Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/3138352e3137312e37362e302f32332d3233203d3e203632333336.roa
File: 3138352e3137312e37362e302f32332d3233203d3e203632333336.roa (raw, json)
Hash identifier: YinbKzkfFMA6RHXjBYgI9sspc56UKcAukEPHlk/Fc0c=
Subject key identifier: 7E:5B:1D:5D:2F:9A:7C:22:B1:F6:A6:20:9B:4C:9F:82:AE:8C:1C:B6
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 09B0091D55651E29E963D55BAEC78BAB95737B36
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/3138352e3137312e37362e302f32332d3233203d3e203632333336.roa
Signing time: Fri 20 Jan 2023 06:26:04 +0000
ROA not before: Fri 20 Jan 2023 06:21:04 +0000
ROA not after: Fri 19 Jan 2024 06:26:04 +0000
asID: 62336
IP address blocks: 185.171.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b0:09:1d:55:65:1e:29:e9:63:d5:5b:ae:c7:8b:ab:95:73:7b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:04 2023 GMT
Not After : Jan 19 06:26:04 2024 GMT
Subject: CN=7E5B1D5D2F9A7C22B1F6A6209B4C9F82AE8C1CB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:02:86:c4:ae:e4:fe:b1:09:47:e2:ad:ba:
d3:4d:43:c6:ce:54:b1:0e:db:34:78:fe:2b:b3:17:
a2:cb:e2:9d:9e:7a:6f:2b:a5:3e:e6:54:45:7b:21:
52:c0:fe:f7:f6:3a:1f:b5:f7:a3:15:f3:cf:b2:18:
b5:a6:43:61:cb:25:ba:b2:84:30:a5:04:fa:a2:16:
3c:ed:c7:a3:ee:7e:26:bd:45:dd:49:e3:b6:78:53:
23:18:a0:d9:47:21:8d:39:f4:76:1e:c1:3e:ec:89:
e1:04:37:8c:f2:bb:ac:6e:68:30:16:e4:e5:b0:f9:
0c:df:fe:9a:8f:0d:e8:a0:ea:4c:14:d2:53:57:e7:
18:0e:e0:35:33:b5:8a:38:da:08:36:99:45:28:2d:
49:6d:bd:e0:de:0d:e8:2a:c8:30:d2:b6:c7:e0:fc:
72:e4:14:4c:aa:62:14:3a:5b:83:7e:79:98:4d:17:
dc:23:1f:f5:c0:2a:8d:97:64:f1:07:ac:3b:0d:b2:
db:8d:8c:61:d6:c1:de:18:fc:26:f2:87:3d:8d:bb:
eb:5c:00:53:a6:45:b5:c3:7e:ab:47:b4:51:82:2f:
7d:5b:3d:cd:92:ec:1c:18:5e:99:b4:c3:32:1c:d8:
47:fb:70:6e:2f:60:bc:d8:14:0f:86:0f:94:4b:33:
29:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5B:1D:5D:2F:9A:7C:22:B1:F6:A6:20:9B:4C:9F:82:AE:8C:1C:B6
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/3138352e3137312e37362e302f32332d3233203d3e203632333336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.76.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:6a:4d:d6:4d:bc:5b:81:b3:38:77:75:97:cb:f4:a1:ac:dc:
c3:eb:ac:b8:47:26:28:d6:b7:3a:8e:5b:eb:83:43:d2:08:cf:
3d:4d:b5:42:9c:16:21:50:9c:19:56:d7:fb:ff:43:96:84:44:
55:2e:5a:91:6e:d8:8a:1c:2c:cc:5a:0e:5c:a3:16:96:d2:b7:
a7:2c:8b:28:e7:4e:ad:45:7a:8a:30:81:57:70:39:d1:db:bc:
9e:1e:8d:fd:38:d7:a6:da:44:42:2a:ce:8e:45:cb:ed:8f:f4:
f1:5a:a9:87:f5:97:b1:4c:47:16:e3:59:ae:f1:4c:b8:28:78:
58:f5:fa:47:27:77:30:03:af:52:f5:68:29:2c:87:2a:cd:d3:
9e:ca:96:34:33:56:cd:e2:36:44:f8:ed:6d:1b:6e:75:a9:41:
94:a3:fc:d8:b6:26:20:01:ca:dc:4f:18:d5:1c:b6:01:ed:d8:
e8:41:1d:66:c7:cd:79:22:5d:e3:4e:9f:7d:ed:ef:5a:90:e6:
27:48:c3:82:e3:ca:1d:66:d5:44:e5:af:77:7d:91:ea:1b:ed:
b7:0d:2b:2f:ab:a0:b3:0f:5b:ac:c0:14:5b:04:9e:8f:5f:0d:
8a:06:40:12:75:b1:3f:7f:60:31:f5:91:74:32:2a:a5:d0:1a:
8c:00:0d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org