Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32342d3234203d3e203233343730.roa
File: 3137362e3131382e3136302e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier: g6aacEfF/twcVpRz/DpuBCmwqjPkV0OsQMwrhxw9eGs=
Subject key identifier: 01:37:31:C0:1B:31:70:AD:AC:94:71:43:A2:D5:54:4A:F5:7F:CB:BA
Certificate issuer: /CN=567688fc99cff14e0df7422720ea89ca16377899
Certificate serial: 0F0DC3053BA0961DC4EEA7DD48296B3F3A4A5F13
Authority key identifier: 56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32342d3234203d3e203233343730.roa
Signing time: Mon 18 Dec 2023 23:47:16 +0000
ROA not before: Mon 18 Dec 2023 23:42:16 +0000
ROA not after: Mon 16 Dec 2024 23:47:16 +0000
asID: 23470
IP address blocks: 176.118.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:0d:c3:05:3b:a0:96:1d:c4:ee:a7:dd:48:29:6b:3f:3a:4a:5f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567688fc99cff14e0df7422720ea89ca16377899
Validity
Not Before: Dec 18 23:42:16 2023 GMT
Not After : Dec 16 23:47:16 2024 GMT
Subject: CN=013731C01B3170ADAC947143A2D5544AF57FCBBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:66:e4:7e:f0:d3:f9:bb:a7:92:00:ae:87:12:
75:aa:6c:2e:fe:57:09:99:15:24:bc:dd:fa:b5:0d:
06:08:ea:02:35:88:16:89:48:4e:6d:9f:0f:01:f7:
b0:73:9f:05:4c:2a:69:b5:df:92:98:03:2a:90:26:
45:36:b1:1c:80:8d:c4:8b:98:37:e9:7d:60:1d:14:
d8:b8:9e:fb:91:1f:25:28:db:87:fb:0b:37:78:f4:
6c:6e:bf:f2:fb:68:a3:26:12:23:ab:2e:ae:79:8e:
13:fa:f5:73:74:62:4e:fc:37:d8:71:2c:ba:e8:8e:
1a:30:22:13:4f:52:af:c8:f8:3d:bc:c9:73:38:19:
71:52:b4:c4:ff:66:d7:76:6e:65:02:19:21:2c:5a:
f2:e4:d6:1c:11:1d:60:f2:b1:f7:99:f7:33:96:90:
9d:05:d1:c1:b1:4e:ea:74:90:3c:8d:8f:24:65:a9:
5d:0c:90:a0:39:70:84:96:98:58:56:73:62:9a:3e:
f8:43:be:e3:03:ea:ba:c2:14:b4:4b:1c:a5:b1:dc:
dc:09:58:ac:bd:f9:8b:b0:30:a7:73:53:51:d4:39:
4e:e5:ad:8b:6d:9e:77:28:ae:94:01:5f:10:28:fd:
a1:98:8c:29:76:41:5b:48:c5:1b:bf:4f:6c:6d:03:
d8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:37:31:C0:1B:31:70:AD:AC:94:71:43:A2:D5:54:4A:F5:7F:CB:BA
X509v3 Authority Key Identifier:
keyid:56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136302e302f32342d3234203d3e203233343730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.160.0/24
Signature Algorithm: sha256WithRSAEncryption
71:50:6f:07:2f:6e:0c:95:cf:b8:c0:84:52:bd:4c:88:71:38:
8d:f8:16:c3:cf:12:2b:23:b9:8b:e6:96:2f:a1:ef:5c:dc:32:
17:3e:c1:01:76:61:80:e2:4a:b8:4e:a8:2d:31:55:40:ef:36:
d0:1b:d1:78:97:bf:f8:3b:db:5f:a3:18:e4:9d:16:f5:bb:bd:
96:b0:51:ec:88:32:f3:9d:0b:16:c0:f0:74:8c:fd:13:3a:85:
b9:01:1c:59:46:37:e2:cc:04:d8:15:59:44:1a:eb:aa:5c:c4:
72:96:5a:75:d4:10:d2:2f:08:7a:82:bd:c4:48:38:8d:4f:c0:
a7:9c:da:5f:70:c2:87:18:44:98:56:30:4f:c1:0f:34:a3:3d:
d0:2b:29:4e:ae:64:2a:eb:42:37:a8:09:1b:85:39:c0:e7:e9:
d8:2d:e8:fa:6e:55:c5:e7:5a:94:42:04:da:22:5d:3e:ba:0d:
a2:f0:3b:e6:4d:fb:c3:46:64:15:af:10:50:d1:d1:b2:65:57:
da:9f:40:f9:b1:fc:95:ce:3b:8b:29:8c:8e:7a:35:91:fb:2f:
91:01:42:07:78:f3:ae:bb:3a:08:cf:91:74:8b:44:59:6b:b7:
e1:bc:9f:ec:51:20:9f:d9:8c:af:cd:24:09:e9:ff:40:30:4c:
52:67:4d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:45 2025 by rpki-client