Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS57207.roa
File: AS57207.roa (raw, json)
Hash identifier: 6mqj8uqQvqMSxIin0riL8J/EFskBqjFasf7eDiEeZJA=
Subject key identifier: 37:26:25:9C:69:4D:1D:C6:ED:4F:8C:F1:EA:78:D3:2D:10:0F:B1:FE
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 0F8A0C63DEA7DD6BE22A330B75F608E335D34B93
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS57207.roa
Signing time: Tue 06 Jun 2023 09:28:34 +0000
ROA not before: Tue 06 Jun 2023 09:23:34 +0000
ROA not after: Tue 04 Jun 2024 09:28:34 +0000
asID: 57207
IP address blocks: 95.140.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:8a:0c:63:de:a7:dd:6b:e2:2a:33:0b:75:f6:08:e3:35:d3:4b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:23:34 2023 GMT
Not After : Jun 4 09:28:34 2024 GMT
Subject: CN=3726259C694D1DC6ED4F8CF1EA78D32D100FB1FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:24:a7:53:a3:a1:f8:9b:b6:f7:18:7a:c8:
ab:4b:e0:e7:a5:79:35:bc:e2:01:8c:5e:8b:cc:32:
16:74:17:fe:fe:ed:de:bb:3d:80:2e:cf:08:70:fb:
6c:e4:4c:2d:e2:19:0e:b6:5b:85:54:f4:a8:1f:c1:
35:88:7f:9e:3e:8d:b0:ae:04:69:d8:96:58:23:62:
0a:53:6d:46:4c:81:5d:32:7d:92:fa:52:7d:61:fb:
ed:f9:b6:d8:87:05:49:f7:80:c3:d6:ad:e3:b0:3e:
b1:46:78:21:04:1d:3e:bd:12:36:42:ab:4a:75:2b:
4f:74:3d:98:56:4c:4f:0a:29:85:62:19:ec:ce:f6:
e5:19:62:a8:63:45:7f:eb:93:f6:fb:96:10:86:a0:
68:6d:60:4e:e8:8e:89:be:24:f2:fe:0e:c6:87:35:
34:78:63:34:67:9e:57:68:4b:be:02:d9:2a:46:7a:
f2:62:91:56:77:40:0f:f9:aa:21:b8:dc:9d:b3:df:
eb:de:6a:66:61:b7:8b:52:63:71:41:ee:be:10:89:
9e:21:10:3c:31:8b:d3:59:d3:57:e4:0c:71:46:ad:
43:a2:82:3b:7d:54:67:5b:e2:a8:ec:e3:a4:31:c8:
e3:16:9b:f7:32:3b:43:54:bd:24:bc:81:3a:2d:f6:
44:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:26:25:9C:69:4D:1D:C6:ED:4F:8C:F1:EA:78:D3:2D:10:0F:B1:FE
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS57207.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.122.0/24
Signature Algorithm: sha256WithRSAEncryption
51:9f:9d:a2:44:24:14:1a:54:d0:25:2d:17:e1:66:c6:39:b4:
18:db:9c:b4:e1:87:c0:ce:32:f2:f9:87:96:af:df:af:fc:0d:
58:67:09:88:e4:17:d5:1f:17:32:cf:cd:75:4a:26:62:29:a9:
63:95:9c:cf:23:c6:60:c6:3a:7b:12:9c:73:ad:d0:68:8d:30:
cc:50:bf:b5:c9:88:9f:5a:c0:d4:4d:2c:17:12:96:96:b0:f0:
35:a6:9d:1f:c0:c8:00:a1:76:d2:10:81:3b:4d:aa:45:90:2b:
81:9c:f2:8b:23:b4:1d:5e:b1:ff:0d:3f:25:69:14:7c:43:0e:
ae:7d:77:6c:bb:5b:ff:71:d3:b6:0a:77:92:d3:89:38:19:db:
3e:77:1c:fc:36:2e:5e:12:b5:2f:cc:f2:61:b5:99:7e:a0:a5:
f8:72:ae:1e:e0:55:97:3a:bc:00:11:e4:a3:45:db:b9:f0:89:
58:68:fb:ed:32:55:f7:ef:df:28:ca:4b:f7:55:97:6d:c8:14:
b9:64:b4:ab:c2:dc:4a:e3:fb:d4:0d:86:87:b8:d5:8e:b5:45:
97:4b:a1:de:0e:df:fa:85:f0:7b:a6:91:16:a4:63:73:97:64:
dc:b8:e6:ad:6b:f3:04:d3:69:41:3b:0c:65:c1:17:60:fc:80:
35:0e:07:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org