Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/150a1359-6c88-4290-aa12-8f935bd7005b/0/3134362e31392e39372e302f32342d3234203d3e203531303838.roa
File: 3134362e31392e39372e302f32342d3234203d3e203531303838.roa (raw, json)
Hash identifier: elFXGX9oCeLx6HDWmvdmVk6xstYNsUeANCtC1WBBQ4g=
Subject key identifier: D5:12:04:5A:7B:F7:FF:8A:B3:E0:7C:8B:97:CC:F5:3E:3E:21:E1:15
Certificate issuer: /CN=ebaffb936e16de1d04ced5d5368dcc3c779b98bb
Certificate serial: 25DCF0B51BC134EBB3FC3D8E86F2D7071BA8DD88
Authority key identifier: EB:AF:FB:93:6E:16:DE:1D:04:CE:D5:D5:36:8D:CC:3C:77:9B:98:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66_7k24W3h0EztXVNo3MPHebmLs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/150a1359-6c88-4290-aa12-8f935bd7005b/0/3134362e31392e39372e302f32342d3234203d3e203531303838.roa
Signing time: Tue 06 Dec 2022 10:55:27 +0000
ROA not before: Tue 06 Dec 2022 10:50:27 +0000
ROA not after: Tue 05 Dec 2023 10:55:27 +0000
asID: 51088
IP address blocks: 146.19.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:dc:f0:b5:1b:c1:34:eb:b3:fc:3d:8e:86:f2:d7:07:1b:a8:dd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaffb936e16de1d04ced5d5368dcc3c779b98bb
Validity
Not Before: Dec 6 10:50:27 2022 GMT
Not After : Dec 5 10:55:27 2023 GMT
Subject: CN=D512045A7BF7FF8AB3E07C8B97CCF53E3E21E115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:0c:e0:46:36:c2:4d:2f:f9:18:3f:9c:37:
4c:b3:88:c2:a2:52:1e:6c:6f:2b:a7:84:da:32:46:
1a:05:09:8b:bf:a0:ab:4c:25:35:15:63:2f:09:03:
dc:cd:70:77:18:02:25:ae:45:59:b6:13:bf:6f:73:
2f:ae:bf:f7:a1:b1:41:7b:39:2f:0d:8c:7d:dc:b9:
05:59:ce:4d:ee:04:c9:39:da:7b:05:49:38:e6:23:
4d:fd:4f:c0:d7:aa:07:9a:58:df:96:f0:c6:e7:31:
89:aa:c5:81:69:3c:4f:8a:0c:9b:cb:b5:b1:d2:40:
93:c8:b7:e9:15:6a:05:a5:4b:9d:9c:97:d3:2a:ef:
08:17:df:9b:fd:e0:93:2a:af:3e:c2:34:65:50:e1:
4f:3d:09:45:d8:5c:8c:c2:f1:73:93:2f:e4:35:c8:
12:a7:58:b8:8f:58:00:d8:1d:a8:dc:40:2e:be:2d:
b7:69:a7:0a:c9:79:01:a2:9a:69:d8:5f:f0:47:86:
55:5d:a8:67:da:1e:0c:f2:d2:1b:89:45:d1:55:cc:
d2:f8:e0:b6:80:67:c8:1b:48:42:d7:f3:3d:ff:b4:
6c:7d:e2:1c:bf:98:27:46:44:a9:a5:58:da:fe:4c:
80:e1:11:08:cc:6c:77:a3:27:d9:b1:f6:c3:45:64:
cd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:12:04:5A:7B:F7:FF:8A:B3:E0:7C:8B:97:CC:F5:3E:3E:21:E1:15
X509v3 Authority Key Identifier:
keyid:EB:AF:FB:93:6E:16:DE:1D:04:CE:D5:D5:36:8D:CC:3C:77:9B:98:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/150a1359-6c88-4290-aa12-8f935bd7005b/0/EBAFFB936E16DE1D04CED5D5368DCC3C779B98BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66_7k24W3h0EztXVNo3MPHebmLs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/150a1359-6c88-4290-aa12-8f935bd7005b/0/3134362e31392e39372e302f32342d3234203d3e203531303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.97.0/24
Signature Algorithm: sha256WithRSAEncryption
28:cb:c1:7c:30:cc:d1:68:dd:b9:33:54:e9:8b:81:95:df:9b:
07:a9:21:7c:78:49:f0:c8:9c:a5:b8:ba:13:64:fa:b0:19:f2:
bb:d0:ba:14:b8:ef:f4:76:0a:20:c3:6b:b5:55:e2:87:d3:52:
fc:e6:d0:03:fc:d2:fe:1c:2b:64:34:a2:97:92:70:25:a4:cf:
1b:5c:94:a6:53:6b:60:97:a5:19:a0:36:78:42:77:bb:87:d2:
39:00:4c:c9:20:3b:90:6f:53:0e:33:e2:cc:4b:18:b1:90:80:
0a:10:73:bf:ff:cf:dd:41:a5:6f:ae:29:c6:82:72:17:03:a8:
2d:31:cc:9e:e1:8e:71:9e:b2:41:d1:24:c4:9e:47:d6:2a:7a:
30:ca:45:49:29:b1:9e:e1:82:e2:4e:2f:39:40:21:98:aa:07:
f0:15:8a:e4:1c:fa:c7:40:d8:ca:40:d5:91:ff:0d:e7:8c:3f:
e8:6b:9f:ba:cf:b7:49:7c:10:07:aa:5f:cb:c1:93:d2:92:aa:
e0:92:80:1d:06:5e:19:47:69:e9:f7:c7:6d:c4:da:ca:08:2e:
e7:1a:a1:62:e5:a5:42:fa:41:0e:ba:23:98:e2:11:ae:ef:0c:
9c:96:da:19:a1:b0:7f:57:9b:9c:b3:81:7e:c7:ea:7b:29:a4:
eb:17:f4:81
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUJdzwtRvBNOuz/D2OhvLXBxuo3YgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWJhZmZiOTM2ZTE2ZGUxZDA0Y2VkNWQ1MzY4ZGNjM2M3
NzliOThiYjAeFw0yMjEyMDYxMDUwMjdaFw0yMzEyMDUxMDU1MjdaMDMxMTAvBgNV
BAMTKEQ1MTIwNDVBN0JGN0ZGOEFCM0UwN0M4Qjk3Q0NGNTNFM0UyMUUxMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrYgzgRjbCTS/5GD+cN0yziMKi
Uh5sbyunhNoyRhoFCYu/oKtMJTUVYy8JA9zNcHcYAiWuRVm2E79vcy+uv/ehsUF7
OS8NjH3cuQVZzk3uBMk52nsFSTjmI039T8DXqgeaWN+W8MbnMYmqxYFpPE+KDJvL
tbHSQJPIt+kVagWlS52cl9Mq7wgX35v94JMqrz7CNGVQ4U89CUXYXIzC8XOTL+Q1
yBKnWLiPWADYHajcQC6+LbdppwrJeQGimmnYX/BHhlVdqGfaHgzy0huJRdFVzNL4
4LaAZ8gbSELX8z3/tGx94hy/mCdGRKmlWNr+TIDhEQjMbHejJ9mx9sNFZM0jAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU1RIEWnv3/4qz4HyLl8z1Pj4h4RUwHwYDVR0j
BBgwFoAU66/7k24W3h0EztXVNo3MPHebmLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTUwYTEzNTktNmM4OC00MjkwLWFhMTItOGY5MzViZDcw
MDViLzAvRUJBRkZCOTM2RTE2REUxRDA0Q0VENUQ1MzY4RENDM0M3NzlCOThCQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2XzdrMjRXM2gwRXp0WFZObzNNUEhl
Ym1Mcy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTUwYTEzNTkt
NmM4OC00MjkwLWFhMTItOGY5MzViZDcwMDViLzAvMzEzNDM2MmUzMTM5MmUzOTM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMTMwMzgzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJIT
YTANBgkqhkiG9w0BAQsFAAOCAQEAKMvBfDDM0WjduTNU6YuBld+bB6khfHhJ8Mic
pbi6E2T6sBnyu9C6FLjv9HYKIMNrtVXih9NS/ObQA/zS/hwrZDSil5JwJaTPG1yU
plNrYJelGaA2eEJ3u4fSOQBMySA7kG9TDjPizEsYsZCAChBzv//P3UGlb64pxoJy
FwOoLTHMnuGOcZ6yQdEkxJ5H1ip6MMpFSSmxnuGC4k4vOUAhmKoH8BWK5Bz6x0DY
ykDVkf8N54w/6Gufus+3SXwQB6pfy8GT0pKq4JKAHQZeGUdp6ffHbcTayggu5xqh
YuWlQvpBDrojmOIRru8MnJbaGaGwf1ebnLOBfsfqeymk6xf0gQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:55 2024 by rpki-client on console-ams.rpki-client.org