Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32322d3234203d3e20323130393132.roa
File: 3137362e3131382e3136302e302f32322d3234203d3e20323130393132.roa (raw, json)
Hash identifier: ebF6WD0coD8Kxy3oxXIN+1RcHyus935XCgfyWLFmB+k=
Subject key identifier: 52:FE:72:28:02:30:7B:41:33:95:E9:2F:91:78:20:65:E2:E0:B9:BD
Certificate issuer: /CN=567688fc99cff14e0df7422720ea89ca16377899
Certificate serial: 68CFB5F04B3859365D19B9DF734F006419664DF7
Authority key identifier: 56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32322d3234203d3e20323130393132.roa
Signing time: Mon 25 Dec 2023 20:36:26 +0000
ROA not before: Mon 25 Dec 2023 20:31:26 +0000
ROA not after: Mon 23 Dec 2024 20:36:26 +0000
asID: 210912
IP address blocks: 176.118.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:cf:b5:f0:4b:38:59:36:5d:19:b9:df:73:4f:00:64:19:66:4d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567688fc99cff14e0df7422720ea89ca16377899
Validity
Not Before: Dec 25 20:31:26 2023 GMT
Not After : Dec 23 20:36:26 2024 GMT
Subject: CN=52FE722802307B413395E92F91782065E2E0B9BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:79:49:0f:4f:6b:49:23:b0:b3:60:9e:60:
f7:12:86:d1:e7:c9:c1:58:5f:38:d5:a3:1e:0d:38:
eb:91:40:87:09:5f:39:59:be:6d:d7:4c:58:f2:1c:
f6:1a:c1:b7:8f:64:84:23:65:a5:4b:0d:07:c6:45:
9d:07:47:b4:35:5f:9a:4a:55:17:3d:5d:10:aa:68:
53:e6:7f:51:7c:b9:4a:37:38:d8:a3:46:47:73:62:
d5:f5:b5:cd:e1:e5:25:d9:53:30:95:0b:2d:a0:32:
d8:54:7d:fb:c7:ac:e0:3f:78:bf:e4:d6:ae:65:79:
a5:e9:1e:25:27:4b:87:67:a3:13:6c:99:68:ab:7a:
13:bd:f9:a6:ba:ba:f8:62:04:b0:cf:f5:20:29:27:
ca:dd:d9:1e:f1:13:b6:e9:55:85:0f:a7:6c:a9:d6:
24:b2:80:ef:b4:a2:f8:86:68:37:b3:f4:df:fd:53:
74:15:9e:af:99:66:88:e2:11:48:33:d5:ac:66:54:
dd:4a:da:4f:c8:b1:e5:87:13:c2:8c:fe:b9:64:9a:
7f:3a:9c:a6:19:d8:37:8e:3b:99:13:5e:f4:ab:80:
94:9b:e1:fc:08:2f:7f:9c:a6:49:ec:36:66:aa:d8:
64:52:1f:96:04:7f:02:82:7d:df:49:9b:1a:4d:5d:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FE:72:28:02:30:7B:41:33:95:E9:2F:91:78:20:65:E2:E0:B9:BD
X509v3 Authority Key Identifier:
keyid:56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32322d3234203d3e20323130393132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.160.0/22
Signature Algorithm: sha256WithRSAEncryption
66:1a:a9:f3:60:57:9a:cf:1a:3d:f1:e4:88:d3:30:0e:c9:0e:
11:ed:bd:1b:0f:ae:72:a8:fd:c3:ba:c5:a7:ad:f5:3a:a9:69:
f3:bd:0e:22:50:74:26:f5:10:80:a5:8b:9a:f5:a9:a6:8e:64:
bf:9f:fa:53:74:64:24:d4:04:75:8f:5a:68:c3:24:14:83:6e:
86:f4:9f:da:25:5b:a1:c3:ff:b9:93:83:12:fa:35:29:94:2b:
fb:74:f7:5c:3c:ee:01:46:1c:cd:8d:1f:75:ce:3c:37:ec:39:
45:05:81:a2:19:70:d2:69:0d:5a:8a:33:d9:3d:a9:a1:86:19:
ca:3e:e3:f5:e5:2f:ac:c6:be:6f:a2:2f:c4:fa:da:ae:8d:c8:
33:9b:f4:b0:2f:72:8f:d8:62:22:57:f0:34:89:aa:da:00:86:
af:6c:b7:16:f6:0d:ac:8b:18:8d:33:2c:33:51:82:2d:ce:45:
32:76:78:91:4e:7e:93:81:07:85:fb:82:e1:db:de:50:72:a4:
8a:55:2b:44:a0:49:e2:10:2e:93:0c:5a:7c:57:7d:b2:54:20:
5e:7c:eb:08:63:df:70:43:de:73:47:e7:42:75:29:3f:e0:74:
52:24:c3:8e:52:49:3e:dc:35:cf:ac:fa:19:bb:15:9b:98:c9:
47:48:c7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org