Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22e1f014-9d9f-4e91-a0c3-55f8bee32737/0/3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa
File: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (raw, json)
Hash identifier: LTgXSrMsVsR4BwrmW6lncjN7MomZ+vrNzoAK0/KW5KA=
Subject key identifier: 6A:F6:A1:02:ED:17:10:0B:BC:70:EF:49:13:99:6F:9B:B4:C8:66:0E
Certificate issuer: /CN=63172433dfb02f1deb3381aed8c6c0967bd9a0d4
Certificate serial: 16716A6FC70541FFD7B82F0C69967A8E39826813
Authority key identifier: 63:17:24:33:DF:B0:2F:1D:EB:33:81:AE:D8:C6:C0:96:7B:D9:A0:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxckM9-wLx3rM4Gu2MbAlnvZoNQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22e1f014-9d9f-4e91-a0c3-55f8bee32737/0/3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa
Signing time: Wed 22 Mar 2023 19:49:26 +0000
ROA not before: Wed 22 Mar 2023 19:44:26 +0000
ROA not after: Wed 20 Mar 2024 19:49:26 +0000
asID: 212815
IP address blocks: 130.193.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:71:6a:6f:c7:05:41:ff:d7:b8:2f:0c:69:96:7a:8e:39:82:68:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63172433dfb02f1deb3381aed8c6c0967bd9a0d4
Validity
Not Before: Mar 22 19:44:26 2023 GMT
Not After : Mar 20 19:49:26 2024 GMT
Subject: CN=6AF6A102ED17100BBC70EF4913996F9BB4C8660E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:be:6c:38:5e:7c:ba:59:2c:a6:00:12:d6:ce:
97:4d:18:22:e3:d2:27:3d:ad:7a:7c:79:18:c2:66:
59:c4:ac:aa:82:bc:00:43:bb:e6:20:e7:87:82:0c:
2d:03:b5:e3:c8:66:eb:ae:ae:41:c7:56:c6:00:6f:
2d:c4:da:2f:9d:cf:77:c6:62:91:c8:c4:6b:2a:14:
fe:a1:fe:97:ea:99:71:5d:1a:46:87:fc:bd:8e:54:
65:f0:00:75:38:5c:71:41:18:76:65:be:ee:77:0d:
78:ba:04:84:00:92:ad:53:58:2d:97:9a:e1:e9:80:
1c:0b:88:7a:cd:21:f0:65:ce:b0:e8:c2:20:33:ae:
be:f4:36:2b:ff:f7:73:fa:8d:8b:b5:62:07:6e:85:
59:0d:b6:2a:1f:31:1f:57:60:b3:ec:b7:ef:92:70:
f1:86:3a:c3:cb:a2:a5:48:b9:1e:f2:73:ab:88:b5:
76:1c:cf:26:01:9a:49:e5:b6:0c:36:b1:95:55:52:
ec:04:dd:37:30:34:e4:d6:1f:e6:dd:6d:0c:35:d7:
7a:ff:d0:7b:68:90:e9:89:e8:a9:fd:a4:1c:ef:99:
fb:74:cb:4c:c7:26:fd:fa:e3:a9:e9:b7:7d:f3:37:
c9:33:ea:79:b1:66:dd:b5:34:97:fc:0e:45:f5:e9:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F6:A1:02:ED:17:10:0B:BC:70:EF:49:13:99:6F:9B:B4:C8:66:0E
X509v3 Authority Key Identifier:
keyid:63:17:24:33:DF:B0:2F:1D:EB:33:81:AE:D8:C6:C0:96:7B:D9:A0:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22e1f014-9d9f-4e91-a0c3-55f8bee32737/0/63172433DFB02F1DEB3381AED8C6C0967BD9A0D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxckM9-wLx3rM4Gu2MbAlnvZoNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22e1f014-9d9f-4e91-a0c3-55f8bee32737/0/3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:2a:1a:ac:61:fc:4c:da:9a:5e:3f:98:78:3e:8d:8f:3f:d8:
53:a4:34:de:43:5d:e5:8b:21:9b:a6:9d:a7:68:ae:e2:a0:fa:
db:c1:2a:97:82:8d:96:82:e7:ac:43:5d:9f:f6:e4:ef:7e:c6:
fc:af:92:22:d3:b8:38:8e:87:82:3a:2d:a3:c0:b5:02:16:49:
15:84:c4:61:ce:00:ed:6d:da:6c:a1:28:f0:fb:6c:b8:66:c2:
ac:c8:c8:01:44:8b:06:6c:5b:79:f8:0c:d3:e2:8e:e6:e6:82:
3f:51:c4:dd:b8:b0:a4:a3:97:c3:75:27:f9:1c:6c:90:ac:72:
5e:af:b5:af:08:f0:f7:81:33:33:f4:b8:a9:74:f4:e2:65:cc:
15:25:1b:4c:9d:d0:2d:04:25:5b:7a:80:e3:b7:b3:81:e0:36:
46:47:2c:32:23:ce:36:d8:7e:e6:66:19:3f:8d:4c:27:e2:0c:
d9:66:d1:6e:7a:a7:5a:1f:99:e3:89:3b:36:33:ab:53:1d:e8:
af:53:69:2a:b8:48:7a:fc:06:c0:f6:ab:d8:6c:91:be:72:fa:
77:8b:f4:6f:dc:62:44:b8:74:55:56:9b:3b:4d:8a:65:e6:0d:
b5:f0:21:c8:86:70:08:48:c5:e6:76:46:34:dd:67:bc:fa:a7:
a9:15:08:3d
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUFnFqb8cFQf/XuC8MaZZ6jjmCaBMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMxNzI0MzNkZmIwMmYxZGViMzM4MWFlZDhjNmMwOTY3
YmQ5YTBkNDAeFw0yMzAzMjIxOTQ0MjZaFw0yNDAzMjAxOTQ5MjZaMDMxMTAvBgNV
BAMTKDZBRjZBMTAyRUQxNzEwMEJCQzcwRUY0OTEzOTk2RjlCQjRDODY2MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhvmw4Xny6WSymABLWzpdNGCLj
0ic9rXp8eRjCZlnErKqCvABDu+Yg54eCDC0DtePIZuuurkHHVsYAby3E2i+dz3fG
YpHIxGsqFP6h/pfqmXFdGkaH/L2OVGXwAHU4XHFBGHZlvu53DXi6BIQAkq1TWC2X
muHpgBwLiHrNIfBlzrDowiAzrr70Niv/93P6jYu1YgduhVkNtiofMR9XYLPst++S
cPGGOsPLoqVIuR7yc6uItXYczyYBmknltgw2sZVVUuwE3TcwNOTWH+bdbQw113r/
0HtokOmJ6Kn9pBzvmft0y0zHJv3646npt33zN8kz6nmxZt21NJf8DkX16TzvAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUavahAu0XEAu8cO9JE5lvm7TIZg4wHwYDVR0j
BBgwFoAUYxckM9+wLx3rM4Gu2MbAlnvZoNQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJlMWYwMTQtOWQ5Zi00ZTkxLWEwYzMtNTVmOGJlZTMy
NzM3LzAvNjMxNzI0MzNERkIwMkYxREVCMzM4MUFFRDhDNkMwOTY3QkQ5QTBENC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l4Y2tNOS13THgzck00R3UyTWJBbG52
Wm9OUS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjJlMWYwMTQt
OWQ5Zi00ZTkxLWEwYzMtNTVmOGJlZTMyNzM3LzAvMzEzMzMwMmUzMTM5MzMyZTM3
MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzODMxMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACCwUswDQYJKoZIhvcNAQELBQADggEBAAoqGqxh/Ezaml4/mHg+jY8/2FOkNN5D
XeWLIZumnadoruKg+tvBKpeCjZaC56xDXZ/25O9+xvyvkiLTuDiOh4I6LaPAtQIW
SRWExGHOAO1t2myhKPD7bLhmwqzIyAFEiwZsW3n4DNPijubmgj9RxN24sKSjl8N1
J/kcbJCscl6vta8I8PeBMzP0uKl09OJlzBUlG0yd0C0EJVt6gOO3s4HgNkZHLDIj
zjbYfuZmGT+NTCfiDNlm0W56p1ofmeOJOzYzq1Md6K9TaSq4SHr8BsD2q9hskb5y
+neL9G/cYkS4dFVWmztNimXmDbXwIciGcAhIxeZ2RjTdZ7z6p6kVCD0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:10 2024 by rpki-client on console-fra.rpki-client.org