Route Origin Authorization
$ rpki-client -vvf rsync.rp.ki/repo/aci/0/3134362e31392e332e302f32342d3234203d3e203335343837.roa
File: 3134362e31392e332e302f32342d3234203d3e203335343837.roa (raw, json)
Hash identifier: nnc6RKSKTFxbRSS0zGeBQeBzGuHZqh7UYL6i44rMWEI=
Subject key identifier: 71:AB:FD:55:43:A0:BC:FB:88:29:DC:25:83:5A:F3:BD:9B:99:F0:FF
Certificate issuer: /CN=0c7610d96dbfca260037f5025b14a97ec3d6fa11
Certificate serial: 365FF885107F4612660B0F1A369B1A6F8F9AC92E
Authority key identifier: 0C:76:10:D9:6D:BF:CA:26:00:37:F5:02:5B:14:A9:7E:C3:D6:FA:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHYQ2W2_yiYAN_UCWxSpfsPW-hE.cer
Subject info access: rsync://rsync.rp.ki/repo/aci/0/3134362e31392e332e302f32342d3234203d3e203335343837.roa
Signing time: Sun 03 Dec 2023 21:38:40 +0000
ROA not before: Sun 03 Dec 2023 21:33:40 +0000
ROA not after: Sun 01 Dec 2024 21:38:40 +0000
asID: 35487
IP address blocks: 146.19.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:5f:f8:85:10:7f:46:12:66:0b:0f:1a:36:9b:1a:6f:8f:9a:c9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7610d96dbfca260037f5025b14a97ec3d6fa11
Validity
Not Before: Dec 3 21:33:40 2023 GMT
Not After : Dec 1 21:38:40 2024 GMT
Subject: CN=71ABFD5543A0BCFB8829DC25835AF3BD9B99F0FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1f:32:e3:43:9b:6e:ba:6c:f0:c2:59:24:8f:
ed:ac:a9:6c:b2:fa:a6:f1:fa:05:f6:52:18:aa:03:
40:1e:e2:fe:22:69:bc:5a:c4:fb:36:1b:e0:eb:e4:
6b:ca:01:e0:92:17:33:a5:3b:34:5e:b3:8d:f5:6a:
d7:52:8f:17:1a:96:5b:2f:67:65:fd:30:3e:0f:79:
34:38:9a:fc:58:24:89:47:c5:a0:26:f9:50:b5:7e:
9e:03:21:e7:14:6a:79:a4:fa:c5:0f:c1:f8:41:ee:
de:d8:26:66:c9:4e:6f:2d:0a:45:42:99:8d:68:85:
3f:f3:45:a7:40:9b:67:32:b2:3b:05:8a:d4:ac:93:
b4:d4:27:aa:a6:4f:a1:a7:19:7c:41:7f:85:61:b3:
1d:f1:8d:b8:f5:1d:ec:13:15:84:e1:1e:c6:1d:d5:
c3:04:0e:14:9e:3c:2f:26:eb:e3:29:e8:93:91:6f:
2b:77:d1:80:77:92:a0:99:23:ee:64:f3:f4:42:33:
a7:86:46:97:d8:d6:7e:e9:fc:20:d6:08:aa:f3:6c:
21:29:f4:14:86:b2:f1:ad:42:c4:39:9c:4a:1c:a6:
82:93:0a:45:6c:44:78:f2:00:37:e1:6b:d1:46:13:
17:4e:a4:9b:ff:0a:ad:9d:c9:0f:bb:2e:1f:3d:f8:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AB:FD:55:43:A0:BC:FB:88:29:DC:25:83:5A:F3:BD:9B:99:F0:FF
X509v3 Authority Key Identifier:
keyid:0C:76:10:D9:6D:BF:CA:26:00:37:F5:02:5B:14:A9:7E:C3:D6:FA:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rp.ki/repo/aci/0/0C7610D96DBFCA260037F5025B14A97EC3D6FA11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHYQ2W2_yiYAN_UCWxSpfsPW-hE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rp.ki/repo/aci/0/3134362e31392e332e302f32342d3234203d3e203335343837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.3.0/24
Signature Algorithm: sha256WithRSAEncryption
70:74:37:ca:48:d5:d0:d4:fc:d7:44:13:33:d3:a8:e5:ff:fc:
a1:c0:36:d1:38:3b:bd:47:71:3d:e7:1b:fa:e9:cb:e7:78:c4:
65:3e:ee:ab:8a:9e:f6:c1:ad:fc:2b:10:aa:76:32:99:0b:0a:
8f:0e:e4:84:8e:37:80:72:14:71:63:28:86:90:ff:ff:fd:4c:
db:e1:be:56:7f:8d:83:05:99:fb:0b:8e:fa:4b:3c:35:7c:a2:
0c:a4:99:d4:ea:e8:b0:f3:2e:0f:cf:de:22:04:eb:21:0e:f9:
0f:6b:33:f9:62:f3:f3:80:65:a6:0b:2b:24:ee:15:6f:05:01:
8c:86:0e:5f:a6:d5:68:06:8b:80:64:18:a3:6b:67:7b:c3:17:
cf:70:90:4a:80:92:1c:ed:b2:76:1f:c7:37:78:56:eb:b8:99:
88:d2:1c:52:9c:f8:0c:f3:2e:1d:3d:11:63:c0:9e:d0:d8:85:
43:30:15:34:b1:d0:46:a0:4d:54:b4:5f:f9:bb:fe:fc:d0:64:
2f:33:61:53:d5:41:6c:80:e5:ac:d7:90:9b:de:ca:4d:25:0e:
ef:4d:9c:80:e1:96:27:93:4e:63:b4:d1:ab:32:9b:3a:c6:0d:
db:00:49:cf:1f:64:3d:3b:6e:9d:3c:e5:68:f5:72:89:4d:93:
35:08:be:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:50:49 2025 by rpki-client