Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS198961.roa
File: AS198961.roa (raw, json)
Hash identifier: e2MaSOpPImHEm92IISWDDRKalYW86vpw0VFvRng9jn0=
Subject key identifier: 46:FE:D6:44:D7:5E:C4:27:2F:CB:76:D8:89:A5:B8:0C:10:35:11:14
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 2DA729C88F58AFF92DC8625CE0AEA590E505F291
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS198961.roa
Signing time: Tue 06 Jun 2023 09:26:00 +0000
ROA not before: Tue 06 Jun 2023 09:21:00 +0000
ROA not after: Tue 04 Jun 2024 09:26:00 +0000
asID: 198961
IP address blocks: 178.254.171.0/24 maxlen: 24
178.254.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a7:29:c8:8f:58:af:f9:2d:c8:62:5c:e0:ae:a5:90:e5:05:f2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:21:00 2023 GMT
Not After : Jun 4 09:26:00 2024 GMT
Subject: CN=46FED644D75EC4272FCB76D889A5B80C10351114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:23:bc:74:ee:74:11:ea:05:1f:0c:7e:ca:
1b:c0:50:75:f6:ce:73:87:70:93:5a:87:36:8d:a5:
bd:3c:8a:58:dc:81:df:de:ab:d7:10:16:aa:8a:80:
c2:bb:eb:c9:a3:17:f1:5c:bd:ba:84:73:bf:e5:9b:
9c:28:f9:a8:e3:df:05:2b:54:c7:db:c0:a0:3c:3e:
33:f6:5b:97:0c:16:ca:12:8f:9d:35:34:ae:86:2f:
13:46:87:8c:8c:1a:73:6a:84:79:bb:a6:57:b6:fe:
35:f3:97:b2:e9:40:18:77:3a:97:34:51:05:28:cc:
82:17:10:6e:4f:dd:d4:cc:b9:4d:ac:7c:25:aa:d7:
9e:9c:8b:a2:68:c7:1a:36:e3:e1:9a:f5:14:2e:c8:
79:c9:a0:d6:ff:b7:5e:11:0d:e8:3c:01:0c:8b:c1:
9b:04:ab:67:7f:3d:58:eb:c0:65:58:a7:46:42:d5:
3e:7c:b0:33:fb:fb:d5:75:9e:d9:cb:08:57:ee:2f:
59:7d:f4:d6:d5:03:ba:76:75:e8:5e:27:5e:db:ad:
19:09:b5:c9:ec:d7:e8:f5:37:c3:b5:c4:b8:d3:ed:
8f:ff:24:be:c0:7c:78:6c:9c:30:62:5a:3f:8c:80:
56:f8:b9:60:99:86:26:54:a7:c5:7a:f9:c6:a2:08:
0d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FE:D6:44:D7:5E:C4:27:2F:CB:76:D8:89:A5:B8:0C:10:35:11:14
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS198961.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.171.0/24
178.254.179.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7e:bc:29:51:93:4a:52:e3:83:47:9a:e5:12:4a:d5:ed:f4:
11:28:33:be:af:c7:0d:0b:a0:85:7f:21:ea:db:35:c3:fd:bf:
3f:9b:da:2c:77:e1:91:c2:f0:de:ca:92:58:3b:e6:29:52:ed:
fc:f5:7d:be:9f:be:21:c7:e9:9b:07:db:9b:ac:0b:58:b8:39:
30:e4:e9:26:f1:25:36:a3:07:fa:79:d8:0f:eb:ca:4a:a7:89:
b8:cb:d0:ce:4c:31:4e:bd:b7:aa:94:b5:20:2a:e6:3e:01:84:
a8:73:04:7f:49:e5:5f:1e:bb:7f:ba:ee:87:f0:d5:d0:ca:8c:
08:fb:bd:bb:5b:80:06:43:02:6f:53:d4:31:50:f2:76:e1:80:
ba:b3:17:9d:5a:f0:3b:ce:82:29:a4:50:13:46:ae:e0:33:a2:
9c:72:82:a2:a2:0e:85:bb:a7:bb:1f:c5:25:61:33:d4:c9:ea:
5a:d4:29:d9:d9:6d:39:46:99:c6:5c:4f:ac:98:84:8e:71:73:
62:ce:f5:95:82:30:62:d1:f7:6c:46:2f:98:64:1f:2b:ad:92:
38:68:57:4a:34:66:49:ce:b2:7d:b9:e0:bd:8b:4a:4f:4d:8b:
be:3f:e0:8d:1a:61:bd:f4:a5:e1:40:be:87:db:45:3a:60:c6:
9b:f0:86:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org