Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/3138352e3137312e37362e302f32332d3233203d3e2038383933.roa
File: 3138352e3137312e37362e302f32332d3233203d3e2038383933.roa (raw, json)
Hash identifier: JlISJe+hsSeBGF0go+l+sg4FzG0j0F7/7F3RgPe4vIE=
Subject key identifier: 1D:C6:E5:71:9B:77:6E:05:26:79:71:A1:33:02:F1:FC:DF:75:B5:A6
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 6EDF95D1D21FD25257718C23E5EA3F9335731F13
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/3138352e3137312e37362e302f32332d3233203d3e2038383933.roa
Signing time: Fri 20 Jan 2023 06:26:05 +0000
ROA not before: Fri 20 Jan 2023 06:21:05 +0000
ROA not after: Fri 19 Jan 2024 06:26:05 +0000
asID: 8893
IP address blocks: 185.171.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:df:95:d1:d2:1f:d2:52:57:71:8c:23:e5:ea:3f:93:35:73:1f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:05 2023 GMT
Not After : Jan 19 06:26:05 2024 GMT
Subject: CN=1DC6E5719B776E05267971A13302F1FCDF75B5A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:e6:94:85:f1:65:7f:fd:b0:1d:0d:df:e5:
31:b7:54:9e:3c:9f:42:1e:54:4c:e6:27:10:4a:48:
1f:88:25:05:80:78:97:3c:ba:6b:04:8f:8b:a1:5a:
f6:ee:e3:f7:f1:ab:39:6a:34:07:30:0e:c5:99:4b:
1a:46:c7:fd:f3:fd:41:e9:60:5b:3d:a5:cb:91:12:
4b:40:73:ff:17:dd:f4:db:ea:ef:5f:96:ac:57:84:
da:0f:96:6b:58:1c:b0:d1:3a:3a:c9:fd:28:18:37:
65:39:2a:13:a1:97:da:00:a9:0d:c1:d1:8a:f4:0a:
86:30:d9:0e:77:ad:ff:93:91:cd:74:16:f7:ea:61:
ea:91:6a:9f:0c:1b:0e:85:3a:24:0a:16:2d:10:26:
bb:40:65:44:cb:28:b1:3c:1c:b8:2e:e5:90:22:66:
ee:04:80:e5:9a:59:07:11:f5:f1:e6:d1:a4:f9:6f:
62:6c:8d:a9:ae:a2:ce:35:29:c2:b4:c2:1d:b7:52:
d2:7d:22:e5:ed:47:b0:bf:96:b5:0c:4b:3b:a3:42:
98:d6:19:f4:22:4b:bb:d7:2e:16:bd:a6:53:33:fa:
19:b2:76:59:41:bb:a2:ea:de:36:65:2c:d1:69:5e:
ba:7b:a2:a4:08:ec:10:87:73:7d:74:79:2d:3d:72:
f1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C6:E5:71:9B:77:6E:05:26:79:71:A1:33:02:F1:FC:DF:75:B5:A6
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/3138352e3137312e37362e302f32332d3233203d3e2038383933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.76.0/23
Signature Algorithm: sha256WithRSAEncryption
62:5d:ac:70:eb:14:3a:22:95:4d:b6:aa:08:83:e7:b0:80:5b:
e7:2c:ef:d0:b8:ef:de:ee:55:d6:ae:a1:8f:61:8e:fb:9a:4f:
6a:3c:4b:db:17:29:8d:e0:f2:63:1f:53:97:b8:ff:f1:70:a5:
54:23:c5:ed:89:2d:db:ef:ea:e6:b2:cf:65:bc:b3:2d:a1:8b:
c0:8d:97:d6:f9:16:4e:00:8c:50:b2:a5:cc:94:a8:83:bf:e2:
5f:f2:22:c5:c5:ba:f4:2c:8a:31:55:65:45:49:3e:21:6d:5e:
55:5e:52:b1:a5:5f:54:5b:4b:be:58:33:81:95:5e:76:a3:d3:
18:1c:89:60:9e:c6:0f:c8:05:71:ce:c0:0a:64:92:d8:b3:ed:
44:0f:a9:10:28:11:07:79:69:96:99:77:e4:4f:09:34:3f:91:
8c:d1:01:e8:f2:bd:34:9a:86:88:cd:00:91:fa:cf:67:24:ee:
65:a1:dc:08:06:c3:a4:6e:7b:75:c7:bd:26:c6:64:09:da:87:
a3:a6:3e:77:d2:27:4f:ef:e3:21:0b:b5:8c:93:3d:88:3a:36:
92:ee:f2:e2:82:c6:69:84:eb:75:4e:88:7d:c4:6c:2a:b6:43:
fd:ff:df:28:5d:ea:af:da:11:24:3a:3b:47:4c:b4:c9:31:c7:
12:d6:50:ca
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUbt+V0dIf0lJXcYwj5eo/kzVzHxMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzAxMjAwNjIxMDVaFw0yNDAxMTkwNjI2MDVaMDMxMTAvBgNV
BAMTKDFEQzZFNTcxOUI3NzZFMDUyNjc5NzFBMTMzMDJGMUZDREY3NUI1QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsn+aUhfFlf/2wHQ3f5TG3VJ48
n0IeVEzmJxBKSB+IJQWAeJc8umsEj4uhWvbu4/fxqzlqNAcwDsWZSxpGx/3z/UHp
YFs9pcuREktAc/8X3fTb6u9flqxXhNoPlmtYHLDROjrJ/SgYN2U5KhOhl9oAqQ3B
0Yr0CoYw2Q53rf+Tkc10FvfqYeqRap8MGw6FOiQKFi0QJrtAZUTLKLE8HLgu5ZAi
Zu4EgOWaWQcR9fHm0aT5b2Jsjamuos41KcK0wh23UtJ9IuXtR7C/lrUMSzujQpjW
GfQiS7vXLha9plMz+hmydllBu6Lq3jZlLNFpXrp7oqQI7BCHc310eS09cvHTAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUHcblcZt3bgUmeXGhMwLx/N91taYwHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzEzODM1MmUzMTM3MzEyZTM3
MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzODM4MzkzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbmr
TDANBgkqhkiG9w0BAQsFAAOCAQEAYl2scOsUOiKVTbaqCIPnsIBb5yzv0Ljv3u5V
1q6hj2GO+5pPajxL2xcpjeDyYx9Tl7j/8XClVCPF7Ykt2+/q5rLPZbyzLaGLwI2X
1vkWTgCMULKlzJSog7/iX/IixcW69CyKMVVlRUk+IW1eVV5SsaVfVFtLvlgzgZVe
dqPTGByJYJ7GD8gFcc7ACmSS2LPtRA+pECgRB3lplpl35E8JND+RjNEB6PK9NJqG
iM0AkfrPZyTuZaHcCAbDpG57dce9JsZkCdqHo6Y+d9InT+/jIQu1jJM9iDo2ku7y
4oLGaYTrdU6IfcRsKrZD/f/fKF3qr9oRJDo7R0y0yTHHEtZQyg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:26 2025 by rpki-client