Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3138302e302f32322d3234203d3e20383334.roa
File: 3137382e3230382e3138302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: mHenUiKtpVrPuA+sS9mNtnvz16Zxwh5ZOSPHAnRIh0s=
Subject key identifier: 21:7C:46:5E:40:2A:9F:22:3C:E9:26:67:05:F1:84:16:5A:22:C6:58
Certificate issuer: /CN=3a96802395455ca00679c41d5c056cae95d4b57d
Certificate serial: 149DF841B4D853A07ADA25B9E278D08426BCF959
Authority key identifier: 3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3138302e302f32322d3234203d3e20383334.roa
Signing time: Wed 22 Mar 2023 15:29:40 +0000
ROA not before: Wed 22 Mar 2023 15:24:40 +0000
ROA not after: Wed 20 Mar 2024 15:29:40 +0000
asID: 834
IP address blocks: 178.208.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:9d:f8:41:b4:d8:53:a0:7a:da:25:b9:e2:78:d0:84:26:bc:f9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a96802395455ca00679c41d5c056cae95d4b57d
Validity
Not Before: Mar 22 15:24:40 2023 GMT
Not After : Mar 20 15:29:40 2024 GMT
Subject: CN=217C465E402A9F223CE9266705F184165A22C658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:d6:82:df:3a:c5:52:2b:85:a3:37:85:06:
b4:8f:bb:d2:82:f9:7e:b5:22:52:8f:60:2e:ef:41:
91:05:99:5b:d7:06:33:7e:a3:cd:03:82:e8:23:01:
02:f2:56:d0:f3:f8:76:e5:24:e5:81:11:ed:e3:62:
51:26:fa:63:0b:46:05:85:15:a7:8d:d3:cf:fc:38:
c6:6c:a3:0b:2e:60:6a:83:41:95:94:29:be:a1:e2:
91:d1:38:09:c0:e5:9f:0d:a0:33:be:3b:48:60:fe:
72:38:55:64:e9:5b:4a:db:3e:f6:42:c7:5e:1e:cf:
0b:33:e4:2c:8a:a4:50:60:6f:f5:8a:fe:09:95:20:
ae:e5:86:92:7c:49:30:fc:92:ef:d0:f6:e5:16:45:
16:b2:7f:e9:a9:10:c0:da:05:d0:4d:06:a0:58:28:
21:cb:05:da:f4:ab:82:a2:25:87:76:34:e4:91:39:
9a:38:71:3f:d9:54:78:f2:6c:95:6a:6a:3b:87:89:
4d:a1:ec:4d:79:0b:e5:e5:57:15:87:ad:32:f1:08:
ca:b1:11:f4:da:53:b4:ce:bd:28:c6:df:5e:f2:c0:
68:5f:29:93:2e:62:dc:4b:a4:3c:72:e2:1d:fc:f6:
63:97:7c:42:76:45:6d:5c:f8:7a:42:97:01:68:b0:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7C:46:5E:40:2A:9F:22:3C:E9:26:67:05:F1:84:16:5A:22:C6:58
X509v3 Authority Key Identifier:
keyid:3A:96:80:23:95:45:5C:A0:06:79:C4:1D:5C:05:6C:AE:95:D4:B5:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3A96802395455CA00679C41D5C056CAE95D4B57D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpaAI5VFXKAGecQdXAVsrpXUtX0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a2ffbce7-88dd-4ca9-b245-116386cee788/0/3137382e3230382e3138302e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.180.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:65:33:f3:88:70:36:f0:8f:66:77:93:8b:1e:d5:89:c8:ed:
4c:9b:a1:55:d8:38:79:d8:e8:31:03:8c:e0:d7:97:74:4b:8d:
17:4f:4a:d6:94:72:3d:99:6a:7e:93:d3:2c:bb:8d:33:54:34:
64:7a:b9:26:4f:de:bd:ed:e5:7a:44:08:f2:63:70:a8:25:dc:
6c:bc:b5:6b:90:c3:d0:21:03:8c:ff:15:36:35:e6:8c:7a:35:
52:de:14:e3:70:10:fc:11:63:0e:ae:51:09:c2:72:98:99:e7:
0d:3b:9f:57:28:a9:d2:f8:c4:91:0b:47:de:8f:5e:56:45:c3:
e8:c7:ac:6f:2e:f8:f0:6f:72:53:a0:bf:4f:34:8b:93:00:78:
0b:38:b9:37:04:55:9e:16:e8:d7:58:86:90:3d:ed:2d:da:25:
8f:f3:ed:95:10:5b:fe:01:17:84:04:d5:0f:fa:11:4b:5f:70:
7e:0c:0d:d0:6b:20:04:6f:eb:3d:77:2f:00:9f:99:0f:94:22:
12:88:94:8a:3f:f1:a2:39:86:e6:95:c2:54:0f:8a:5f:a9:22:
f4:cf:00:c4:25:21:c1:a6:83:37:c9:20:fc:44:3d:80:2f:8b:
a0:11:cf:2b:c6:a7:40:46:61:0f:10:a3:fd:05:b9:1b:f8:8d:
47:20:93:d3
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUFJ34QbTYU6B62iW54njQhCa8+VkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2E5NjgwMjM5NTQ1NWNhMDA2NzljNDFkNWMwNTZjYWU5
NWQ0YjU3ZDAeFw0yMzAzMjIxNTI0NDBaFw0yNDAzMjAxNTI5NDBaMDMxMTAvBgNV
BAMTKDIxN0M0NjVFNDAyQTlGMjIzQ0U5MjY2NzA1RjE4NDE2NUEyMkM2NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1HdaC3zrFUiuFozeFBrSPu9KC
+X61IlKPYC7vQZEFmVvXBjN+o80DgugjAQLyVtDz+HblJOWBEe3jYlEm+mMLRgWF
FaeN08/8OMZsowsuYGqDQZWUKb6h4pHROAnA5Z8NoDO+O0hg/nI4VWTpW0rbPvZC
x14ezwsz5CyKpFBgb/WK/gmVIK7lhpJ8STD8ku/Q9uUWRRayf+mpEMDaBdBNBqBY
KCHLBdr0q4KiJYd2NOSROZo4cT/ZVHjybJVqajuHiU2h7E15C+XlVxWHrTLxCMqx
EfTaU7TOvSjG317ywGhfKZMuYtxLpDxy4h389mOXfEJ2RW1c+HpClwFosCkFAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUIXxGXkAqnyI86SZnBfGEFloixlgwHwYDVR0j
BBgwFoAUOpaAI5VFXKAGecQdXAVsrpXUtX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTJmZmJjZTctODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2Vl
Nzg4LzAvM0E5NjgwMjM5NTQ1NUNBMDA2NzlDNDFENUMwNTZDQUU5NUQ0QjU3RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09wYUFJNVZGWEtBR2VjUWRYQVZzcnBY
VXRYMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTJmZmJjZTct
ODhkZC00Y2E5LWIyNDUtMTE2Mzg2Y2VlNzg4LzAvMzEzNzM4MmUzMjMwMzgyZTMx
MzgzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArLQ
tDANBgkqhkiG9w0BAQsFAAOCAQEAKmUz84hwNvCPZneTix7VicjtTJuhVdg4edjo
MQOM4NeXdEuNF09K1pRyPZlqfpPTLLuNM1Q0ZHq5Jk/eve3lekQI8mNwqCXcbLy1
a5DD0CEDjP8VNjXmjHo1Ut4U43AQ/BFjDq5RCcJymJnnDTufVyip0vjEkQtH3o9e
VkXD6Mesby748G9yU6C/TzSLkwB4Czi5NwRVnhbo11iGkD3tLdolj/PtlRBb/gEX
hATVD/oRS19wfgwN0GsgBG/rPXcvAJ+ZD5QiEoiUij/xojmG5pXCVA+KX6ki9M8A
xCUhwaaDN8kg/EQ9gC+LoBHPK8anQEZhDxCj/QW5G/iNRyCT0w==
-----END CERTIFICATE-----
Generated at Wed Sep 13 09:30:19 2023 by rpki-client on console-ams.rpki-client.org