Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201341.roa
File: AS201341.roa (raw, json)
Hash identifier: FtQyeLpEf07H7M04hVp3U899ONLvJ5X8jQJ9wEfTkRw=
Subject key identifier: EE:6A:C5:C2:FF:5D:1A:A3:D8:4E:CF:5A:78:82:70:E0:7F:65:0D:03
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 3DAAF7CF76D2A7F60978BC29DC3C59ABC17335FE
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201341.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 201341
IP address blocks: 185.121.160.0/24 maxlen: 24
185.121.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:aa:f7:cf:76:d2:a7:f6:09:78:bc:29:dc:3c:59:ab:c1:73:35:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=EE6AC5C2FF5D1AA3D84ECF5A788270E07F650D03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:99:bf:e4:2c:87:24:4c:0e:42:79:b8:ca:
04:1b:e2:f0:4e:fb:ef:c0:50:94:9d:a6:a0:47:08:
15:98:38:08:87:70:28:99:a2:03:bc:44:36:2e:6a:
71:b1:ad:9f:e9:8f:36:57:fb:cf:87:9f:33:5a:d9:
df:8e:1c:f0:c2:04:12:ba:bb:1e:3d:fa:e2:75:c9:
7a:55:6b:2d:ed:99:7f:70:28:5d:eb:1f:e6:1e:86:
e9:7e:2c:52:77:b2:7b:d4:22:3e:2c:50:ac:92:05:
24:89:aa:2d:99:1a:16:99:09:65:cc:74:fe:16:c8:
3a:ec:b7:0e:1b:9f:17:1d:7a:60:2d:0f:78:e2:98:
6d:86:e9:43:9c:75:ec:9e:e6:79:45:a2:91:cf:e8:
26:9b:88:05:ae:d4:f0:f7:95:11:dc:90:45:5d:36:
77:9f:1f:0b:ab:31:c8:e5:af:c2:10:4e:5f:a9:cf:
1b:15:94:9a:fb:b3:0b:c6:bb:ed:30:fd:17:7c:13:
f3:04:d3:51:4b:6e:cd:b2:be:92:08:f2:59:7e:a0:
df:87:7d:7b:e5:d8:67:fe:a2:23:86:f6:7d:88:d4:
4d:5e:d9:15:0e:58:2f:bb:74:04:15:2f:fc:ca:34:
4d:3f:1f:a5:cb:d5:c3:0c:b7:f8:a0:49:ff:c4:02:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6A:C5:C2:FF:5D:1A:A3:D8:4E:CF:5A:78:82:70:E0:7F:65:0D:03
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201341.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.160.0/23
Signature Algorithm: sha256WithRSAEncryption
91:0e:ee:2d:e6:f9:2e:11:85:f2:ef:5c:2f:10:e3:a0:6a:ec:
5e:2c:66:aa:e3:10:01:50:28:30:ff:94:b8:bf:e6:a8:38:97:
24:04:c8:0b:4b:36:ea:6c:50:cf:dd:91:21:e7:f2:21:02:d7:
6a:42:41:9f:66:2c:f1:f8:9a:45:a5:ff:32:12:5d:4e:e7:b5:
15:1a:5a:17:f0:29:d0:03:64:91:4d:17:c5:77:a8:f9:92:72:
26:43:97:45:0a:0b:50:ff:ce:a4:35:05:73:3a:b0:a4:d6:90:
87:00:a8:c1:62:47:d1:8f:38:88:df:8d:aa:46:92:fd:31:6f:
d5:fa:ce:92:fc:e0:47:b9:ec:53:d9:71:d8:19:67:cd:7b:7f:
fc:f0:57:6b:9a:85:2a:07:25:28:e9:f0:e0:bc:71:bb:82:8e:
df:f4:92:1d:56:cd:38:5f:ec:e4:56:44:e8:88:66:90:65:83:
1f:7f:bc:10:fd:10:c4:74:c1:74:1b:15:60:f3:ff:e2:4f:71:
98:f2:64:14:bb:c2:0d:9e:92:f9:69:2b:9b:e3:a8:23:af:66:
a8:ba:1a:02:65:10:07:d6:46:39:3a:ce:44:ab:00:b3:db:5a:
28:44:bc:74:9d:3c:5f:0e:51:83:b4:09:63:dd:f9:e8:e4:13:
82:fc:10:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:41 2025 by rpki-client