Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32322d3234203d3e20313939373635.roa
File: 3137362e3131382e3136302e302f32322d3234203d3e20313939373635.roa (raw, json)
Hash identifier: hwi5hWCr61IMkatQdPG9MR9BUVbIpeG/fpMsgMs/5Pc=
Subject key identifier: 9C:EA:66:70:DE:92:02:44:3A:E7:66:A7:BA:A3:CF:A5:80:85:E1:62
Certificate issuer: /CN=567688fc99cff14e0df7422720ea89ca16377899
Certificate serial: 34056972051BD29902CE1D05F277EC99FECEB78D
Authority key identifier: 56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32322d3234203d3e20313939373635.roa
Signing time: Wed 20 Dec 2023 19:57:37 +0000
ROA not before: Wed 20 Dec 2023 19:52:37 +0000
ROA not after: Wed 18 Dec 2024 19:57:37 +0000
asID: 199765
IP address blocks: 176.118.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:05:69:72:05:1b:d2:99:02:ce:1d:05:f2:77:ec:99:fe:ce:b7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567688fc99cff14e0df7422720ea89ca16377899
Validity
Not Before: Dec 20 19:52:37 2023 GMT
Not After : Dec 18 19:57:37 2024 GMT
Subject: CN=9CEA6670DE9202443AE766A7BAA3CFA58085E162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:c5:29:e8:d8:c0:3a:9c:6a:fe:b5:e4:16:
a8:e1:93:70:c4:11:81:47:94:ec:5f:33:8d:3f:b8:
63:d8:74:46:e0:13:cd:7b:c6:42:bd:02:3d:8f:30:
16:ec:46:aa:fb:bb:ab:5c:72:af:64:df:53:54:d6:
a3:d8:7e:f4:55:fa:6b:89:33:77:f9:f4:47:ff:7f:
3b:1e:cf:0d:8a:d6:86:04:7e:92:46:0a:0c:37:28:
92:5d:3b:9e:e9:a2:93:aa:08:1c:cd:a7:e7:69:e6:
7c:da:e7:55:69:02:49:3c:c4:73:e2:e6:8b:58:d0:
2f:f5:fa:8d:d3:e0:03:70:7e:52:0a:3f:a2:ec:4e:
6c:6b:6c:56:b3:5f:3a:d3:d8:70:38:0e:e5:57:b7:
fa:dd:e0:13:69:8b:78:b3:00:cd:c4:7f:d8:eb:e4:
8f:2e:47:13:b3:ef:43:bc:6d:dd:51:39:4f:92:f8:
bc:8b:e1:49:8b:0f:e3:34:4d:48:3d:d6:45:ff:47:
c1:4f:40:b9:f1:b0:91:49:14:dc:b2:3a:23:9a:af:
80:6a:84:74:e1:63:f3:67:f3:ba:fd:76:0b:73:d1:
fb:46:61:4c:8e:75:a7:7a:ad:25:b5:81:15:b1:67:
a6:ca:84:12:b7:59:7d:90:62:eb:60:30:7f:d5:c5:
12:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EA:66:70:DE:92:02:44:3A:E7:66:A7:BA:A3:CF:A5:80:85:E1:62
X509v3 Authority Key Identifier:
keyid:56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32322d3234203d3e20313939373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.160.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:b6:13:f9:8c:ba:26:40:4b:62:fb:eb:dc:cb:4b:ae:a5:fd:
bd:7a:ce:76:43:7c:a7:58:0a:96:c1:fb:65:c5:80:41:55:36:
5b:e8:e5:8a:78:13:78:68:09:65:ae:1e:39:76:e1:aa:cb:46:
75:95:a6:6a:fe:1f:0a:fe:b2:de:66:72:40:ad:10:a3:af:20:
1f:21:d0:ef:db:0a:ac:38:24:7c:0c:12:4f:98:89:15:03:5e:
97:c8:49:6e:8e:93:b3:a9:d7:d8:2a:04:92:e9:a0:55:2f:90:
47:6d:44:35:03:76:f7:a7:a9:a5:15:3b:c5:89:4f:4a:47:f5:
a4:b4:91:53:04:c5:2e:f3:4c:43:0f:b9:c7:73:8d:7c:80:55:
b1:ad:e0:6d:6b:6d:59:c8:bc:67:09:17:b0:ec:d2:21:2e:2f:
30:55:50:0e:b9:3b:9d:24:81:08:9d:39:4e:18:60:47:46:e0:
8a:e7:90:59:76:3b:fa:a0:52:ac:51:2d:d0:40:d4:f1:a4:ed:
29:77:d3:cd:96:e7:26:16:d0:7a:b7:fc:d3:ee:bb:19:68:45:
35:2c:04:f7:12:1a:77:4d:f0:54:bc:c0:bf:c5:86:74:64:d6:
2a:c4:8b:2a:18:d8:d0:fc:38:6e:62:f1:0f:f5:37:58:2f:7e:
a7:5b:e5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org