Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/550be275-2398-4a04-b1f5-40ed81b67ecf/0/3139332e38342e3131312e302f32342d3234203d3e20383334.roa
File: 3139332e38342e3131312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 3J4Py0rOr8q915PwUuya1t4RBpDVjr/BX6PZgIvqwDc=
Subject key identifier: 96:E8:9E:97:5B:82:EF:6E:49:B3:5A:EE:33:4C:36:18:CC:43:72:57
Certificate issuer: /CN=be210ddf313c86c06e3867b3c4d5d80121f0bbe5
Certificate serial: 44543CCB57F904CA54F682EF6D3F12DCB0371AAE
Authority key identifier: BE:21:0D:DF:31:3C:86:C0:6E:38:67:B3:C4:D5:D8:01:21:F0:BB:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/viEN3zE8hsBuOGezxNXYASHwu-U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/550be275-2398-4a04-b1f5-40ed81b67ecf/0/3139332e38342e3131312e302f32342d3234203d3e20383334.roa
Signing time: Thu 01 Jun 2023 00:00:09 +0000
ROA not before: Wed 31 May 2023 23:55:09 +0000
ROA not after: Thu 30 May 2024 00:00:09 +0000
asID: 834
IP address blocks: 193.84.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:54:3c:cb:57:f9:04:ca:54:f6:82:ef:6d:3f:12:dc:b0:37:1a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be210ddf313c86c06e3867b3c4d5d80121f0bbe5
Validity
Not Before: May 31 23:55:09 2023 GMT
Not After : May 30 00:00:09 2024 GMT
Subject: CN=96E89E975B82EF6E49B35AEE334C3618CC437257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:79:92:02:e5:a5:f1:0a:df:12:b8:48:2f:
63:fb:78:21:31:22:c9:2a:0f:52:eb:2a:83:8a:bd:
8e:48:ce:48:6b:e5:7f:08:ce:56:e5:79:1a:bd:37:
92:c7:1b:3e:64:7e:d0:17:ee:43:c5:07:e1:f2:96:
56:1f:51:ee:d3:3f:ae:a6:1d:96:f8:6f:6f:ad:bb:
d2:1f:0a:45:74:c1:5e:a5:42:fa:00:ff:68:a7:79:
35:75:29:e3:1f:68:be:9c:55:fe:b3:b9:a7:64:2a:
3c:a1:33:46:de:4b:ee:0d:d2:8f:10:60:a3:d0:c6:
3d:11:24:0c:3d:c0:0d:6b:da:92:c8:ab:36:14:8e:
c7:09:d9:fd:db:4e:e0:b2:fc:fb:91:57:f6:30:8c:
70:46:05:f1:63:3e:22:a6:48:5e:0b:d7:3c:d5:e1:
d9:11:4a:a8:b7:45:7e:9f:42:c9:c3:75:1e:99:f9:
29:7b:75:fa:13:70:f7:4d:bb:15:09:a4:30:db:6f:
58:84:43:3a:4f:be:7e:3a:b4:75:90:cd:69:73:ed:
26:39:ff:04:42:db:46:c5:2e:11:b3:79:99:90:b0:
a1:29:56:40:e7:8d:05:f6:b9:b5:1d:eb:bb:f1:36:
57:d7:6c:22:f0:3d:e6:6d:c4:c4:7a:88:21:8b:9a:
b3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E8:9E:97:5B:82:EF:6E:49:B3:5A:EE:33:4C:36:18:CC:43:72:57
X509v3 Authority Key Identifier:
keyid:BE:21:0D:DF:31:3C:86:C0:6E:38:67:B3:C4:D5:D8:01:21:F0:BB:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/550be275-2398-4a04-b1f5-40ed81b67ecf/0/BE210DDF313C86C06E3867B3C4D5D80121F0BBE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viEN3zE8hsBuOGezxNXYASHwu-U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/550be275-2398-4a04-b1f5-40ed81b67ecf/0/3139332e38342e3131312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.111.0/24
Signature Algorithm: sha256WithRSAEncryption
19:d9:9d:7d:cf:e4:31:3b:c2:1b:44:48:0b:55:58:ab:c9:94:
1b:f8:69:76:f0:cc:c9:fa:68:56:89:0c:ea:72:cc:18:9c:43:
62:11:53:db:a9:f3:f2:6e:ca:23:29:d0:84:95:f1:bc:ab:3e:
16:73:da:71:fd:c4:4f:8d:ee:cc:72:ca:32:60:c4:14:92:b6:
46:ab:6e:92:32:31:01:5a:2a:a6:07:3a:62:50:4e:77:89:8d:
4d:3a:3a:88:0f:4a:f4:4c:f0:33:e3:b5:2d:66:4a:d1:c0:56:
26:b5:1e:84:3f:a5:36:09:0d:66:5a:a8:be:f8:92:35:99:09:
54:35:de:54:60:ec:b8:94:d9:e0:bd:ec:d8:f3:93:c8:4e:f8:
1c:44:e1:db:1c:d7:47:7e:d3:45:48:73:3d:6e:bb:92:50:63:
dc:a1:ec:c2:7a:23:7c:ee:92:ac:44:f0:83:99:11:41:0b:e4:
17:b4:82:3f:99:05:f9:d5:03:a0:d9:82:ad:fc:33:30:b7:97:
40:ad:5e:3d:b7:72:cf:40:34:82:dc:73:2c:d2:ea:a7:69:bd:
10:d9:28:6b:f3:27:b4:fc:e2:de:95:e9:c2:01:45:04:27:da:
68:59:c1:9a:aa:0b:22:e2:09:3b:32:0d:fa:aa:f1:f2:a1:01:
fe:0f:fe:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:05 2024 by rpki-client on console-ams.rpki-client.org