Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/53bc4bab-c120-4c15-bd74-c959820a6a83/0/3139332e35372e3136362e302f32342d3234203d3e20323132323338.roa
File: 3139332e35372e3136362e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: E4fKV1O13rkQ7q9t4sG2NHntQoXJ+m1y/Nl2pZQnW30=
Subject key identifier: 78:F2:1A:46:12:4E:4F:AE:7A:F2:B6:E1:3F:E5:4A:F7:10:76:2D:A1
Certificate issuer: /CN=dfd05dc390f8edf0d8eefaca62ee3fcfceb575b7
Certificate serial: 14294690CBBFF7F4AF2BFB1004DF202A120F409A
Authority key identifier: DF:D0:5D:C3:90:F8:ED:F0:D8:EE:FA:CA:62:EE:3F:CF:CE:B5:75:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39Bdw5D47fDY7vrKYu4_z861dbc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/53bc4bab-c120-4c15-bd74-c959820a6a83/0/3139332e35372e3136362e302f32342d3234203d3e20323132323338.roa
Signing time: Wed 22 Mar 2023 07:55:58 +0000
ROA not before: Wed 22 Mar 2023 07:50:58 +0000
ROA not after: Wed 20 Mar 2024 07:55:58 +0000
asID: 212238
IP address blocks: 193.57.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:29:46:90:cb:bf:f7:f4:af:2b:fb:10:04:df:20:2a:12:0f:40:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd05dc390f8edf0d8eefaca62ee3fcfceb575b7
Validity
Not Before: Mar 22 07:50:58 2023 GMT
Not After : Mar 20 07:55:58 2024 GMT
Subject: CN=78F21A46124E4FAE7AF2B6E13FE54AF710762DA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:90:0f:a2:2f:81:d9:f8:13:54:e2:a1:e8:98:
83:35:c4:47:5e:e5:9e:21:a8:f7:a8:64:f7:43:dd:
17:f9:2e:93:1f:59:af:32:c5:29:c0:15:97:5a:7a:
4d:8d:1b:ee:c0:e9:31:dc:42:99:e2:f1:a1:60:e8:
a7:89:ed:e3:16:0c:54:5b:9c:36:43:bd:b0:e0:c5:
23:f6:84:4b:a6:1d:55:f0:5b:39:99:23:77:a8:86:
1a:08:a2:be:c4:d9:74:01:ba:62:b3:46:0d:32:a9:
d5:e1:65:38:ce:76:b1:86:2b:ec:f1:88:b0:56:f5:
45:6f:0e:d3:e8:fb:ed:50:6b:ba:35:e5:8f:a3:b4:
b2:fd:47:a6:31:13:c3:45:49:a7:c2:76:66:6a:94:
e4:f3:96:e7:99:60:eb:b7:3c:2f:3f:a5:52:52:ec:
a7:d2:cf:16:9b:a9:cf:4a:b0:27:7a:39:34:b6:fa:
06:48:ac:44:6f:c1:0e:14:9a:be:35:d8:50:c3:76:
00:f2:ce:df:81:ef:ed:4e:10:e0:d9:eb:1a:ed:73:
e7:b1:61:73:b6:9c:d4:b0:48:56:41:d3:af:e6:ed:
88:e2:1d:4c:2a:0c:38:37:c1:79:d2:45:2f:67:99:
a6:23:a3:b1:10:7d:b5:9f:df:45:a0:42:67:6c:81:
b6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F2:1A:46:12:4E:4F:AE:7A:F2:B6:E1:3F:E5:4A:F7:10:76:2D:A1
X509v3 Authority Key Identifier:
keyid:DF:D0:5D:C3:90:F8:ED:F0:D8:EE:FA:CA:62:EE:3F:CF:CE:B5:75:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/53bc4bab-c120-4c15-bd74-c959820a6a83/0/DFD05DC390F8EDF0D8EEFACA62EE3FCFCEB575B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39Bdw5D47fDY7vrKYu4_z861dbc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/53bc4bab-c120-4c15-bd74-c959820a6a83/0/3139332e35372e3136362e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.166.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:81:2a:a4:30:ac:76:52:a8:70:92:f5:9b:de:ff:59:17:30:
df:72:ad:bc:4e:97:87:df:23:9f:9c:1b:04:99:be:99:e4:7d:
37:72:9d:5b:1b:b5:4a:0f:8b:08:82:f0:0b:2b:70:e9:05:b6:
0c:ae:58:2d:62:0b:4d:61:82:9d:1d:35:9d:10:36:a5:0e:21:
02:f3:8f:75:9c:b2:3b:2a:34:b0:7c:87:8f:42:fd:a3:ea:7f:
8f:75:96:5d:c8:9e:d0:77:38:29:32:ef:0b:ac:10:b4:b1:82:
53:9e:80:c6:f3:31:46:3a:fb:85:e4:44:d4:5f:ec:33:e7:2d:
88:81:f1:0a:eb:49:94:cf:a3:e6:16:0f:56:5d:bc:98:56:93:
09:43:c1:bb:bb:10:4b:62:bf:b2:bc:7f:3f:8c:a4:00:f6:8f:
14:7f:2a:40:3d:58:b5:b6:44:d5:7f:68:22:5c:ec:80:d6:ee:
2f:f0:fb:fc:4d:3c:74:01:55:f9:3a:ed:5a:a3:11:cd:77:4a:
c2:1c:74:f0:1d:e9:af:6d:8d:f8:b0:3f:31:43:d0:4b:f1:4e:
59:3d:2c:83:91:45:66:6f:2a:93:06:cc:7a:8a:53:31:26:71:
e3:c8:73:3f:13:1e:b5:2d:87:a8:ad:e1:9a:f0:59:f9:22:1e:
89:81:5a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 10:45:55 2023 by rpki-client on console-ams.rpki-client.org