Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3134362e31392e33382e302f32342d3234203d3e20383334.roa
File: 3134362e31392e33382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: zhhGqG5qE5kpXvaxdkU5zuMY7l5588//anFJKIEIR1c=
Subject key identifier: D7:58:EF:AE:7C:CE:C9:F6:98:C9:68:B0:C2:4E:39:09:F3:AF:6E:8A
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 0D64C9DF65015C923A74E70E4354490104D57F3D
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3134362e31392e33382e302f32342d3234203d3e20383334.roa
Signing time: Sat 23 Nov 2024 00:03:08 +0000
ROA not before: Fri 22 Nov 2024 23:58:08 +0000
ROA not after: Sat 22 Nov 2025 00:03:08 +0000
asID: 834
IP address blocks: 146.19.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:64:c9:df:65:01:5c:92:3a:74:e7:0e:43:54:49:01:04:d5:7f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Nov 22 23:58:08 2024 GMT
Not After : Nov 22 00:03:08 2025 GMT
Subject: CN=D758EFAE7CCEC9F698C968B0C24E3909F3AF6E8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:68:0c:af:89:47:b2:f0:1f:22:d2:fb:81:
0a:f8:95:1d:08:95:3c:a1:6b:df:8a:3d:50:8f:7e:
98:0b:3b:c5:1c:27:69:03:a3:9f:b0:cd:ae:b0:d0:
e7:e3:29:63:38:02:b8:85:bc:e2:18:48:02:71:7d:
24:68:5a:f9:a8:46:d5:aa:98:31:fb:ad:6e:9f:a7:
a8:30:f2:cf:e1:63:ad:f8:02:0a:f9:e1:bd:aa:f1:
35:6f:54:cf:18:b7:57:38:d3:5f:cf:5e:2b:48:d8:
b7:90:a2:fb:3f:50:42:4d:5d:6d:82:a1:4c:6b:1e:
16:f2:d0:d6:7b:16:8b:ea:1a:22:3c:94:fb:ed:8c:
33:5a:48:6d:01:64:6e:ea:c6:f7:70:41:64:d0:d3:
8f:31:70:38:29:4f:a5:ea:9b:9b:5d:79:80:d2:fc:
27:b8:94:2e:7b:cb:15:82:84:13:e2:96:77:25:3f:
27:69:6e:d2:82:fb:76:4f:b5:b4:31:83:ce:e3:30:
b0:0e:56:45:a1:88:f4:2d:a8:a4:e8:48:ed:e2:7d:
92:f1:4c:c9:fe:50:54:93:42:7e:dc:d6:86:6a:17:
52:dd:b6:51:da:a4:94:d7:84:30:fe:53:a8:f2:ae:
b9:b2:98:69:3e:6f:cf:34:cb:a4:19:d1:7e:a2:99:
0c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:58:EF:AE:7C:CE:C9:F6:98:C9:68:B0:C2:4E:39:09:F3:AF:6E:8A
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3134362e31392e33382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.38.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:5d:69:c8:02:d0:01:0f:17:d6:e9:d8:2a:f1:cd:ea:6c:19:
fa:de:e7:3c:e5:e5:71:78:9e:27:24:8f:f1:ed:f3:ba:1a:6f:
12:d4:60:14:8b:c6:3c:c3:0a:d7:b0:0e:fd:71:0a:4c:d4:40:
aa:87:20:0c:3c:03:76:dd:eb:ff:fc:f1:38:40:b8:af:ab:e8:
59:55:93:7a:29:02:85:3b:28:45:d5:5c:9b:9c:51:15:48:82:
14:4c:ff:79:bf:3d:1a:15:82:66:19:cd:da:a7:0b:a5:08:f7:
32:06:be:07:9b:c2:ff:03:27:ed:35:60:0c:67:61:f8:74:d6:
b4:9b:0f:21:53:e9:70:73:e8:9b:4b:86:3f:8c:f4:31:cb:e1:
79:20:62:22:d7:22:98:38:b3:63:e9:ee:e3:66:9c:40:79:c6:
25:b8:02:f8:f9:dc:02:c5:d0:25:5a:42:c9:92:51:02:d9:6a:
ad:0b:95:be:4f:11:1e:22:29:e7:fa:98:9d:4c:71:15:ad:6c:
04:8f:cd:f1:ba:7d:02:57:5b:7c:12:18:9a:1d:2f:34:60:0c:
5a:71:24:d5:f8:d5:c2:c2:93:3b:14:cc:0b:64:a6:e3:e3:20:
76:0b:7f:60:33:0a:8e:fa:f5:26:e7:35:af:9a:e7:d5:5d:dd:
b0:ef:f4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:09 2025 by rpki-client