Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/3134362e3234372e35382e302f32342d3234203d3e20323131393336.roa
File: 3134362e3234372e35382e302f32342d3234203d3e20323131393336.roa (raw, json)
Hash identifier: B8YcePmFIvdmQsi93QGKeulGYVduWSOpwMJypMNUccI=
Subject key identifier: 06:EB:5B:A1:73:25:EC:40:45:74:98:83:33:64:79:5A:A2:5B:4F:FF
Certificate issuer: /CN=e903858f0abab52add2a8fca3f14998a35291a7a
Certificate serial: 5D222BAB949228F1ED80DAAD7BD1C48F2FD85D29
Authority key identifier: E9:03:85:8F:0A:BA:B5:2A:DD:2A:8F:CA:3F:14:99:8A:35:29:1A:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOFjwq6tSrdKo_KPxSZijUpGno.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/3134362e3234372e35382e302f32342d3234203d3e20323131393336.roa
Signing time: Mon 23 Jan 2023 11:27:34 +0000
ROA not before: Mon 23 Jan 2023 11:22:34 +0000
ROA not after: Mon 22 Jan 2024 11:27:34 +0000
asID: 211936
IP address blocks: 146.247.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:22:2b:ab:94:92:28:f1:ed:80:da:ad:7b:d1:c4:8f:2f:d8:5d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e903858f0abab52add2a8fca3f14998a35291a7a
Validity
Not Before: Jan 23 11:22:34 2023 GMT
Not After : Jan 22 11:27:34 2024 GMT
Subject: CN=06EB5BA17325EC40457498833364795AA25B4FFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:71:25:c7:66:4d:4e:6d:29:3c:ab:db:6b:92:
8f:35:12:c8:7e:4b:50:79:90:d2:c6:17:0b:25:d3:
c3:85:d5:18:bf:1f:34:f1:18:2a:f6:2e:58:3b:ae:
17:48:1a:85:fb:cf:6e:40:3c:85:32:6f:f2:53:79:
fb:0b:17:0a:83:3f:f3:12:a2:93:da:c9:14:19:0f:
14:08:6e:82:53:3a:28:62:41:99:f7:c5:95:58:c6:
49:72:ec:25:32:77:65:e9:b6:12:db:d1:7d:a3:20:
5c:06:14:01:3a:8a:7a:c6:5a:cc:71:e3:86:83:8f:
89:e0:0c:28:33:86:3b:38:38:9c:43:94:e2:05:33:
bb:9e:84:4f:12:97:03:03:68:a1:54:2d:76:6d:d9:
39:12:d0:2c:8f:cf:2d:87:b1:33:e2:4d:e4:3a:59:
ae:24:9a:4d:02:6e:d6:e9:c7:29:38:bb:84:fc:92:
64:46:89:c0:2d:c8:fe:d5:1f:56:6a:49:c3:41:3d:
8a:f9:47:7c:2e:43:f6:0e:b9:aa:3a:9c:e4:dd:65:
6a:0a:5c:bf:9d:72:50:18:fb:0b:af:2a:6c:4a:4d:
d6:04:45:7c:1d:ca:01:0b:c4:7c:e3:f8:91:91:27:
dd:2c:a7:0f:f9:44:6c:93:6a:47:58:6a:86:0d:93:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EB:5B:A1:73:25:EC:40:45:74:98:83:33:64:79:5A:A2:5B:4F:FF
X509v3 Authority Key Identifier:
keyid:E9:03:85:8F:0A:BA:B5:2A:DD:2A:8F:CA:3F:14:99:8A:35:29:1A:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/E903858F0ABAB52ADD2A8FCA3F14998A35291A7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOFjwq6tSrdKo_KPxSZijUpGno.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/3134362e3234372e35382e302f32342d3234203d3e20323131393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.58.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:4f:a4:7f:87:3e:cc:82:a5:b9:d7:4b:34:5c:46:0e:a8:dc:
f0:8b:f8:77:3f:05:6b:09:65:c0:36:2f:c5:b8:2e:a1:fc:23:
d4:9c:dc:8a:25:1b:b3:03:25:91:9b:71:42:14:0e:ef:86:e4:
32:ed:a3:60:46:9e:d8:58:75:da:58:79:3d:96:8d:94:c9:97:
2d:e3:a1:77:31:dc:fa:21:99:29:0b:3e:e2:96:00:6f:2b:dd:
d9:f5:6c:71:c2:d4:dd:c7:80:a5:53:fa:1a:31:08:c9:ce:51:
a5:d6:36:32:7d:24:4f:45:8e:41:f0:21:32:a5:6b:84:15:6b:
df:a5:c2:f0:12:78:02:18:3a:4e:92:3f:f7:56:12:96:fb:3d:
b4:6a:8f:aa:84:6f:c8:6f:05:cb:54:c5:8e:09:09:a7:ab:ee:
39:2d:56:c5:93:21:6b:d4:e0:f3:fc:46:a4:9f:fb:d1:c3:f0:
97:45:a4:21:36:76:6b:73:44:0c:27:26:71:42:9e:41:a0:c6:
7a:b3:d4:72:c7:8e:f7:78:da:59:bd:36:f3:ae:81:95:62:34:
ef:3a:ba:2c:40:2b:24:2d:41:27:19:d2:3a:a9:1f:9b:03:12:
67:b5:0c:89:41:8c:58:ac:ab:f9:b9:f2:21:8a:44:e2:d6:73:
65:33:62:58
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUXSIrq5SSKPHtgNqte9HEjy/YXSkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTkwMzg1OGYwYWJhYjUyYWRkMmE4ZmNhM2YxNDk5OGEz
NTI5MWE3YTAeFw0yMzAxMjMxMTIyMzRaFw0yNDAxMjIxMTI3MzRaMDMxMTAvBgNV
BAMTKDA2RUI1QkExNzMyNUVDNDA0NTc0OTg4MzMzNjQ3OTVBQTI1QjRGRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5cSXHZk1ObSk8q9trko81Esh+
S1B5kNLGFwsl08OF1Ri/HzTxGCr2Llg7rhdIGoX7z25APIUyb/JTefsLFwqDP/MS
opPayRQZDxQIboJTOihiQZn3xZVYxkly7CUyd2XpthLb0X2jIFwGFAE6inrGWsxx
44aDj4ngDCgzhjs4OJxDlOIFM7uehE8SlwMDaKFULXZt2TkS0CyPzy2HsTPiTeQ6
Wa4kmk0Cbtbpxyk4u4T8kmRGicAtyP7VH1ZqScNBPYr5R3wuQ/YOuao6nOTdZWoK
XL+dclAY+wuvKmxKTdYERXwdygELxHzj+JGRJ90spw/5RGyTakdYaoYNkzeTAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUButboXMl7EBFdJiDM2R5WqJbT/8wHwYDVR0j
BBgwFoAU6QOFjwq6tSrdKo/KPxSZijUpGnowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1
NWM1LzAvRTkwMzg1OEYwQUJBQjUyQUREMkE4RkNBM0YxNDk5OEEzNTI5MUE3QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZRT0Zqd3E2dFNyZEtvX0tQeFNaaWpV
cEduby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYt
OTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1NWM1LzAvMzEzNDM2MmUzMjM0MzcyZTM1
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzEzOTMzMzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACS9zowDQYJKoZIhvcNAQELBQADggEBADtPpH+HPsyCpbnXSzRcRg6o3PCL+Hc/
BWsJZcA2L8W4LqH8I9Sc3IolG7MDJZGbcUIUDu+G5DLto2BGnthYddpYeT2WjZTJ
ly3joXcx3PohmSkLPuKWAG8r3dn1bHHC1N3HgKVT+hoxCMnOUaXWNjJ9JE9FjkHw
ITKla4QVa9+lwvASeAIYOk6SP/dWEpb7PbRqj6qEb8hvBctUxY4JCaer7jktVsWT
IWvU4PP8RqSf+9HD8JdFpCE2dmtzRAwnJnFCnkGgxnqz1HLHjvd42lm9NvOugZVi
NO86uixAKyQtQScZ0jqpH5sDEme1DIlBjFisq/m58iGKROLWc2UzYlg=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:10 2023 by rpki-client on console.sobornost.net