Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/3138352e3137312e37382e302f32332d3233203d3e203632333336.roa
File: 3138352e3137312e37382e302f32332d3233203d3e203632333336.roa (raw, json)
Hash identifier: UwzK9erGw/9SbN6/cS7z7UADKnbzaUGpxcPYTNA7pzU=
Subject key identifier: AF:1F:F0:33:1D:5D:A5:C1:0D:6E:1E:CC:6C:60:6F:C3:47:03:A1:AF
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 4431522FBEF8DF0373082BF8280D95255FC31623
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/3138352e3137312e37382e302f32332d3233203d3e203632333336.roa
Signing time: Fri 20 Jan 2023 06:26:05 +0000
ROA not before: Fri 20 Jan 2023 06:21:05 +0000
ROA not after: Fri 19 Jan 2024 06:26:05 +0000
asID: 62336
IP address blocks: 185.171.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:31:52:2f:be:f8:df:03:73:08:2b:f8:28:0d:95:25:5f:c3:16:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:05 2023 GMT
Not After : Jan 19 06:26:05 2024 GMT
Subject: CN=AF1FF0331D5DA5C10D6E1ECC6C606FC34703A1AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:1f:f0:97:cc:94:3d:e0:8d:9e:12:c4:61:
84:14:c2:0a:a0:86:ad:70:7b:74:a3:4d:7a:f0:35:
3f:07:bf:d2:52:9a:f2:a4:66:88:66:77:f0:8d:a6:
31:04:a4:7e:ee:d3:5a:ce:1d:3b:02:3d:b9:28:e3:
16:af:13:3f:a4:81:3a:ba:21:21:0d:f0:27:db:b8:
40:9e:1d:d2:78:71:dc:9a:86:a0:c9:91:5e:1e:c2:
5d:d8:77:ee:fb:eb:2b:0f:38:b4:1c:46:f9:b1:40:
73:d0:4d:64:0e:de:6d:0b:2d:34:85:47:49:79:d4:
32:01:0a:8b:91:36:a8:8d:98:67:1b:50:b5:21:25:
c6:62:a5:c3:59:47:19:36:75:ee:da:37:d5:a1:2d:
08:f1:92:8c:e7:a2:e8:36:12:e8:30:34:db:b5:35:
7c:dc:54:15:d6:0a:29:78:df:d9:82:d6:3f:7b:a1:
f8:87:7c:b7:b0:fc:60:10:72:fe:a0:ac:64:7a:0b:
fe:bd:1b:ec:80:da:8a:c8:8d:99:ab:ae:a6:fd:cf:
9e:a0:03:18:ef:00:61:19:40:de:0e:25:be:7d:cc:
0d:f1:6d:e8:5c:56:9b:de:38:74:80:a4:a9:71:68:
80:2e:1a:b8:f9:e1:b5:1b:90:88:0e:b3:11:eb:e9:
da:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1F:F0:33:1D:5D:A5:C1:0D:6E:1E:CC:6C:60:6F:C3:47:03:A1:AF
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/3138352e3137312e37382e302f32332d3233203d3e203632333336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.78.0/23
Signature Algorithm: sha256WithRSAEncryption
63:5a:95:65:62:56:7b:30:da:dd:c9:41:f7:07:3f:d5:58:4a:
11:de:c3:f4:c2:2a:2f:93:88:70:f9:b4:e6:18:24:d7:5d:6a:
0f:f7:f9:e5:7b:c8:75:48:ad:94:65:ff:1e:f7:b0:42:f0:19:
fe:da:57:d5:c7:8f:fc:46:65:21:f4:2b:59:4f:bf:b0:97:e2:
c7:01:4e:41:47:c5:4e:8e:70:34:68:70:fc:57:11:6b:b1:84:
c0:d7:45:b5:89:53:c0:7b:1d:d9:88:cf:97:a2:a7:9a:4d:69:
e9:7e:1c:40:c2:47:f9:8e:9d:52:3b:fc:d2:76:8c:09:27:1c:
b6:31:5a:37:21:ae:1f:48:dd:04:fe:53:5c:4e:5c:94:a2:31:
0e:6e:4f:a4:c1:5b:66:a3:8a:28:72:42:0b:7d:50:46:91:84:
85:16:63:91:db:45:13:17:1f:61:6a:91:f8:97:25:63:21:ab:
c2:4c:90:8d:86:ae:a8:0c:75:dc:07:69:3d:76:7a:87:bc:da:
35:5b:6e:61:24:41:f4:03:36:6a:ea:7e:8b:8f:a5:99:31:65:
a2:53:17:18:a7:79:65:40:b0:5a:c2:f3:f9:39:bf:b1:42:00:
4f:39:e4:b7:57:3c:d9:ed:aa:f0:ff:b4:f0:6f:31:e8:1c:97:
52:f5:be:24
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIURDFSL7743wNzCCv4KA2VJV/DFiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzAxMjAwNjIxMDVaFw0yNDAxMTkwNjI2MDVaMDMxMTAvBgNV
BAMTKEFGMUZGMDMzMUQ1REE1QzEwRDZFMUVDQzZDNjA2RkMzNDcwM0ExQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvFh/wl8yUPeCNnhLEYYQUwgqg
hq1we3SjTXrwNT8Hv9JSmvKkZohmd/CNpjEEpH7u01rOHTsCPbko4xavEz+kgTq6
ISEN8CfbuECeHdJ4cdyahqDJkV4ewl3Yd+776ysPOLQcRvmxQHPQTWQO3m0LLTSF
R0l51DIBCouRNqiNmGcbULUhJcZipcNZRxk2de7aN9WhLQjxkoznoug2EugwNNu1
NXzcVBXWCil439mC1j97ofiHfLew/GAQcv6grGR6C/69G+yA2orIjZmrrqb9z56g
AxjvAGEZQN4OJb59zA3xbehcVpveOHSApKlxaIAuGrj54bUbkIgOsxHr6dpjAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUrx/wMx1dpcENbh7MbGBvw0cDoa8wHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzEzODM1MmUzMTM3MzEyZTM3
MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMyMzMzMzM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
uatOMA0GCSqGSIb3DQEBCwUAA4IBAQBjWpVlYlZ7MNrdyUH3Bz/VWEoR3sP0wiov
k4hw+bTmGCTXXWoP9/nle8h1SK2UZf8e97BC8Bn+2lfVx4/8RmUh9CtZT7+wl+LH
AU5BR8VOjnA0aHD8VxFrsYTA10W1iVPAex3ZiM+XoqeaTWnpfhxAwkf5jp1SO/zS
dowJJxy2MVo3Ia4fSN0E/lNcTlyUojEObk+kwVtmo4oockILfVBGkYSFFmOR20UT
Fx9hapH4lyVjIavCTJCNhq6oDHXcB2k9dnqHvNo1W25hJEH0AzZq6n6Lj6WZMWWi
UxcYp3llQLBawvP5Ob+xQgBPOeS3VzzZ7arw/7TwbzHoHJdS9b4k
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org