Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3230352e302f32342d3234203d3e20383334.roa
File: 3139342e3135302e3230352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: U3zkd/hSeTvG49hqH/dVTmRWOjN8bZ4NXk7SSoNF3Zo=
Subject key identifier: 4B:D8:25:1A:9B:58:7A:60:B2:CE:BB:E1:30:9F:91:06:EB:73:7F:1C
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 20BBE11AFCF0547160274D8AC4978465FEE220DF
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3230352e302f32342d3234203d3e20383334.roa
Signing time: Fri 30 Jun 2023 00:00:45 +0000
ROA not before: Thu 29 Jun 2023 23:55:45 +0000
ROA not after: Fri 28 Jun 2024 00:00:45 +0000
asID: 834
IP address blocks: 194.150.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:bb:e1:1a:fc:f0:54:71:60:27:4d:8a:c4:97:84:65:fe:e2:20:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jun 29 23:55:45 2023 GMT
Not After : Jun 28 00:00:45 2024 GMT
Subject: CN=4BD8251A9B587A60B2CEBBE1309F9106EB737F1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:f8:38:df:68:5e:6d:29:ff:2c:a3:d7:22:
97:fa:7b:79:a3:2c:82:6a:bf:1e:92:23:ad:4f:34:
33:61:9e:d8:80:5f:cc:df:fa:88:60:fc:e9:1f:58:
df:58:b9:e7:5a:91:b2:ae:1e:e2:27:8b:3c:c6:e8:
46:5e:d8:77:b4:d2:6e:05:14:bc:c2:b4:21:2e:45:
e9:cb:7f:3e:db:1b:59:3b:bc:35:a2:3c:a7:f8:7a:
6d:3f:ff:83:1a:dd:56:cd:b6:8e:93:95:0c:63:7f:
c3:23:25:4a:f9:72:1a:39:40:de:7f:98:83:48:51:
95:76:a1:97:ac:44:7e:16:ce:eb:68:3c:7a:e9:d5:
f9:e0:6a:e9:7f:dd:6d:87:c5:e2:a6:30:b9:c6:c9:
75:bc:42:50:4c:eb:e3:6b:e6:64:e9:72:b9:d8:1e:
ba:66:4e:a8:14:5e:57:16:e4:45:f5:80:b2:72:b5:
1f:00:64:eb:97:1a:02:12:d3:73:7d:80:97:2a:5d:
08:c1:88:00:93:38:5e:6b:2b:a6:92:6a:af:18:cd:
f8:f8:5a:e0:68:73:6f:b2:d3:b3:b2:c3:b4:15:79:
39:b1:9a:8e:26:6b:62:f5:69:94:a3:87:6d:e5:13:
41:d7:06:fe:3b:50:f1:0d:68:f6:78:08:1b:0f:d0:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D8:25:1A:9B:58:7A:60:B2:CE:BB:E1:30:9F:91:06:EB:73:7F:1C
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3230352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.205.0/24
Signature Algorithm: sha256WithRSAEncryption
50:df:ca:e2:81:33:6b:5e:c0:1b:b6:68:dc:1a:de:73:f5:6a:
9d:37:94:7f:17:78:64:d7:0d:ea:69:5e:a7:17:ad:bb:11:a2:
ce:fb:30:45:0f:b9:8f:e0:02:d7:97:00:24:a6:95:12:14:b8:
7e:32:e3:75:02:a4:13:66:51:99:33:61:6f:7e:18:f5:58:d0:
df:ed:39:0c:2e:a6:95:be:04:09:0d:4f:f7:1b:64:82:0a:b5:
02:78:40:50:ea:28:d0:db:fd:23:64:a6:e7:16:64:10:37:2d:
b2:69:85:3f:22:75:44:92:70:f2:89:50:8d:9c:fc:2f:4e:34:
ca:9b:44:87:21:5f:28:d9:78:52:17:a2:95:7e:ab:17:c0:22:
b9:a8:05:25:d4:5a:b7:09:c1:2d:65:08:c3:69:bd:3e:76:93:
1c:2b:bf:60:ed:e3:c6:4d:0e:77:41:2d:05:17:1a:44:32:02:
48:bd:29:0e:2e:0f:d9:c5:08:33:b7:15:16:9e:b4:4d:8e:33:
4e:e0:ca:f7:84:2f:08:71:96:ab:9c:3c:8b:ea:93:da:b2:af:
24:fb:a8:bd:72:2c:6c:50:2b:41:40:78:25:a1:58:b9:b0:a7:
31:bd:84:ed:9f:b0:9b:16:14:ae:3c:79:1b:f4:67:52:11:6b:
c2:5f:8c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 10:29:13 2023 by rpki-client on console-fra.rpki-client.org