Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS52116.roa
File: AS52116.roa (raw, json)
Hash identifier: k684StIqd4yQg6ZD0fuUO7Ruo7JPDu9LuMfARsMLLUU=
Subject key identifier: 35:79:04:8D:1B:D5:53:D6:6A:66:87:F0:3C:3F:70:71:C9:F5:16:D0
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 0D751B303F75D59986F6D3339A360889E8453B97
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS52116.roa
Signing time: Tue 06 Jun 2023 09:25:59 +0000
ROA not before: Tue 06 Jun 2023 09:20:59 +0000
ROA not after: Tue 04 Jun 2024 09:25:59 +0000
asID: 52116
IP address blocks: 89.23.71.0/24 maxlen: 24
178.254.170.0/24 maxlen: 24
178.254.180.0/24 maxlen: 24
178.254.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:75:1b:30:3f:75:d5:99:86:f6:d3:33:9a:36:08:89:e8:45:3b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:20:59 2023 GMT
Not After : Jun 4 09:25:59 2024 GMT
Subject: CN=3579048D1BD553D66A6687F03C3F7071C9F516D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:aa:a8:93:c8:da:70:94:d2:54:e7:c0:0d:5c:
06:5e:96:d6:61:80:76:e3:f6:0f:63:d0:49:48:dc:
58:5a:7e:1f:b5:9e:c9:13:98:0e:c1:93:55:bd:e8:
87:be:a1:dc:e5:ce:b0:4c:17:ce:d2:db:d3:b7:ec:
e7:df:db:33:6b:39:ab:41:65:29:6b:35:d8:30:05:
52:5f:c9:64:6d:03:b8:d2:c6:05:e3:21:42:47:e8:
96:2c:ae:84:46:a2:a8:0c:7a:51:75:c9:6c:bd:0f:
cf:cf:c0:1a:10:2b:bb:f4:0d:61:eb:c7:cc:32:fb:
94:69:cf:9b:4e:6c:de:53:e5:bb:4b:65:1e:12:b7:
8d:b4:be:a0:34:3c:d3:6b:b5:df:03:01:d1:66:09:
25:bf:ef:a7:35:6d:4f:6a:24:23:ec:6c:08:76:8b:
6a:49:d1:47:bd:23:57:a0:e0:43:69:a2:28:27:22:
44:e4:b7:8e:23:7f:65:8b:6d:f5:47:65:b2:c6:21:
cb:d3:22:92:79:b6:29:d4:0c:ed:64:71:be:d1:a6:
60:fc:f3:2c:6a:50:9f:ae:7a:01:1a:d7:9d:b3:e2:
32:43:1f:6c:aa:2f:ad:9c:b5:e1:96:b5:15:44:73:
46:0a:51:cb:52:b2:db:09:19:5a:3a:51:2a:d2:53:
9c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:79:04:8D:1B:D5:53:D6:6A:66:87:F0:3C:3F:70:71:C9:F5:16:D0
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS52116.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.71.0/24
178.254.170.0/24
178.254.180.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:dd:20:62:6c:d8:eb:f5:37:c5:a0:15:f7:e8:3f:39:fc:74:
09:b3:ad:19:ec:31:74:11:f2:d3:ac:ae:2a:42:0e:17:1b:c2:
e6:50:7f:06:a3:c6:ee:31:ea:81:9d:44:51:3e:a7:fa:7d:a6:
52:3b:8d:29:9d:32:ea:8f:48:88:80:91:9e:3f:ee:54:96:bb:
0b:76:59:6d:dc:df:a5:a0:ad:66:51:35:b5:d9:cb:ae:3b:56:
fc:58:86:ac:6d:f6:35:fb:56:66:fc:f4:82:ab:50:d3:c1:71:
2d:20:b7:98:9f:82:62:fd:a6:c0:74:f9:ad:c0:c6:cb:e9:14:
19:36:3c:2c:46:82:66:ef:ab:4a:7b:2a:7f:6a:cd:4f:f1:41:
ea:6c:7c:85:a0:05:45:69:1e:4e:c9:19:15:0b:ad:08:f1:46:
79:b7:f6:07:b5:8b:43:07:93:18:5b:21:8c:91:53:12:10:0f:
9b:19:ad:a1:37:8a:c1:9a:ed:c3:43:3a:79:7b:43:38:2a:d2:
23:f1:49:d6:d4:4b:eb:76:40:b8:62:bf:37:e2:88:4f:f3:a2:
ff:52:55:68:a0:fb:d7:33:dc:7a:76:9e:74:84:16:c9:73:24:
f6:34:59:6f:2c:5b:6e:5d:29:a4:c6:c4:76:1a:52:60:0b:12:
3f:a3:97:55
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIUDXUbMD911ZmG9tMzmjYIiehFO5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTIwNTlaFw0yNDA2MDQwOTI1NTlaMDMxMTAvBgNV
BAMTKDM1NzkwNDhEMUJENTUzRDY2QTY2ODdGMDNDM0Y3MDcxQzlGNTE2RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgqqiTyNpwlNJU58ANXAZeltZh
gHbj9g9j0ElI3Fhafh+1nskTmA7Bk1W96Ie+odzlzrBMF87S29O37Off2zNrOatB
ZSlrNdgwBVJfyWRtA7jSxgXjIUJH6JYsroRGoqgMelF1yWy9D8/PwBoQK7v0DWHr
x8wy+5Rpz5tObN5T5btLZR4St420vqA0PNNrtd8DAdFmCSW/76c1bU9qJCPsbAh2
i2pJ0Ue9I1eg4ENpoignIkTkt44jf2WLbfVHZbLGIcvTIpJ5tinUDO1kcb7RpmD8
8yxqUJ+uegEa152z4jJDH2yqL62cteGWtRVEc0YKUctSstsJGVo6USrSU5ynAgMB
AAGjggIVMIICETAdBgNVHQ4EFgQUNXkEjRvVU9ZqZofwPD9wccn1FtAwHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ1NTZmNDE2LWFhZDYt
NDFiZi1hZWJmLTgwYTJjYzY3YTQ2Ni8wL0FTNTIxMTYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBABZF0cD
BACy/qoDBAGy/rQwDQYJKoZIhvcNAQELBQADggEBAKXdIGJs2Ov1N8WgFffoPzn8
dAmzrRnsMXQR8tOsripCDhcbwuZQfwajxu4x6oGdRFE+p/p9plI7jSmdMuqPSIiA
kZ4/7lSWuwt2WW3c36WgrWZRNbXZy647VvxYhqxt9jX7Vmb89IKrUNPBcS0gt5if
gmL9psB0+a3AxsvpFBk2PCxGgmbvq0p7Kn9qzU/xQepsfIWgBUVpHk7JGRULrQjx
Rnm39ge1i0MHkxhbIYyRUxIQD5sZraE3isGa7cNDOnl7Qzgq0iPxSdbUS+t2QLhi
vzfiiE/zov9SVWig+9cz3Hp2nnSEFslzJPY0WW8sW25dKaTGxHYaUmALEj+jl1U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org