Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3134312e39382e37322e302f32342d3234203d3e203631333137.roa
File: 3134312e39382e37322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: HPwrCFTXszLUuQDZZKfU9llaiOxYCKu+Vx+kqEIjn/Y=
Subject key identifier: 5E:0F:F6:FB:55:E4:E9:A2:EB:B4:78:B3:74:34:CB:40:C0:0C:F7:06
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 520B629E6E5B53F67DA84898747BF2DA0B1B7B97
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3134312e39382e37322e302f32342d3234203d3e203631333137.roa
Signing time: Sat 29 Apr 2023 09:38:13 +0000
ROA not before: Sat 29 Apr 2023 09:33:13 +0000
ROA not after: Sat 27 Apr 2024 09:38:13 +0000
asID: 61317
IP address blocks: 141.98.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:0b:62:9e:6e:5b:53:f6:7d:a8:48:98:74:7b:f2:da:0b:1b:7b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:33:13 2023 GMT
Not After : Apr 27 09:38:13 2024 GMT
Subject: CN=5E0FF6FB55E4E9A2EBB478B37434CB40C00CF706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a3:d5:9a:76:5f:46:06:32:14:93:76:19:c2:
1e:fe:0f:5b:24:4e:65:2a:8f:38:72:a3:86:26:43:
35:32:45:5d:92:51:c3:77:77:25:e3:f5:08:99:70:
30:98:ac:15:73:7d:ea:af:bb:f7:ba:93:e4:25:86:
74:c1:3e:e0:f6:50:bf:e4:8d:16:a5:a7:60:1e:7f:
71:81:0f:7c:3c:c1:35:9b:ff:25:26:8e:92:05:72:
88:04:e7:11:8d:ff:b8:06:48:0a:19:4a:21:fb:d8:
4e:2e:8e:9d:f2:61:ca:df:80:a4:e9:31:c3:cc:02:
50:bf:6b:58:d9:19:63:7b:f5:e2:91:b7:82:57:4c:
5a:7b:f7:a6:8e:9e:5c:4b:a3:16:cf:12:ee:5f:8e:
63:3d:47:4c:47:2f:60:c9:31:d3:db:75:04:5f:b8:
e2:d9:2d:38:3a:b6:98:f2:93:5a:3a:f8:d3:21:9f:
2e:90:a0:0d:02:57:11:39:35:4b:f8:41:6c:72:18:
ec:62:62:99:e1:83:68:87:3f:eb:b6:5c:b9:08:ff:
a5:ba:1b:dc:1f:af:aa:aa:e0:e2:61:22:f4:1b:9f:
84:32:c1:0c:59:12:02:3f:15:70:e2:06:d1:0e:16:
c2:72:4e:da:44:67:9e:61:24:0b:31:d8:1b:f2:38:
ba:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0F:F6:FB:55:E4:E9:A2:EB:B4:78:B3:74:34:CB:40:C0:0C:F7:06
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3134312e39382e37322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.72.0/24
Signature Algorithm: sha256WithRSAEncryption
80:89:5b:55:b9:26:d0:18:7f:55:f0:33:e6:1f:93:30:d0:50:
c1:90:70:7c:d9:7e:0d:eb:13:0d:eb:bc:e2:4c:52:41:9a:3e:
83:43:0a:ff:56:05:fb:34:66:a8:88:2c:48:23:64:12:fd:83:
ec:50:6a:fb:45:1a:b2:db:cf:35:58:9b:0d:b9:1b:86:52:92:
3c:56:97:3f:f7:5d:03:e2:24:53:00:e2:c8:45:5f:81:45:23:
e6:df:9f:80:ef:45:87:f6:77:6d:8a:3d:e7:3b:ab:d0:08:e0:
a1:ab:2d:69:06:3d:a0:23:e2:3e:5b:d2:d6:dc:67:9d:5f:56:
35:c6:86:73:25:58:3b:bc:c9:ae:54:06:2d:1c:37:fe:ca:34:
ba:8b:e7:0d:0d:16:3b:b2:1c:b0:e6:e8:c2:0e:53:bf:05:d7:
bf:3f:bc:d2:8a:c4:82:10:d4:5f:af:f8:bf:1f:3f:e4:f2:18:
0e:83:57:ed:5e:95:a2:0f:50:eb:51:2c:95:a8:65:91:55:a2:
73:d3:ca:dc:89:46:c4:c7:22:4d:5c:bc:44:81:88:d5:03:be:
ac:4d:43:6c:10:61:39:86:b1:c0:46:4e:da:97:59:5c:2b:2b:
6a:84:cd:86:54:e8:35:de:fd:f4:45:19:e9:95:3a:a0:93:39:
6b:f2:9e:11
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUUgtinm5bU/Z9qEiYdHvy2gsbe5cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY2ZjFhZjllOTE5YTk2NTMyNjgzMjdiOTg4MTRjYWZl
YjVjMGExMzAeFw0yMzA0MjkwOTMzMTNaFw0yNDA0MjcwOTM4MTNaMDMxMTAvBgNV
BAMTKDVFMEZGNkZCNTVFNEU5QTJFQkI0NzhCMzc0MzRDQjQwQzAwQ0Y3MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFo9Wadl9GBjIUk3YZwh7+D1sk
TmUqjzhyo4YmQzUyRV2SUcN3dyXj9QiZcDCYrBVzfeqvu/e6k+QlhnTBPuD2UL/k
jRalp2Aef3GBD3w8wTWb/yUmjpIFcogE5xGN/7gGSAoZSiH72E4ujp3yYcrfgKTp
McPMAlC/a1jZGWN79eKRt4JXTFp796aOnlxLoxbPEu5fjmM9R0xHL2DJMdPbdQRf
uOLZLTg6tpjyk1o6+NMhny6QoA0CVxE5NUv4QWxyGOxiYpnhg2iHP+u2XLkI/6W6
G9wfr6qq4OJhIvQbn4QywQxZEgI/FXDiBtEOFsJyTtpEZ55hJAsx2BvyOLq7AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUXg/2+1Xk6aLrtHizdDTLQMAM9wYwHwYDVR0j
BBgwFoAU328a+ekZqWUyaDJ7mIFMr+tcChMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzAvREY2RjFBRjlFOTE5QTk2NTMyNjgzMjdCOTg4MTRDQUZFQjVDMEExMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyOGEtZWtacVdVeWFESjdtSUZNci10
Y0NoTS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzAvMzEzNDMxMmUzOTM4MmUzNzMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI1i
SDANBgkqhkiG9w0BAQsFAAOCAQEAgIlbVbkm0Bh/VfAz5h+TMNBQwZBwfNl+DesT
Deu84kxSQZo+g0MK/1YF+zRmqIgsSCNkEv2D7FBq+0UastvPNVibDbkbhlKSPFaX
P/ddA+IkUwDiyEVfgUUj5t+fgO9Fh/Z3bYo95zur0AjgoastaQY9oCPiPlvS1txn
nV9WNcaGcyVYO7zJrlQGLRw3/so0uovnDQ0WO7IcsObowg5TvwXXvz+80orEghDU
X6/4vx8/5PIYDoNX7V6Vog9Q61EslahlkVWic9PK3IlGxMciTVy8RIGI1QO+rE1D
bBBhOYaxwEZO2pdZXCsraoTNhlToNd799EUZ6ZU6oJM5a/KeEQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org