Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/3134362e3234372e35382e302f32342d3234203d3e2033333230.roa
File: 3134362e3234372e35382e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier: EwW1JUD5TULcqzIX/rwhR5Une3E4++bJXy/Zu7ugXnw=
Subject key identifier: 11:92:BE:4C:F8:55:64:10:D9:02:08:F2:51:89:A9:5A:DF:55:33:27
Certificate issuer: /CN=e903858f0abab52add2a8fca3f14998a35291a7a
Certificate serial: 080067DE7FD75763C6E1BA2A1D029424967BC4E9
Authority key identifier: E9:03:85:8F:0A:BA:B5:2A:DD:2A:8F:CA:3F:14:99:8A:35:29:1A:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOFjwq6tSrdKo_KPxSZijUpGno.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/3134362e3234372e35382e302f32342d3234203d3e2033333230.roa
Signing time: Mon 23 Jan 2023 11:27:22 +0000
ROA not before: Mon 23 Jan 2023 11:22:22 +0000
ROA not after: Mon 22 Jan 2024 11:27:22 +0000
asID: 3320
IP address blocks: 146.247.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:00:67:de:7f:d7:57:63:c6:e1:ba:2a:1d:02:94:24:96:7b:c4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e903858f0abab52add2a8fca3f14998a35291a7a
Validity
Not Before: Jan 23 11:22:22 2023 GMT
Not After : Jan 22 11:27:22 2024 GMT
Subject: CN=1192BE4CF8556410D90208F25189A95ADF553327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:6a:5c:ba:f1:6e:6a:07:9e:e6:61:bb:e9:
8b:dc:25:53:74:8e:0d:37:41:68:f2:01:1b:ed:d5:
6c:2a:b4:0c:00:8d:17:73:88:ff:83:d7:f3:1f:d6:
de:d9:27:e3:13:ee:d2:57:88:8e:a3:37:de:4b:1c:
64:ba:2f:ae:fa:4c:21:d3:39:bc:93:b9:6a:2d:d1:
63:f9:59:e7:ff:33:ff:d9:77:09:6e:26:b3:dc:4c:
5a:58:2a:56:5c:87:4a:5b:8a:ae:2a:6c:2d:d9:c0:
e6:f9:fe:64:45:17:95:50:1b:bd:8a:1b:4c:34:51:
fb:f5:c0:20:7a:d1:45:42:86:66:d7:f2:e2:57:91:
90:47:dd:a9:6f:70:ca:cb:02:a5:b9:59:ee:33:8d:
3e:2f:8d:7f:4e:dc:74:34:b5:0c:5c:ab:58:7b:03:
e0:1d:ca:3e:66:c5:84:9f:f0:68:5e:e6:ee:cd:6d:
a9:d2:b6:e9:37:d2:0a:b3:13:46:e9:2f:88:c2:e7:
0a:cb:49:7b:e3:fd:56:b0:0c:aa:21:6c:90:bf:b9:
bc:7c:55:04:b3:10:20:59:bd:29:06:0b:36:06:f0:
a2:fa:a0:b1:88:e7:da:3a:cf:6e:ab:a0:ec:b9:cc:
79:3d:bc:4b:7e:10:be:ae:85:e0:ac:1d:4f:8b:cf:
77:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:92:BE:4C:F8:55:64:10:D9:02:08:F2:51:89:A9:5A:DF:55:33:27
X509v3 Authority Key Identifier:
keyid:E9:03:85:8F:0A:BA:B5:2A:DD:2A:8F:CA:3F:14:99:8A:35:29:1A:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/E903858F0ABAB52ADD2A8FCA3F14998A35291A7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOFjwq6tSrdKo_KPxSZijUpGno.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/3134362e3234372e35382e302f32342d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.58.0/24
Signature Algorithm: sha256WithRSAEncryption
41:9d:0e:ad:ad:92:d6:3c:c1:7a:6d:ac:07:24:32:1c:bb:9f:
1f:e2:7a:7c:e6:cf:c4:6b:58:fc:ab:00:aa:ab:3f:e8:ed:36:
a2:34:96:5f:ef:9a:de:6c:b1:a5:cd:81:59:3c:18:1b:aa:26:
ad:cf:51:70:27:2c:cf:ce:d8:db:c1:f7:cb:75:34:4d:04:db:
e3:59:61:de:75:f0:a2:e2:a1:b5:1f:69:f5:2b:4f:89:a3:94:
86:b3:61:32:a1:32:2b:ab:22:55:32:94:0f:b8:ff:c5:5f:fb:
9b:41:fd:68:47:ca:e0:b8:1b:b7:04:f7:dc:89:c2:c6:56:ba:
a3:f1:46:b4:71:3f:1e:bb:cc:2d:58:88:9e:51:77:6a:24:d5:
af:16:0f:a5:71:0e:94:1a:6c:d6:39:67:d3:d9:d8:61:31:6d:
f3:ec:b7:2e:12:50:da:6b:41:b5:de:91:d3:8e:1e:c0:e0:be:
cd:0f:c8:3a:1f:7b:05:82:20:16:d5:bf:02:73:ad:60:45:2b:
84:14:52:72:56:68:bc:ce:e8:b0:f9:d9:2b:60:08:ee:5f:25:
82:75:a1:38:cf:7a:43:23:99:3e:dc:bc:82:6d:c4:d4:1c:fa:
9f:99:15:1d:81:e3:bb:70:aa:2b:78:e0:18:22:8f:2b:dd:fc:
1f:25:ae:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:10 2023 by rpki-client on console.sobornost.net