Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32342d3234203d3e203233343730.roa
File: 3137362e3131382e3136302e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: qQ4ZwS6IplmBPdiempQdl9/TDMFQW/BO9gkAPLA1Eho=
Subject key identifier: E1:3C:BC:28:33:E9:DD:B9:74:05:5A:A7:23:33:AB:30:3F:B0:10:63
Certificate issuer: /CN=567688fc99cff14e0df7422720ea89ca16377899
Certificate serial: 565E1A8BC0726255CDE66E5BA890B58F6FE94120
Authority key identifier: 56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32342d3234203d3e203233343730.roa
Signing time: Mon 18 Dec 2023 00:28:29 +0000
ROA not before: Mon 18 Dec 2023 00:23:29 +0000
ROA not after: Mon 16 Dec 2024 00:28:29 +0000
asID: 23470
IP address blocks: 176.118.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:5e:1a:8b:c0:72:62:55:cd:e6:6e:5b:a8:90:b5:8f:6f:e9:41:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567688fc99cff14e0df7422720ea89ca16377899
Validity
Not Before: Dec 18 00:23:29 2023 GMT
Not After : Dec 16 00:28:29 2024 GMT
Subject: CN=E13CBC2833E9DDB974055AA72333AB303FB01063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:21:21:3f:0d:8e:44:f3:eb:3f:4a:3f:1d:
77:e4:a8:a2:e2:1c:a7:94:a6:cd:ec:44:af:ef:26:
61:34:ed:ba:0c:ec:16:c3:fb:11:c3:db:c4:13:6c:
5c:89:53:65:01:91:82:ec:75:8d:7b:00:4d:ee:36:
3f:a9:b8:ab:03:1f:6a:e2:c1:eb:31:00:31:61:f4:
99:6a:5b:a5:23:de:df:8d:f2:f5:6a:30:ec:3a:50:
65:35:42:bf:26:94:54:2a:8f:4f:ea:2b:c0:d3:54:
49:77:1a:34:83:42:87:67:ab:c3:ba:23:22:65:4c:
cb:5b:5f:10:22:da:58:18:f2:69:c5:c3:66:31:fd:
9b:d1:d6:8e:ea:d2:33:b5:fe:a5:ec:ea:57:02:84:
1b:67:67:a8:df:f6:d4:e8:58:65:4b:ca:6f:20:e5:
34:35:6f:cb:e0:b8:fc:08:2b:96:48:c2:b4:e4:8c:
0d:51:1c:4f:b3:6f:ba:2e:1a:c9:1f:d7:18:58:ff:
e8:d3:1b:89:60:ff:fd:19:2a:b7:14:85:60:e2:03:
e7:a0:1c:53:be:5e:23:23:3c:d3:d2:17:c4:97:37:
45:e4:14:43:bf:bb:ef:1b:8f:01:5d:84:17:0d:25:
88:ed:90:8d:d0:cb:7c:a9:d6:3b:77:f6:77:14:02:
34:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3C:BC:28:33:E9:DD:B9:74:05:5A:A7:23:33:AB:30:3F:B0:10:63
X509v3 Authority Key Identifier:
keyid:56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.160.0/24
Signature Algorithm: sha256WithRSAEncryption
65:5d:fa:d7:be:27:7f:42:f9:40:f6:a6:43:d1:0f:92:41:ce:
f9:bb:e0:8c:ae:59:75:81:bf:2c:5c:5e:f6:0f:33:e3:1c:90:
03:3e:1a:eb:96:69:e1:24:62:47:14:e5:70:38:62:99:b6:6d:
d0:b5:07:a6:5e:12:73:48:57:f5:77:ec:e7:64:65:be:11:00:
a3:36:fa:68:29:f0:d8:6d:68:21:87:61:62:c3:ea:fe:e8:c0:
69:9d:95:97:fc:f5:f2:70:ce:28:b6:20:17:00:fc:e1:3e:1d:
1b:ae:90:c3:0a:42:f2:35:a5:11:4c:70:d5:f3:bb:aa:2f:f8:
e5:0e:a9:ec:02:cc:c6:26:2d:c8:79:4d:72:77:ed:e2:26:0f:
1f:45:3f:29:c1:1d:f4:bb:74:86:8d:0c:e6:18:c6:e3:c6:2a:
83:fe:7b:25:62:b5:ca:02:5e:44:2d:68:b2:1a:86:a0:76:7e:
87:07:3b:76:9f:1b:2f:36:ee:f5:29:bc:90:27:4c:40:9b:c1:
3e:c6:78:1f:b3:fc:5d:00:ee:eb:50:48:20:32:de:94:ba:ec:
85:66:58:95:fc:01:98:da:f7:6d:e1:bc:ff:20:80:32:4d:d1:
f4:3d:7b:6d:66:91:8c:3f:d9:17:39:ce:75:0b:b0:ea:31:4e:
e3:3f:30:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org