Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS396319.roa
File: AS396319.roa (raw, json)
Hash identifier: NClPvUgLOwcmqZNepYSboLS+aNkGnnEp/XMOGtte5PA=
Subject key identifier: 60:D1:AD:38:28:B9:C7:07:BF:9B:84:F1:5D:C5:06:15:64:04:27:A3
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 50131E16D0788CD3A56A9C5D5187312873288D17
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS396319.roa
Signing time: Sun 01 Jan 2023 23:59:20 +0000
ROA not before: Sun 01 Jan 2023 23:54:20 +0000
ROA not after: Sun 31 Dec 2023 23:59:20 +0000
asID: 396319
IP address blocks: 185.195.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:13:1e:16:d0:78:8c:d3:a5:6a:9c:5d:51:87:31:28:73:28:8d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:20 2023 GMT
Not After : Dec 31 23:59:20 2023 GMT
Subject: CN=60D1AD3828B9C707BF9B84F15DC50615640427A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:31:13:4f:7c:7f:c8:31:71:d4:59:a0:5b:e7:
9f:90:0d:89:ab:36:0a:46:e4:2e:64:a3:01:a7:5e:
92:fd:03:b7:cb:ab:e3:47:22:36:fc:fd:69:84:91:
0c:7b:d2:e3:07:25:50:38:13:a9:13:85:c5:93:6d:
80:50:17:07:bd:5c:ea:a0:1e:f7:f3:8e:9a:6e:5e:
7a:07:6a:7d:61:ae:5a:29:48:d4:00:f3:e5:81:d0:
ff:99:06:32:aa:cf:cb:9f:5f:52:6f:40:35:ea:8e:
34:0c:48:03:5b:53:7c:54:9a:77:13:0d:82:74:22:
0e:0c:51:d0:3b:4a:56:cc:f2:9b:a5:5e:0c:3f:54:
27:da:e8:d7:2b:c1:55:f4:b1:93:4e:63:49:27:9a:
e4:40:01:b7:b6:73:be:db:de:68:fe:8d:ca:c2:7e:
a9:a3:9d:ac:b8:30:8a:7f:57:ed:0a:01:18:5c:ca:
63:4d:bd:af:93:2d:24:9e:ca:03:4c:69:ce:95:03:
a7:06:11:48:8a:52:67:38:1a:bc:31:2e:e0:b5:d9:
31:39:d9:15:e1:97:66:78:ce:42:65:ff:61:f6:62:
8d:55:2e:95:99:fb:92:a3:fb:c2:77:2f:c8:e2:e8:
a8:b2:9a:d4:ce:ba:44:a3:45:a7:17:16:08:3d:4a:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D1:AD:38:28:B9:C7:07:BF:9B:84:F1:5D:C5:06:15:64:04:27:A3
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS396319.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.238.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0d:e4:41:06:03:ed:57:b7:c2:55:ab:25:b9:cd:d5:84:e7:
7f:c7:61:2a:05:46:ac:b0:c4:0c:55:a8:54:b6:7d:0f:4e:66:
20:91:13:e6:72:ce:a3:07:5f:4b:8d:aa:a8:c5:6c:43:33:0d:
22:37:40:68:34:ce:41:e3:9d:43:bc:a0:17:a8:46:e1:3a:26:
77:de:66:53:0b:c1:3c:eb:0d:84:18:26:cb:e6:80:6e:f6:c7:
1e:23:87:b4:ee:30:1e:37:bd:8c:94:01:31:56:53:23:02:44:
98:66:6c:a9:86:f6:0a:7b:99:c5:c3:30:e2:c6:08:30:0c:94:
f9:04:4e:11:ef:71:11:94:5a:ab:23:35:0e:99:e4:8a:07:2d:
8d:47:0e:56:30:73:dd:1c:56:ea:63:9e:7a:47:ab:21:a0:92:
0c:89:37:78:61:5c:aa:97:db:e1:f6:59:2d:ad:ac:c5:11:e7:
22:31:40:b9:f0:d5:2f:76:38:c9:19:cf:17:29:0e:f2:7d:1b:
3c:69:3f:e6:95:3c:f3:a6:0f:7a:fe:f9:d0:e8:89:13:8c:30:
4e:ee:07:08:5b:c4:63:c5:23:96:57:9a:85:c0:90:8c:06:ee:
47:10:2f:8a:41:48:16:a0:b8:15:76:9e:e3:50:26:e7:53:55:
11:8c:2d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org