Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/224/3137362e39372e3230362e302f32342d3234203d3e20313336373837.roa
File: 3137362e39372e3230362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Xw3PjbTZBGhlTwh2XRFCjhx47OoYE3ghOpOT1CF18Vs=
Subject key identifier: FD:70:72:C5:BD:39:68:F7:0D:BB:23:0A:99:10:77:8D:96:90:94:79
Certificate issuer: /CN=0cd16d92ea6e2659abc97a5dad0b199625cccd3e
Certificate serial: 7047F87D0B9210E060D8A576748059B3E47F63DD
Authority key identifier: 0C:D1:6D:92:EA:6E:26:59:AB:C9:7A:5D:AD:0B:19:96:25:CC:CD:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNFtkupuJlmryXpdrQsZliXMzT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/224/3137362e39372e3230362e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 01 May 2023 14:29:44 +0000
ROA not before: Mon 01 May 2023 14:24:44 +0000
ROA not after: Mon 29 Apr 2024 14:29:44 +0000
asID: 136787
IP address blocks: 176.97.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:47:f8:7d:0b:92:10:e0:60:d8:a5:76:74:80:59:b3:e4:7f:63:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd16d92ea6e2659abc97a5dad0b199625cccd3e
Validity
Not Before: May 1 14:24:44 2023 GMT
Not After : Apr 29 14:29:44 2024 GMT
Subject: CN=FD7072C5BD3968F70DBB230A9910778D96909479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:a5:66:d4:7f:e2:10:8a:a6:70:6e:b5:e6:
df:51:e0:06:83:14:fa:3f:96:f2:09:52:bc:6a:79:
b3:76:28:96:8b:b8:ae:63:e7:0e:d0:38:92:bb:a7:
ff:c9:c8:42:2e:f2:dc:31:40:f5:00:ee:bf:5e:10:
27:cd:3e:27:46:e6:d6:de:ee:f3:94:56:c4:10:23:
e4:f9:d8:54:dd:0a:67:c9:6c:e8:be:b1:f6:d4:f7:
1a:a1:a6:74:fa:b7:05:1e:f2:29:30:1a:8c:f8:66:
c9:d3:b5:12:c7:6e:3a:a7:84:06:cd:a1:b4:66:f8:
cb:89:e6:7f:60:7c:89:ba:a5:25:a7:e7:38:9c:a3:
2f:68:4a:03:29:bf:5b:c4:61:aa:8e:62:8c:f5:55:
94:2d:30:b2:b1:2f:27:c6:58:77:58:36:07:8b:d7:
6d:e3:23:d9:37:a4:4c:5f:1f:56:9b:01:5b:e4:91:
f5:13:de:90:37:81:1a:2e:53:ac:7b:2a:32:f1:b5:
d3:ec:57:b8:c0:42:a9:3a:37:86:db:67:7f:50:4e:
f5:dc:e6:59:51:11:1d:85:08:8b:6c:44:c5:26:97:
a6:a3:ec:18:2a:9b:e1:f8:09:bf:55:cf:7e:2d:ce:
01:b0:39:20:3d:41:31:05:25:18:f9:ca:ca:c0:8b:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:70:72:C5:BD:39:68:F7:0D:BB:23:0A:99:10:77:8D:96:90:94:79
X509v3 Authority Key Identifier:
keyid:0C:D1:6D:92:EA:6E:26:59:AB:C9:7A:5D:AD:0B:19:96:25:CC:CD:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/224/0CD16D92EA6E2659ABC97A5DAD0B199625CCCD3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNFtkupuJlmryXpdrQsZliXMzT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/224/3137362e39372e3230362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.206.0/24
Signature Algorithm: sha256WithRSAEncryption
99:39:2c:f1:d5:ea:9f:eb:dd:5f:82:ad:35:ed:5c:44:49:af:
6b:68:61:66:68:7e:61:45:c6:8e:07:1d:29:eb:0d:08:af:c5:
90:45:8a:b3:d8:cf:e0:15:15:e8:97:a4:c9:f9:9d:bb:6f:da:
a4:ca:b1:77:ec:6f:d6:c4:13:69:21:52:cd:fa:48:f6:bc:fc:
e8:2d:71:8b:cf:77:41:dc:b0:a2:4f:00:9f:18:dd:0a:4e:27:
b7:b8:18:d0:5d:34:9a:44:01:32:fe:94:5d:66:28:cd:1f:de:
5f:18:0b:8e:ae:62:4a:af:c6:39:b5:fb:f2:0c:33:ad:79:f6:
46:1e:51:d9:2c:b8:42:ce:8c:3c:66:8b:f0:c3:bb:ca:52:7a:
da:09:e5:6a:c7:03:4c:c2:5d:16:ce:5b:1d:1d:42:2d:22:8e:
dd:88:44:53:3a:dc:55:99:48:28:3a:3b:57:52:63:3a:53:76:
c5:1e:f7:72:6c:7f:cc:9e:a7:57:2b:2e:62:10:e9:ee:a5:14:
c9:9b:bc:2b:38:88:50:0b:57:8b:52:4e:51:a0:23:df:5e:96:
86:20:37:9c:43:f2:d5:88:47:8f:51:ab:51:b0:45:1e:ac:24:
91:6d:0e:b1:2c:73:73:29:f0:36:2e:cc:1c:9e:01:d6:bd:fd:
f4:8e:38:9a
-----BEGIN CERTIFICATE-----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==
Generated at Wed Dec 27 16:05:48 2023 by rpki-client on console-ams.rpki-client.org