Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37322e302f32342d3234203d3e20383334.roa
File: 3134312e39382e37322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: nSL40018UH/yMzjTqpUPV51UU5D9C0hmseU+Q77Uec8=
Subject key identifier: E7:17:E9:22:46:8A:9E:55:41:1B:95:72:04:1E:4C:2B:74:2E:D8:CB
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 20C1F6C582F1083E217DF447BBB41DB5ACFACA04
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37322e302f32342d3234203d3e20383334.roa
Signing time: Sun 01 Sep 2024 00:02:59 +0000
ROA not before: Sat 31 Aug 2024 23:57:59 +0000
ROA not after: Sun 31 Aug 2025 00:02:59 +0000
asID: 834
IP address blocks: 141.98.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c1:f6:c5:82:f1:08:3e:21:7d:f4:47:bb:b4:1d:b5:ac:fa:ca:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Aug 31 23:57:59 2024 GMT
Not After : Aug 31 00:02:59 2025 GMT
Subject: CN=E717E922468A9E55411B9572041E4C2B742ED8CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f2:75:5c:33:41:9c:ec:c2:c2:80:b0:e9:69:
ba:6a:2b:83:6a:4d:7e:3c:de:ac:e9:dd:2d:b0:dc:
d3:19:8c:78:f3:f1:68:d5:c2:d7:e9:1c:b2:92:72:
82:94:d9:a1:ea:07:3f:e0:a9:0a:40:3f:57:6d:97:
a4:d4:2d:9c:d4:66:64:c7:0d:b7:31:24:18:ad:f2:
dc:e0:74:71:f8:fb:87:ba:36:e1:30:3e:be:c3:23:
f2:52:a5:a3:93:08:c3:92:5a:0c:75:32:f3:9b:6f:
51:07:c0:57:47:ad:06:9f:7a:5d:86:61:6d:46:4b:
51:b4:72:fb:49:ae:77:71:a6:6f:96:74:38:07:05:
13:e1:bb:68:fa:86:ae:76:54:7b:2b:ea:b8:7c:46:
a0:38:e9:b5:cc:3b:2c:26:69:ca:f4:14:87:ce:69:
2d:2c:30:60:87:94:01:07:bc:ff:18:4a:49:ff:79:
d0:dd:e5:20:a3:b8:03:50:6c:17:6f:63:ce:a2:55:
ec:d5:10:6a:42:12:63:71:ad:2e:b4:fd:8c:10:a2:
3b:c7:1a:0e:86:4b:49:91:69:74:8c:92:e8:bd:03:
fe:f3:9f:c7:a0:f1:86:ce:fb:97:a1:f1:df:3e:a1:
08:30:e5:f9:a6:14:db:54:13:fa:6e:a3:a4:ef:79:
f8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:17:E9:22:46:8A:9E:55:41:1B:95:72:04:1E:4C:2B:74:2E:D8:CB
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3134312e39382e37322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.72.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a9:3f:fd:dc:74:2c:a8:95:87:ee:09:95:d9:e7:96:33:42:
3e:5c:05:a5:1a:a3:83:4c:bc:64:44:eb:6d:12:d8:58:ad:e8:
f6:da:5a:c5:90:7e:6d:25:16:a1:7d:a0:db:38:49:89:f1:cb:
be:91:e7:88:9b:fb:6e:a9:6d:5c:78:74:9d:a8:81:81:e3:fd:
ae:46:72:fa:fe:ae:74:84:f2:f8:73:2b:e6:34:63:0f:e7:cc:
21:81:8e:0c:10:de:70:a6:5d:a1:d3:98:6b:5e:56:fd:5d:8e:
21:52:52:53:28:00:d4:9c:2e:fb:27:b5:26:e9:a2:91:af:66:
e6:4f:1a:9c:b6:5b:94:79:73:04:73:0d:15:af:48:f5:80:ea:
2d:37:8e:3a:fe:8c:c9:b0:92:8a:03:9c:d3:e6:06:94:8d:a3:
1b:14:e0:2d:bb:60:3c:40:a8:2e:02:b0:a2:98:0b:5b:bc:5d:
d8:b3:4f:7d:ac:3c:d3:da:1f:fd:dc:81:68:a6:d3:46:2a:14:
78:7b:6d:65:09:9b:22:35:1a:8c:03:c7:23:bf:a6:97:b8:e3:
dc:66:d8:da:56:02:ed:0f:d9:8f:95:f2:41:6c:ae:34:f4:17:
c1:33:c5:91:c4:fc:4d:a1:10:04:6f:f7:02:3e:d4:9b:33:02:
25:ae:3a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:27:59 2024 by rpki-client on console.sobornost.net