Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32322d3234203d3e20323131313636.roa
File: 3137362e3131382e3136302e302f32322d3234203d3e20323131313636.roa (raw, json)
Hash identifier: ppwPfuY4CCMgxiMV4Uy/HNZrRTLOH9iTu/z3kIcObOU=
Subject key identifier: FD:FB:AC:19:3E:3E:B0:27:51:35:EC:73:1E:BB:1F:67:CF:0E:3F:40
Certificate issuer: /CN=567688fc99cff14e0df7422720ea89ca16377899
Certificate serial: 70341E991416D5B58C8F99511E8BC53B6951FB55
Authority key identifier: 56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32322d3234203d3e20323131313636.roa
Signing time: Sat 23 Dec 2023 01:34:44 +0000
ROA not before: Sat 23 Dec 2023 01:29:44 +0000
ROA not after: Sat 21 Dec 2024 01:34:44 +0000
asID: 211166
IP address blocks: 176.118.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:34:1e:99:14:16:d5:b5:8c:8f:99:51:1e:8b:c5:3b:69:51:fb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567688fc99cff14e0df7422720ea89ca16377899
Validity
Not Before: Dec 23 01:29:44 2023 GMT
Not After : Dec 21 01:34:44 2024 GMT
Subject: CN=FDFBAC193E3EB0275135EC731EBB1F67CF0E3F40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:46:a6:02:88:18:af:01:55:ad:27:d4:c3:
b3:67:87:a2:15:b1:5f:72:b4:4c:62:04:4b:c8:65:
31:be:ea:ac:9b:20:b6:da:c5:82:cd:42:ca:ed:60:
d9:7b:d9:5c:6e:7d:54:33:e3:62:9d:53:20:19:28:
f5:ec:62:67:aa:ec:cf:8a:51:07:cd:97:2f:e4:2d:
a0:b7:f7:a2:84:d0:b7:04:ea:58:cd:7a:7d:6c:c3:
0d:3e:13:c5:05:00:60:3e:45:b1:60:22:da:a3:2e:
cc:48:94:97:a8:29:81:80:ac:e6:d8:d3:ab:f8:9d:
ce:18:c8:b0:78:84:e3:4a:b1:ee:69:f9:02:ec:54:
0c:bb:aa:e9:ad:8b:03:c8:aa:d3:11:f0:d3:eb:05:
60:b6:f7:5a:4b:42:4b:b9:b6:21:46:e1:0e:66:c9:
93:1f:f4:ce:11:eb:a6:3c:68:a2:53:6d:d1:86:02:
7d:97:ac:63:92:22:7c:d8:11:7f:63:4e:1e:e5:a2:
47:1b:40:80:30:7f:72:e0:8b:4e:7c:b2:66:48:76:
2c:58:87:fd:b4:d1:91:a2:de:30:fd:5d:7c:75:95:
4e:49:4f:5d:6d:78:55:bc:33:87:54:62:f5:bc:6a:
79:7c:a3:b9:05:aa:ed:44:c2:c7:b5:d1:4c:89:6c:
ec:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FB:AC:19:3E:3E:B0:27:51:35:EC:73:1E:BB:1F:67:CF:0E:3F:40
X509v3 Authority Key Identifier:
keyid:56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32322d3234203d3e20323131313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.160.0/22
Signature Algorithm: sha256WithRSAEncryption
59:eb:51:90:eb:b3:b0:24:99:ba:e0:61:c2:e4:82:d0:f2:25:
d9:47:75:24:c3:e0:8f:6b:9f:8a:39:92:0b:bf:e7:af:f1:64:
d3:df:34:ee:5d:78:00:8c:e3:39:a9:9a:ec:fd:51:62:9b:d5:
46:33:03:54:7e:66:a0:21:97:53:4a:84:b5:e9:1f:03:76:c9:
90:80:3f:27:83:0f:e3:fc:68:20:75:f8:59:e2:75:30:23:67:
c5:c5:ff:5b:72:22:f7:03:fe:08:24:8b:7a:6d:5e:23:35:2f:
39:5a:39:5f:41:a6:99:60:d5:c4:9c:51:95:cb:39:d6:5e:82:
92:89:35:42:9a:8e:49:3a:93:23:72:82:76:48:8f:b9:df:de:
01:7e:01:68:3f:4a:c1:e0:6b:76:c5:e0:39:36:c6:a8:2b:f0:
e3:67:4e:98:10:3b:03:a3:bd:ff:4d:0a:0a:c5:90:6a:e1:ed:
78:26:7a:3f:2d:58:a4:08:bb:57:97:03:7c:f8:94:45:f9:11:
e0:a6:27:98:ab:6d:df:a4:a4:56:e2:ce:97:1d:f1:8d:e4:14:
ce:30:8d:bb:73:90:08:9b:8d:bf:99:ed:18:de:28:b8:5c:b5:
12:da:9e:13:eb:30:9f:8e:a5:5e:52:b0:1b:13:de:2f:f9:70:
83:3d:3b:15
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUcDQemRQW1bWMj5lRHovFO2lR+1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY3Njg4ZmM5OWNmZjE0ZTBkZjc0MjI3MjBlYTg5Y2Ex
NjM3Nzg5OTAeFw0yMzEyMjMwMTI5NDRaFw0yNDEyMjEwMTM0NDRaMDMxMTAvBgNV
BAMTKEZERkJBQzE5M0UzRUIwMjc1MTM1RUM3MzFFQkIxRjY3Q0YwRTNGNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw4kamAogYrwFVrSfUw7Nnh6IV
sV9ytExiBEvIZTG+6qybILbaxYLNQsrtYNl72VxufVQz42KdUyAZKPXsYmeq7M+K
UQfNly/kLaC396KE0LcE6ljNen1sww0+E8UFAGA+RbFgItqjLsxIlJeoKYGArObY
06v4nc4YyLB4hONKse5p+QLsVAy7qumtiwPIqtMR8NPrBWC291pLQku5tiFG4Q5m
yZMf9M4R66Y8aKJTbdGGAn2XrGOSInzYEX9jTh7lokcbQIAwf3Lgi058smZIdixY
h/200ZGi3jD9XXx1lU5JT11teFW8M4dUYvW8anl8o7kFqu1Ewse10UyJbOw9AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU/fusGT4+sCdRNexzHrsfZ88OP0AwHwYDVR0j
BBgwFoAUVnaI/JnP8U4N90InIOqJyhY3eJkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjkyMzUwNTUtMTkwNC00NGI0LTk5OGItZmYxYzllMzEx
YzQ5LzEvNTY3Njg4RkM5OUNGRjE0RTBERjc0MjI3MjBFQTg5Q0ExNjM3Nzg5OS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZuYUlfSm5QOFU0TjkwSW5JT3FKeWhZ
M2VKay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjkyMzUwNTUt
MTkwNC00NGI0LTk5OGItZmYxYzllMzExYzQ5LzEvMzEzNzM2MmUzMTMxMzgyZTMx
MzYzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzEzMTMxMzYzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEArB2oDANBgkqhkiG9w0BAQsFAAOCAQEAWetRkOuzsCSZuuBhwuSC0PIl2Ud1
JMPgj2ufijmSC7/nr/Fk09807l14AIzjOama7P1RYpvVRjMDVH5moCGXU0qEtekf
A3bJkIA/J4MP4/xoIHX4WeJ1MCNnxcX/W3Ii9wP+CCSLem1eIzUvOVo5X0GmmWDV
xJxRlcs51l6Ckok1QpqOSTqTI3KCdkiPud/eAX4BaD9KweBrdsXgOTbGqCvw42dO
mBA7A6O9/00KCsWQauHteCZ6Py1YpAi7V5cDfPiURfkR4KYnmKtt36SkVuLOlx3x
jeQUzjCNu3OQCJuNv5ntGN4ouFy1EtqeE+swn46lXlKwGxPeL/lwgz07FQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org