ee:35:6b:95:8a:2b:45:59:c1:ee:43:59:84:bb:05:3d:
ac:66:a7:e5:73:ac:5f:c3:46:57:3d:06:37:31:bd:7d:98:8b:
c1:60:95:e6:bd:ac:45:3f:02:05:52:0a:27:8b:94:05:3c:ce:
83:9f:92:67:52:3b:63:fa:cc:bd:6c:b7:ac:88:e4:d0:ec:95:
36:d3:4a:fd:f1:88:c0:0c:eb:c5:46:ff:a0:dc:d2:4d:38:ab:
f3:7e:10:a0:28:b2:e9:06:05:1c:9a:52:5a:2a:ce:b2:5b:1d:
dc:67:1b:7a
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUP0HgsY9h4ewS3OzIYaQeDBIHhoQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMxNzI0MzNkZmIwMmYxZGViMzM4MWFlZDhjNmMwOTY3
YmQ5YTBkNDAeFw0yMzA1MTQxOTIzMjBaFw0yNDA1MTIxOTI4MjBaMDMxMTAvBgNV
BAMTKDFGQTBBOEY2NkZEMzAyNDQxMjkxOERBMTU0NTlDRDc1REYzMkRCQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfBCUi6anNlv7M0JCNXs0hE5a+
3Hli8Gbl5gpF9+93IlSGWVEg1odq9/CRpiI2i+rJWzuBaa1hnpUEA3Atucb5ersx
dqPw79atTihvYF3dhW/GxOu20Nz0dYoUas1PpjqASoPI+Mn3lg1/+jSvP9PHFJNl
V08kyB6E8YA9ybAveEvefJYB0qFV/7jBDZAq9fhbhf0xEXVORmU2qbhjegBVGGgV
91FXWfNm2hdePoGqNbatBd8nloh8oMQ7tNohTD+3NKfj+H3xSnwTGqe9Pe8NR0r6
yA5NAGclwASCE7H9cUt3fblp5o3jgVDbb1lXmaZB2Wu2TUdKywmbXad6W62DAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUH6Co9m/TAkQSkY2hVFnNdd8y26swHwYDVR0j
BBgwFoAUYxckM9+wLx3rM4Gu2MbAlnvZoNQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJlMWYwMTQtOWQ5Zi00ZTkxLWEwYzMtNTVmOGJlZTMy
NzM3LzAvNjMxNzI0MzNERkIwMkYxREVCMzM4MUFFRDhDNkMwOTY3QkQ5QTBENC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l4Y2tNOS13THgzck00R3UyTWJBbG52
Wm9OUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjJlMWYwMTQt
OWQ5Zi00ZTkxLWEwYzMtNTVmOGJlZTMyNzM3LzAvMzEzMzMwMmUzMTM5MzMyZTM3
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzgzODM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACCwUswDQYJKoZIhvcNAQELBQADggEBAGu7QvirhQXEEh1L2GOiALSILifcw9O9
OS48fbcYBdk+N8hVLAgiw20P+BEV/DI1KzHN438pJg2MDBm79+0UQUSxjv/OQrDR
d7gmaHLP8RM1yOoHl0Y6/AkYy9csHNOimq0n+PEecQnX1y3Sj8RenLUqcKUoqHp+
fJ+KxDlGShO7D6AlAt7swszE6ghSFC19wjo+7jVrlYorRVnB7kNZhLsFPaxmp+Vz
rF/DRlc9BjcxvX2Yi8Fglea9rEU/AgVSCieLlAU8zoOfkmdSO2P6zL1st6yI5NDs
lTbTSv3xiMAM68VG/6Dc0k04q/N+EKAosukGBRyaUloqzrJbHdxnG3o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:56 2024 by rpki-client on console-ams.rpki-client.org