Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136312e302f32342d3234203d3e203534323532.roa
File: 3137362e3131382e3136312e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier: DYDz3zWX9t/8avoQri0DzxBxBf085B0s7mECq/SKcJk=
Subject key identifier: E4:55:F6:65:5B:63:7C:8B:97:DA:38:96:02:9E:01:68:8A:23:CA:57
Certificate issuer: /CN=567688fc99cff14e0df7422720ea89ca16377899
Certificate serial: 1CF4FEDC3FB4841310FE668B7C953218C2D5822B
Authority key identifier: 56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136312e302f32342d3234203d3e203534323532.roa
Signing time: Mon 18 Dec 2023 00:28:34 +0000
ROA not before: Mon 18 Dec 2023 00:23:34 +0000
ROA not after: Mon 16 Dec 2024 00:28:34 +0000
asID: 54252
IP address blocks: 176.118.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:f4:fe:dc:3f:b4:84:13:10:fe:66:8b:7c:95:32:18:c2:d5:82:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567688fc99cff14e0df7422720ea89ca16377899
Validity
Not Before: Dec 18 00:23:34 2023 GMT
Not After : Dec 16 00:28:34 2024 GMT
Subject: CN=E455F6655B637C8B97DA3896029E01688A23CA57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0d:c2:fc:e8:b0:73:fc:13:3a:07:2a:35:03:
7d:7c:be:27:79:7b:4b:23:1d:70:93:6f:e0:b8:0a:
41:a6:a9:6f:bb:c6:96:5c:1e:8c:96:4d:97:34:e6:
8d:08:2d:93:59:ea:9e:fc:db:2f:d9:2e:63:79:3a:
9c:d2:87:5f:fd:37:ef:85:ba:88:2f:65:96:f6:95:
04:40:71:7a:ca:b8:b0:a3:01:1c:2f:1a:4e:bf:e5:
22:94:0e:48:50:94:15:1c:8e:33:fc:40:31:73:be:
0c:e3:d7:5a:7a:9f:f0:7d:13:84:c5:22:32:f2:23:
88:f2:f3:3f:a5:62:ca:fd:12:a7:d0:65:6b:3e:32:
7b:3e:2e:f8:1f:13:48:3b:ae:15:fc:db:f1:d3:16:
57:60:03:9b:d4:d4:15:4c:a9:8f:cf:a8:da:8c:cd:
6f:18:02:e0:f9:1c:ad:80:c0:39:b1:4f:61:bb:11:
67:f8:0f:da:fa:85:ed:16:a3:22:30:c8:bc:cf:77:
49:cb:21:d8:db:be:01:37:77:01:29:bb:ed:63:61:
c8:88:2e:1e:e3:ad:91:0b:fc:19:72:02:c5:6e:37:
e0:9a:04:b1:7b:e7:53:a6:cb:2b:ca:92:ca:f6:4a:
24:a7:98:ef:8f:f5:04:ce:bd:6e:ef:0a:86:7d:cd:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:55:F6:65:5B:63:7C:8B:97:DA:38:96:02:9E:01:68:8A:23:CA:57
X509v3 Authority Key Identifier:
keyid:56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/3137362e3131382e3136312e302f32342d3234203d3e203534323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.161.0/24
Signature Algorithm: sha256WithRSAEncryption
41:53:0e:bc:50:0d:b3:be:89:28:e2:1e:72:82:91:51:c2:1f:
35:20:bf:de:b9:01:59:62:fa:ee:b7:ef:82:a9:1a:02:ab:5c:
b2:b6:ba:ea:08:33:78:ec:3a:e7:ed:c0:a0:64:91:07:99:6e:
72:77:5d:c8:f8:2c:fd:66:75:41:7c:38:83:a3:31:64:1d:0e:
76:83:90:40:4a:ab:e7:9e:c0:d4:3e:72:be:f8:6d:95:f4:44:
63:26:b6:2a:a6:cb:05:22:40:80:84:4b:d5:ff:e7:ff:94:b5:
89:17:61:22:2c:b8:3c:43:20:3c:1a:57:2f:cf:ce:cb:25:e3:
04:bf:36:82:56:28:f1:b9:a8:9c:c0:c7:90:2f:67:c0:6d:dd:
e8:ca:f1:9d:94:7b:e2:b0:32:50:e4:ff:bd:e2:02:39:b0:01:
9c:47:97:52:9f:ac:e9:1f:86:36:16:e5:15:ae:61:80:9f:0b:
5e:f6:9e:2f:e2:ca:e8:ca:86:0e:fb:75:15:93:b4:82:99:98:
71:f1:ca:08:55:0f:85:b6:23:ac:30:3c:b9:a4:8e:19:85:01:
b8:90:1f:71:bd:44:ce:86:b9:fd:8b:61:2d:17:9e:b9:50:08:
85:93:8c:c1:ce:c1:4d:17:7d:77:38:4c:c3:07:f7:b3:96:25:
78:d7:f5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org