Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/3139342e35392e3232332e302f32342d3234203d3e20313430313533.roa
File: 3139342e35392e3232332e302f32342d3234203d3e20313430313533.roa (raw, json)
Hash identifier: 5YEKvYIJ2JecIYI3RIquTGEHPeWBtPAD5o0pdBhFnnk=
Subject key identifier: B7:CE:FE:0F:9F:3B:0A:36:34:D0:CC:1B:52:88:AE:56:0E:7A:F6:A9
Certificate issuer: /CN=fd1dcaa8fb487991afbb8f182f73e457ccb1f884
Certificate serial: 5E3733E698A655BCEB5ABD182D65676633F1D8F4
Authority key identifier: FD:1D:CA:A8:FB:48:79:91:AF:BB:8F:18:2F:73:E4:57:CC:B1:F8:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_R3KqPtIeZGvu48YL3PkV8yx-IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/3139342e35392e3232332e302f32342d3234203d3e20313430313533.roa
Signing time: Sun 02 Jul 2023 13:38:45 +0000
ROA not before: Sun 02 Jul 2023 13:33:45 +0000
ROA not after: Sun 30 Jun 2024 13:38:45 +0000
asID: 140153
IP address blocks: 194.59.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:37:33:e6:98:a6:55:bc:eb:5a:bd:18:2d:65:67:66:33:f1:d8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1dcaa8fb487991afbb8f182f73e457ccb1f884
Validity
Not Before: Jul 2 13:33:45 2023 GMT
Not After : Jun 30 13:38:45 2024 GMT
Subject: CN=B7CEFE0F9F3B0A3634D0CC1B5288AE560E7AF6A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:c8:13:f7:76:f0:f1:2b:c8:a7:5f:14:b7:
a8:00:b7:8d:57:3f:06:8b:49:84:ee:fb:0a:4b:ef:
18:6a:b3:83:52:30:b2:d8:34:fa:78:15:bb:7e:fe:
b1:5a:65:ad:b4:b6:7f:be:fd:e0:8c:a9:bd:31:c0:
ef:72:ec:51:d1:e5:70:19:34:71:5d:72:0a:d3:f0:
09:f8:97:87:3a:f0:f3:1f:48:27:9f:d7:41:d0:9f:
42:97:b0:e1:c9:58:f5:29:57:c3:d1:26:9b:ec:ca:
01:ec:c0:cf:5c:ed:eb:d5:e2:0a:60:4b:7e:07:65:
24:15:06:d1:0e:fa:78:19:b6:57:67:1d:5f:3c:7d:
61:24:31:fb:9f:21:0b:6c:fc:10:2a:06:6a:21:e9:
d6:74:9a:7f:91:59:51:4e:b4:8b:85:7d:56:e6:55:
87:b2:bd:9c:f1:a8:21:27:79:8b:f2:1a:52:dc:c1:
5d:fd:f7:ce:18:ab:27:cd:9a:6d:0a:30:db:d0:2c:
1b:82:2c:af:1e:77:26:97:5f:92:93:3a:a3:c5:a3:
c4:9b:a3:99:71:51:e4:ca:a3:f3:a7:c7:c4:c6:9a:
65:8e:f1:86:69:d4:69:fe:2f:1f:9b:c2:01:37:54:
c6:52:60:38:72:1a:8b:4c:af:9b:91:17:b8:0b:3c:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CE:FE:0F:9F:3B:0A:36:34:D0:CC:1B:52:88:AE:56:0E:7A:F6:A9
X509v3 Authority Key Identifier:
keyid:FD:1D:CA:A8:FB:48:79:91:AF:BB:8F:18:2F:73:E4:57:CC:B1:F8:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/FD1DCAA8FB487991AFBB8F182F73E457CCB1F884.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_R3KqPtIeZGvu48YL3PkV8yx-IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/3139342e35392e3232332e302f32342d3234203d3e20313430313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:8e:14:d7:e7:94:2c:e8:36:78:e9:b6:d3:eb:ca:eb:5c:ea:
13:1c:08:f4:d2:07:14:aa:5c:c3:e2:40:6f:58:18:b3:cf:a2:
90:d0:f3:06:06:e3:33:b6:d9:9d:56:bf:f0:de:85:9f:c4:14:
ff:8f:6d:d7:15:05:8d:da:94:6d:89:bf:e2:73:c0:00:da:2c:
53:4d:09:df:0e:b7:93:84:84:e4:cc:d5:b6:37:f5:a5:ae:8c:
93:98:b4:08:27:27:b1:91:87:1d:d6:14:f0:d9:9f:42:c8:d1:
62:83:e1:34:11:86:36:a1:73:1a:7f:17:42:7e:0a:5e:55:2b:
c9:2f:b4:ba:60:9b:a4:b3:c8:e7:d4:68:ff:7b:3e:e3:9e:2f:
02:e8:28:6b:25:5a:42:35:be:a6:a4:9d:be:c3:3e:5f:c6:e1:
09:e0:18:77:50:ce:ef:46:60:cb:ad:cc:9a:cb:e5:4a:03:7c:
0d:2f:ae:0c:ff:b6:11:b4:6a:77:aa:bb:d6:7e:b5:6d:57:ed:
73:35:3d:4e:cf:e3:11:b0:f9:6a:11:90:14:83:8c:0c:e4:09:
59:60:0a:9b:b3:54:3f:f3:22:62:82:9f:a7:53:ce:15:4f:04:
10:7d:3f:d2:91:bd:54:85:fb:09:cc:c6:e0:48:3f:4a:86:cb:
04:ea:20:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:10 2023 by rpki-client on console.sobornost.net