Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/3138352e3137312e37382e302f32332d3233203d3e2038383933.roa
File: 3138352e3137312e37382e302f32332d3233203d3e2038383933.roa (raw, json)
Hash identifier: OvEdq24w7jJZEbmrctAdufFN2T7WeWpks61FAoN938c=
Subject key identifier: 12:BD:20:AF:A3:67:FB:2D:C0:D0:C5:55:78:F0:07:C9:3F:02:ED:55
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 39C025C4FA9D975510B01FFAE3509B0529790737
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/3138352e3137312e37382e302f32332d3233203d3e2038383933.roa
Signing time: Fri 20 Jan 2023 06:26:05 +0000
ROA not before: Fri 20 Jan 2023 06:21:05 +0000
ROA not after: Fri 19 Jan 2024 06:26:05 +0000
asID: 8893
IP address blocks: 185.171.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c0:25:c4:fa:9d:97:55:10:b0:1f:fa:e3:50:9b:05:29:79:07:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:05 2023 GMT
Not After : Jan 19 06:26:05 2024 GMT
Subject: CN=12BD20AFA367FB2DC0D0C55578F007C93F02ED55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:32:76:2a:f7:51:d1:21:f2:dc:91:62:36:
e5:3f:52:07:20:a4:9f:74:41:20:8f:cc:1b:2e:ec:
65:7f:71:e9:96:3b:80:6a:f5:76:2e:8d:53:02:c1:
69:c6:3e:4b:e0:a9:b9:d5:2a:0b:b2:c4:1e:ee:98:
65:82:fa:8c:2a:1c:aa:4c:96:df:d1:5c:57:3e:a3:
e7:2b:42:62:0c:7e:7d:66:00:99:b8:d9:b8:42:ae:
ce:e9:c6:2b:3b:bd:6b:e5:54:d6:c5:7c:84:71:a8:
44:fe:4c:c6:64:a4:79:4c:a7:dd:c7:ae:ce:0c:19:
7b:b3:66:cd:9b:45:2c:8f:3c:04:8b:18:92:ae:a1:
1a:75:88:6b:87:5d:cd:10:a1:bc:79:ae:93:24:43:
b1:e0:9f:41:46:03:90:fe:0a:06:93:d0:8c:03:b6:
a5:ed:c5:93:87:e1:ab:71:47:4b:ad:22:a0:92:03:
80:6a:60:f8:70:22:11:f0:5a:8a:90:38:79:f2:67:
8c:a6:ee:f1:65:b1:7d:5e:a8:94:ef:3a:3b:7a:a4:
62:a1:ba:80:46:26:db:60:f5:de:c7:ef:27:70:cb:
8d:10:f8:25:e5:66:68:dd:6d:cf:ae:84:8b:62:4f:
d6:70:58:1e:76:0a:2e:d5:f6:67:76:2d:f4:7b:bb:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BD:20:AF:A3:67:FB:2D:C0:D0:C5:55:78:F0:07:C9:3F:02:ED:55
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/3138352e3137312e37382e302f32332d3233203d3e2038383933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.78.0/23
Signature Algorithm: sha256WithRSAEncryption
64:73:87:2d:14:f1:69:e9:53:af:2a:cf:b9:b4:42:90:a4:b2:
fd:e1:76:f8:82:ed:a4:19:e0:19:8f:60:72:36:17:0a:56:52:
90:84:2a:ce:e8:e4:21:2a:bb:6a:15:38:d3:c7:9b:a3:52:59:
0e:36:39:06:7c:dc:27:17:e3:fd:76:b8:c5:03:89:98:57:ac:
88:59:e0:e4:6b:f0:6f:d2:18:a4:2a:3f:9a:6f:3b:0e:8d:5f:
66:5d:d4:69:4b:87:c3:a6:91:3a:6d:32:22:fc:89:1b:1a:a2:
9f:e8:49:dc:b5:6d:d5:57:c8:39:70:d3:ba:72:36:b8:f6:30:
a3:8e:44:2f:bd:4c:49:1a:32:f5:aa:ec:c0:4b:d4:6c:0a:66:
26:b8:4c:9e:f2:cc:c4:bc:6b:fc:54:a4:18:7d:38:c3:5d:eb:
30:4e:14:d9:dc:4c:e6:b1:6f:68:00:95:71:53:6f:7a:75:b7:
dd:b2:cf:0f:d4:f0:76:3a:31:d1:b7:54:18:c9:15:f9:3f:e4:
d6:e7:05:f2:ec:9a:b8:20:fc:bd:f1:eb:c0:61:1d:ae:d8:37:
e2:99:ae:8e:de:1c:52:20:17:90:5d:90:4e:69:84:5e:cc:31:
33:ab:23:46:49:59:d0:e7:16:e5:a7:7b:00:d4:c5:23:75:4d:
e1:92:55:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org