Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/3134362e3234372e36322e302f32342d3234203d3e203234383531.roa
File: 3134362e3234372e36322e302f32342d3234203d3e203234383531.roa (raw, json)
Hash identifier: snjkoriU8ekklR9SCuOQHNBRcrYlCPfhvM0N25GAJO4=
Subject key identifier: 94:00:1E:EB:01:39:73:61:7D:B3:69:75:0D:CB:97:F7:66:1C:BD:9E
Certificate issuer: /CN=e903858f0abab52add2a8fca3f14998a35291a7a
Certificate serial: 3F00C8C78C6313A0DC9F8C311AB467B55D39FD58
Authority key identifier: E9:03:85:8F:0A:BA:B5:2A:DD:2A:8F:CA:3F:14:99:8A:35:29:1A:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QOFjwq6tSrdKo_KPxSZijUpGno.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/3134362e3234372e36322e302f32342d3234203d3e203234383531.roa
Signing time: Mon 23 Jan 2023 11:28:03 +0000
ROA not before: Mon 23 Jan 2023 11:23:03 +0000
ROA not after: Mon 22 Jan 2024 11:28:03 +0000
asID: 24851
IP address blocks: 146.247.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:00:c8:c7:8c:63:13:a0:dc:9f:8c:31:1a:b4:67:b5:5d:39:fd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e903858f0abab52add2a8fca3f14998a35291a7a
Validity
Not Before: Jan 23 11:23:03 2023 GMT
Not After : Jan 22 11:28:03 2024 GMT
Subject: CN=94001EEB013973617DB369750DCB97F7661CBD9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:08:ec:e2:98:94:05:88:62:6b:98:b4:5d:
ee:d5:bb:a5:67:99:0b:8f:9e:a5:7a:cd:14:af:3a:
fc:76:dd:5a:dd:2b:0d:79:c5:f5:df:bc:d7:73:ae:
8e:4c:44:56:40:cd:35:e7:73:ef:72:1d:74:77:79:
fa:71:10:b9:5e:76:d3:c7:df:30:58:b4:a6:72:4c:
43:65:c6:b3:18:b3:b9:ec:46:4d:1d:7d:c7:02:9e:
ed:1f:33:63:de:ec:fb:4d:08:d6:7f:07:35:0a:a5:
60:b8:b3:d5:eb:53:97:af:27:8b:36:da:4f:d3:ef:
99:f3:f9:cf:16:d3:0a:00:8c:91:15:4c:76:28:87:
fb:37:ca:d3:d4:a2:f1:d1:0d:86:f5:21:3d:71:8d:
1d:a4:b1:7c:b8:b3:99:d0:d1:23:91:d3:94:de:bd:
ae:ac:c3:f5:82:63:e4:4e:1d:af:b9:e7:48:3a:a1:
8e:ca:23:db:8b:2a:12:b4:57:b8:95:6e:52:cf:26:
f3:01:a9:e3:ec:35:6d:00:58:1c:ca:b7:af:cf:b4:
ca:f5:ff:d0:6f:0e:59:c6:b2:4e:01:d9:d5:a6:97:
1d:ff:d3:0a:55:e5:c9:8f:dc:63:82:2a:4c:6a:91:
8e:61:f3:55:71:71:5e:0b:2c:8d:2f:3a:32:53:09:
bc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:00:1E:EB:01:39:73:61:7D:B3:69:75:0D:CB:97:F7:66:1C:BD:9E
X509v3 Authority Key Identifier:
keyid:E9:03:85:8F:0A:BA:B5:2A:DD:2A:8F:CA:3F:14:99:8A:35:29:1A:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/E903858F0ABAB52ADD2A8FCA3F14998A35291A7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QOFjwq6tSrdKo_KPxSZijUpGno.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/0/3134362e3234372e36322e302f32342d3234203d3e203234383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.62.0/24
Signature Algorithm: sha256WithRSAEncryption
69:12:ba:57:06:bb:72:b2:1e:54:a9:7b:c5:55:74:f9:70:07:
4c:b7:fc:31:2b:2b:9d:1c:5a:25:dc:b3:75:01:c4:61:6e:27:
d9:67:76:0a:02:38:d2:8d:c2:cb:7d:48:4d:bf:cd:0b:03:1b:
f8:06:16:d0:4c:09:3c:2c:d6:e1:0b:fc:0d:04:0a:d3:69:32:
f8:d5:fa:14:c9:d5:b6:13:f7:2e:0d:0a:c3:3a:04:3c:8a:5e:
4a:17:06:22:bd:f7:9c:c7:d3:52:34:ac:2b:5a:89:90:83:03:
d5:1b:58:47:4d:f8:0f:1d:55:6a:88:d9:0d:f5:62:03:89:25:
5c:be:9c:ee:f3:e6:cc:b7:d0:76:42:f1:42:e1:e1:5e:53:53:
22:18:5b:38:57:49:48:de:75:13:65:fb:d0:fd:5f:42:ec:4c:
11:b5:67:a3:a8:d4:ad:7f:8d:ac:66:76:a7:35:71:f7:27:2d:
00:5a:88:69:49:c1:dd:f6:c9:59:02:5a:3d:a9:b6:a0:44:f9:
79:33:fe:77:b0:c6:b0:67:4a:53:37:a8:e9:07:16:3d:86:59:
45:ba:c3:79:04:1b:d7:20:d7:24:18:1d:3c:97:33:b5:19:22:
19:e5:24:71:27:1f:3b:46:1d:03:38:4d:9d:50:56:f1:fb:91:
bd:c2:b9:2d
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUPwDIx4xjE6Dcn4wxGrRntV05/VgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTkwMzg1OGYwYWJhYjUyYWRkMmE4ZmNhM2YxNDk5OGEz
NTI5MWE3YTAeFw0yMzAxMjMxMTIzMDNaFw0yNDAxMjIxMTI4MDNaMDMxMTAvBgNV
BAMTKDk0MDAxRUVCMDEzOTczNjE3REIzNjk3NTBEQ0I5N0Y3NjYxQ0JEOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRUgjs4piUBYhia5i0Xe7Vu6Vn
mQuPnqV6zRSvOvx23VrdKw15xfXfvNdzro5MRFZAzTXnc+9yHXR3efpxELledtPH
3zBYtKZyTENlxrMYs7nsRk0dfccCnu0fM2Pe7PtNCNZ/BzUKpWC4s9XrU5evJ4s2
2k/T75nz+c8W0woAjJEVTHYoh/s3ytPUovHRDYb1IT1xjR2ksXy4s5nQ0SOR05Te
va6sw/WCY+ROHa+550g6oY7KI9uLKhK0V7iVblLPJvMBqePsNW0AWBzKt6/PtMr1
/9BvDlnGsk4B2dWmlx3/0wpV5cmP3GOCKkxqkY5h81VxcV4LLI0vOjJTCbxrAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUlAAe6wE5c2F9s2l1DcuX92YcvZ4wHwYDVR0j
BBgwFoAU6QOFjwq6tSrdKo/KPxSZijUpGnowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYtOTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1
NWM1LzAvRTkwMzg1OEYwQUJBQjUyQUREMkE4RkNBM0YxNDk5OEEzNTI5MUE3QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZRT0Zqd3E2dFNyZEtvX0tQeFNaaWpV
cEduby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGM4YmI0NDYt
OTFjMC00MTM4LWEzM2EtYjQ3ODY1ZGU1NWM1LzAvMzEzNDM2MmUzMjM0MzcyZTM2
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM0MzgzNTMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
kvc+MA0GCSqGSIb3DQEBCwUAA4IBAQBpErpXBrtysh5UqXvFVXT5cAdMt/wxKyud
HFol3LN1AcRhbifZZ3YKAjjSjcLLfUhNv80LAxv4BhbQTAk8LNbhC/wNBArTaTL4
1foUydW2E/cuDQrDOgQ8il5KFwYivfecx9NSNKwrWomQgwPVG1hHTfgPHVVqiNkN
9WIDiSVcvpzu8+bMt9B2QvFC4eFeU1MiGFs4V0lI3nUTZfvQ/V9C7EwRtWejqNSt
f42sZnanNXH3Jy0AWohpScHd9slZAlo9qbagRPl5M/53sMawZ0pTN6jpBxY9hllF
usN5BBvXINckGB08lzO1GSIZ5SRxJx87Rh0DOE2dUFbx+5G9wrkt
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:10 2023 by rpki-client on console.sobornost.net