Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28eea536-873f-43f8-b1ef-0fb4fa2be39e/0/3139332e3234362e3136342e302f32342d3234203d3e203239383032.roa
File: 3139332e3234362e3136342e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: jhm0UuVUc9z7UuvLHZYW7I6dIgxuXuX2DmqMllqzmz4=
Subject key identifier: 43:C1:9A:5C:7C:2C:8A:13:D0:36:9B:E7:9D:28:EB:AD:97:31:89:23
Certificate issuer: /CN=c4ad859ca6af5e5fdecbe4088d6161f704f38282
Certificate serial: 59E87B2233BD342DB2EFDC3F38749C1DC2AFDACF
Authority key identifier: C4:AD:85:9C:A6:AF:5E:5F:DE:CB:E4:08:8D:61:61:F7:04:F3:82:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK2FnKavXl_ey-QIjWFh9wTzgoI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/28eea536-873f-43f8-b1ef-0fb4fa2be39e/0/3139332e3234362e3136342e302f32342d3234203d3e203239383032.roa
Signing time: Mon 04 Sep 2023 18:08:00 +0000
ROA not before: Mon 04 Sep 2023 18:03:00 +0000
ROA not after: Mon 02 Sep 2024 18:08:00 +0000
asID: 29802
IP address blocks: 193.246.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:e8:7b:22:33:bd:34:2d:b2:ef:dc:3f:38:74:9c:1d:c2:af:da:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ad859ca6af5e5fdecbe4088d6161f704f38282
Validity
Not Before: Sep 4 18:03:00 2023 GMT
Not After : Sep 2 18:08:00 2024 GMT
Subject: CN=43C19A5C7C2C8A13D0369BE79D28EBAD97318923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:50:ff:0b:e1:b3:3f:ec:69:d5:72:98:c4:
72:80:a8:25:e0:73:80:9e:d6:8d:28:cf:a5:e2:ca:
44:85:9e:70:8f:94:0a:92:26:3f:b7:01:f1:fd:3b:
7d:ce:bd:fd:4f:33:d8:3f:63:74:b3:15:2f:92:fe:
11:c7:e0:01:64:2b:92:00:dd:da:b3:53:3f:34:c1:
c9:a3:de:1d:a5:cd:41:19:2e:f0:8a:c2:18:4e:c6:
fb:eb:f4:bd:b3:74:5c:d8:3d:74:3e:ab:48:75:6c:
9b:ff:17:64:a4:2e:3f:cf:5c:52:9f:42:7e:cc:6f:
ca:c8:51:c7:35:ea:b0:0e:ea:59:84:0b:17:ef:e7:
6d:87:52:d3:26:04:d4:06:81:b1:ac:d1:1c:06:c9:
f7:bc:10:ee:73:cd:42:bf:26:39:1a:7f:48:3f:4d:
18:9f:12:26:d5:26:89:2d:1e:0d:ed:cc:57:b4:f4:
e5:0f:be:43:26:85:1c:04:18:57:b5:10:22:9f:e0:
28:98:be:f9:8a:e8:2d:b7:37:88:c5:62:dc:a0:e3:
9d:82:85:a7:13:82:1f:6e:f9:13:9a:89:2d:c6:44:
e2:02:8c:08:5e:13:46:cd:0f:fe:6a:50:de:64:c8:
05:a2:eb:77:63:17:4a:34:38:ca:b6:d4:e3:ab:0a:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C1:9A:5C:7C:2C:8A:13:D0:36:9B:E7:9D:28:EB:AD:97:31:89:23
X509v3 Authority Key Identifier:
keyid:C4:AD:85:9C:A6:AF:5E:5F:DE:CB:E4:08:8D:61:61:F7:04:F3:82:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/28eea536-873f-43f8-b1ef-0fb4fa2be39e/0/C4AD859CA6AF5E5FDECBE4088D6161F704F38282.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK2FnKavXl_ey-QIjWFh9wTzgoI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28eea536-873f-43f8-b1ef-0fb4fa2be39e/0/3139332e3234362e3136342e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.164.0/24
Signature Algorithm: sha256WithRSAEncryption
50:35:cc:71:32:bf:a3:7b:ea:03:e5:ad:81:7c:98:8d:26:13:
6c:db:95:da:87:31:cc:3f:84:9c:dc:d0:a9:fd:c1:46:be:06:
76:47:91:f1:ea:7d:0a:eb:45:ed:e7:7a:fb:85:e7:a7:b8:63:
ba:9f:59:76:50:83:4e:1b:dc:08:29:07:1e:61:bb:b8:19:23:
df:95:e0:ed:38:d4:ba:78:37:84:c1:c9:09:59:d7:56:5b:b4:
59:9b:43:26:41:9e:f1:fe:c4:ca:68:cd:f5:b8:e4:a6:3a:16:
c6:3b:4c:28:93:56:d3:3f:01:e0:d7:47:6a:fe:57:46:a8:2b:
7c:17:2b:d3:bf:f7:93:02:8c:40:da:27:b7:ef:d1:57:f1:6e:
03:c1:eb:1b:3c:b9:52:1a:76:f3:3f:25:2f:f8:0a:72:29:fe:
43:28:70:90:59:d1:96:c6:5e:ac:dd:61:38:d1:7e:e7:8e:6e:
84:87:e6:16:3e:69:ba:3e:60:6a:84:69:0e:d5:e4:9f:54:2a:
77:0c:48:ed:bf:72:54:64:4b:62:66:b4:ef:6d:a9:e9:99:2c:
28:27:e3:d4:de:7d:d5:e3:3b:7d:a2:1d:8c:45:fc:5b:48:d9:
cd:3f:5b:82:ab:3d:f4:af:f1:12:d6:86:c6:82:42:11:d4:1a:
82:6a:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:10 2024 by rpki-client on console-fra.rpki-client.org