Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3138302e302f32322d3234203d3e203439393939.roa
File: 3137382e3230382e3138302e302f32322d3234203d3e203439393939.roa (raw, json)
Hash identifier: TmhQE0EefTnGbajDiyC/Yx7n1ngZkFMVXdL0rqVDMlY=
Subject key identifier: 98:5A:1E:E8:4A:9F:10:60:BE:D6:73:55:33:1B:59:66:8E:19:8C:CD
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 249861CED5DB8C4369EA17261BD2A2A70F0DACA6
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3138302e302f32322d3234203d3e203439393939.roa
Signing time: Wed 22 Mar 2023 15:29:40 +0000
ROA not before: Wed 22 Mar 2023 15:24:40 +0000
ROA not after: Wed 20 Mar 2024 15:29:40 +0000
asID: 49999
IP address blocks: 178.208.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:98:61:ce:d5:db:8c:43:69:ea:17:26:1b:d2:a2:a7:0f:0d:ac:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:40 2023 GMT
Not After : Mar 20 15:29:40 2024 GMT
Subject: CN=985A1EE84A9F1060BED67355331B59668E198CCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:1b:e0:ab:94:cb:be:1e:5d:e8:1d:7c:5f:
7d:ae:11:c8:3b:4b:b2:7a:9e:b7:72:19:d1:a4:15:
dc:f0:07:b5:31:eb:12:07:83:e0:f7:ee:f3:42:73:
8a:89:0e:3f:26:07:c4:14:e3:59:39:77:97:b8:d0:
cc:fd:db:09:d9:b2:55:a5:15:97:cd:18:8b:26:dd:
5c:50:1c:22:c5:00:9f:17:4d:ad:dd:89:33:63:47:
b6:e7:cd:06:8d:d0:d2:bb:0e:94:da:6a:73:d5:dc:
e7:bb:8f:c3:81:2b:12:1f:e3:8c:e7:43:52:61:38:
36:57:eb:26:37:ad:5c:94:d0:55:9e:a6:d8:07:6b:
05:32:86:9c:3d:18:53:0d:3a:dd:10:87:84:16:40:
ff:67:32:22:77:9b:2b:94:bb:69:86:2b:83:fd:b1:
f5:cb:70:a9:54:f0:18:ee:1f:28:d1:f6:8e:b8:b0:
b6:9a:6d:d2:7b:79:b8:40:9d:c5:6f:83:2b:1b:c8:
d4:0d:a8:75:ec:f0:3f:1b:d7:70:47:df:1d:82:05:
86:21:27:c0:46:c3:4f:94:16:bb:ea:ec:04:db:f6:
37:a9:d6:fd:ad:05:59:b6:63:ae:54:98:89:c1:4f:
43:1c:b6:89:87:65:a7:67:fb:68:af:4a:fe:94:5f:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5A:1E:E8:4A:9F:10:60:BE:D6:73:55:33:1B:59:66:8E:19:8C:CD
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3138302e302f32322d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.180.0/22
Signature Algorithm: sha256WithRSAEncryption
92:60:c7:c1:88:95:42:c9:bb:09:5f:07:df:a7:fc:ba:3d:ef:
83:13:28:c1:6b:ab:54:ad:6c:6f:5f:c7:9a:43:e7:48:69:e0:
73:03:3c:e6:1e:a3:94:e7:f6:a1:02:de:ea:d7:eb:44:90:eb:
f6:9f:84:0c:bf:5e:87:b0:eb:de:53:78:7e:a3:b4:99:74:33:
45:c9:7e:73:e4:9a:27:5c:49:c5:a8:c0:b7:29:1e:b4:5d:a4:
eb:e0:e7:85:ab:e2:0d:22:0d:ed:8e:87:3d:dc:f0:37:2c:6e:
a7:28:f4:b1:85:84:02:74:32:99:c7:0e:a2:f5:f0:93:81:12:
84:d5:46:fc:a9:d2:a6:48:27:72:95:d4:19:ac:6c:6f:f7:c6:
ac:27:04:f2:3e:23:17:13:f3:24:cb:18:28:e6:65:9d:5b:83:
5a:38:c8:65:c0:50:f6:ff:42:1b:43:1e:b6:23:05:97:d5:65:
b5:e2:19:3e:c7:98:a3:54:c7:38:32:a5:f9:77:6b:2a:f0:52:
54:f1:46:f2:9b:4e:ca:21:8b:e4:b3:22:8c:e7:90:a6:26:c3:
be:13:97:56:3c:44:d5:48:5e:90:a2:1f:06:cf:d4:3d:45:9d:
83:31:3a:f2:30:4d:77:85:38:97:61:3b:03:c3:8f:52:ec:42:
05:96:a0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 09:30:19 2023 by rpki-client on console-ams.rpki-client.org