Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/3134362e3234372e35312e302f32342d3234203d3e203234383531.roa
File: 3134362e3234372e35312e302f32342d3234203d3e203234383531.roa (raw, json)
Hash identifier: qVGlkZ7hrPyhFHW6Pk3AKeL0loldjGzxcUC7En9AQVI=
Subject key identifier: 1B:C9:15:4A:52:86:E9:58:A7:84:ED:BB:D7:16:6E:9D:8B:44:78:08
Certificate issuer: /CN=e903858f0abab52add2a8fca3f14998a35291a7a
Certificate serial: 0E928A8437D9533C3301CC0E1581A0E46FA25E4E
Authority key identifier: E9:03:85:8F:0A:BA:B5:2A:DD:2A:8F:CA:3F:14:99:8A:35:29:1A:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOFjwq6tSrdKo_KPxSZijUpGno.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/3134362e3234372e35312e302f32342d3234203d3e203234383531.roa
Signing time: Mon 23 Jan 2023 11:27:07 +0000
ROA not before: Mon 23 Jan 2023 11:22:07 +0000
ROA not after: Mon 22 Jan 2024 11:27:07 +0000
asID: 24851
IP address blocks: 146.247.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:92:8a:84:37:d9:53:3c:33:01:cc:0e:15:81:a0:e4:6f:a2:5e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e903858f0abab52add2a8fca3f14998a35291a7a
Validity
Not Before: Jan 23 11:22:07 2023 GMT
Not After : Jan 22 11:27:07 2024 GMT
Subject: CN=1BC9154A5286E958A784EDBBD7166E9D8B447808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:63:b3:43:6a:2f:68:5b:54:0a:76:03:00:9f:
8c:87:2d:e4:cc:7c:23:d2:d5:75:4e:d8:04:c9:a8:
b9:b8:d5:bc:7d:f8:e7:b9:96:31:d6:ce:6b:58:65:
9c:06:ec:2a:1d:a7:72:21:40:6f:23:a9:a6:80:5e:
ac:48:46:f0:dc:ae:e0:55:5c:6a:dd:09:19:7e:0c:
fc:2a:34:92:f7:ff:6b:96:eb:c5:28:02:0e:45:c2:
6e:b5:29:05:00:9a:d2:eb:62:c4:98:5d:98:9a:58:
aa:a0:97:9e:be:cb:e5:61:35:d6:d5:6d:7a:1d:b5:
3e:53:4f:cc:7a:47:ca:91:39:81:40:7d:e0:ba:b4:
5e:67:6c:18:c4:ee:66:77:4d:7d:c0:3a:0b:53:ff:
de:16:31:42:2c:37:c7:16:31:0e:96:72:80:3f:6f:
f8:de:07:03:8d:80:20:cb:f9:88:98:b9:c4:25:bc:
fa:5f:e2:9a:2f:d5:9f:c5:f9:f6:49:94:f4:96:af:
70:35:e5:0b:3b:db:02:ab:88:80:1d:e8:d5:78:32:
4c:6e:b7:ce:9c:e9:db:87:6f:00:6d:a3:c7:16:12:
a8:aa:90:db:d6:08:8a:de:ff:14:73:aa:9a:ce:2a:
4c:f0:10:86:11:8c:e3:3c:ee:bb:7e:7d:d0:22:b2:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C9:15:4A:52:86:E9:58:A7:84:ED:BB:D7:16:6E:9D:8B:44:78:08
X509v3 Authority Key Identifier:
keyid:E9:03:85:8F:0A:BA:B5:2A:DD:2A:8F:CA:3F:14:99:8A:35:29:1A:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/E903858F0ABAB52ADD2A8FCA3F14998A35291A7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOFjwq6tSrdKo_KPxSZijUpGno.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/3134362e3234372e35312e302f32342d3234203d3e203234383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.51.0/24
Signature Algorithm: sha256WithRSAEncryption
71:8d:81:37:a0:66:ff:21:8c:05:a8:55:a8:f2:7c:be:33:ed:
d3:93:45:23:fc:f9:ef:4e:ac:58:55:a9:67:8c:2f:2a:46:1c:
cf:92:64:16:77:5a:74:a2:01:6c:ed:38:21:d6:33:09:ab:38:
7f:57:5e:9a:39:17:72:63:ad:e5:8d:f7:8f:ee:b8:72:11:94:
43:bc:a4:96:b8:bc:08:4b:36:7a:bd:e0:31:41:c3:5e:f6:44:
41:36:38:f7:a0:9b:83:26:af:5f:9f:55:f9:ce:0c:e6:13:86:
a6:19:0e:1c:5c:c9:98:c3:da:75:f0:08:5d:3d:98:48:ea:72:
3f:11:1f:86:93:6b:a2:77:55:7f:db:be:5a:3e:2b:cc:41:5c:
d0:3b:dd:ae:f9:bd:58:86:17:07:53:03:49:bf:39:94:8e:8a:
cd:1f:d8:ee:99:97:7d:a6:02:81:e1:4f:c9:b8:9b:c9:27:9b:
5e:49:ae:41:77:47:ea:76:0c:de:f5:7d:70:37:c9:0c:f9:e8:
33:aa:db:6e:e7:44:71:97:98:f1:6a:43:c9:7a:66:07:0c:4f:
16:90:84:93:12:a9:ae:6a:bc:9e:73:4d:f0:91:62:9d:d9:23:
b5:2f:87:a1:83:ad:a9:86:84:aa:c3:f8:75:d6:e2:c6:f1:cf:
79:d0:37:16
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUDpKKhDfZUzwzAcwOFYGg5G+iXk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTkwMzg1OGYwYWJhYjUyYWRkMmE4ZmNhM2YxNDk5OGEz
NTI5MWE3YTAeFw0yMzAxMjMxMTIyMDdaFw0yNDAxMjIxMTI3MDdaMDMxMTAvBgNV
BAMTKDFCQzkxNTRBNTI4NkU5NThBNzg0RURCQkQ3MTY2RTlEOEI0NDc4MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeY7NDai9oW1QKdgMAn4yHLeTM
fCPS1XVO2ATJqLm41bx9+Oe5ljHWzmtYZZwG7Codp3IhQG8jqaaAXqxIRvDcruBV
XGrdCRl+DPwqNJL3/2uW68UoAg5Fwm61KQUAmtLrYsSYXZiaWKqgl56+y+VhNdbV
bXodtT5TT8x6R8qROYFAfeC6tF5nbBjE7mZ3TX3AOgtT/94WMUIsN8cWMQ6WcoA/
b/jeBwONgCDL+YiYucQlvPpf4pov1Z/F+fZJlPSWr3A15Qs72wKriIAd6NV4Mkxu
t86c6duHbwBto8cWEqiqkNvWCIre/xRzqprOKkzwEIYRjOM87rt+fdAisnQrAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUG8kVSlKG6VinhO271xZunYtEeAgwHwYDVR0j
BBgwFoAU6QOFjwq6tSrdKo/KPxSZijUpGnowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1
NWM1LzAvRTkwMzg1OEYwQUJBQjUyQUREMkE4RkNBM0YxNDk5OEEzNTI5MUE3QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZRT0Zqd3E2dFNyZEtvX0tQeFNaaWpV
cEduby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYt
OTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1NWM1LzAvMzEzNDM2MmUzMjM0MzcyZTM1
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM0MzgzNTMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
kvczMA0GCSqGSIb3DQEBCwUAA4IBAQBxjYE3oGb/IYwFqFWo8ny+M+3Tk0Uj/Pnv
TqxYValnjC8qRhzPkmQWd1p0ogFs7Tgh1jMJqzh/V16aORdyY63ljfeP7rhyEZRD
vKSWuLwISzZ6veAxQcNe9kRBNjj3oJuDJq9fn1X5zgzmE4amGQ4cXMmYw9p18Ahd
PZhI6nI/ER+Gk2uid1V/275aPivMQVzQO92u+b1YhhcHUwNJvzmUjorNH9jumZd9
pgKB4U/JuJvJJ5teSa5Bd0fqdgze9X1wN8kM+egzqttu50Rxl5jxakPJemYHDE8W
kISTEqmuaryec03wkWKd2SO1L4ehg62phoSqw/h11uLG8c950DcW
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:10 2023 by rpki-client on console.sobornost.net