Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231302e302f32342d3234203d3e20383334.roa
File: 3139342e3135302e3231302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: e8+SArpW9uexwjBAUL20PdKwUrC41XH3/NoenK9TpJ8=
Subject key identifier: 90:DF:BB:85:74:5E:9E:0B:6E:DF:DE:72:83:C8:6C:CD:6F:BD:D8:24
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 0B20EE09AA10A450691565BFD6ED3227952D99DC
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231302e302f32342d3234203d3e20383334.roa
Signing time: Sat 23 Sep 2023 00:00:04 +0000
ROA not before: Fri 22 Sep 2023 23:55:04 +0000
ROA not after: Sat 21 Sep 2024 00:00:04 +0000
asID: 834
IP address blocks: 194.150.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:20:ee:09:aa:10:a4:50:69:15:65:bf:d6:ed:32:27:95:2d:99:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Sep 22 23:55:04 2023 GMT
Not After : Sep 21 00:00:04 2024 GMT
Subject: CN=90DFBB85745E9E0B6EDFDE7283C86CCD6FBDD824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:be:25:b4:2d:07:c1:fe:5b:4f:4c:8f:85:
7a:f0:8b:54:66:b8:86:8c:80:8a:8a:63:91:49:90:
35:47:b1:9f:e7:30:62:dd:c4:63:b6:77:4b:5b:7e:
d4:4a:d1:a3:60:cf:4d:42:94:02:98:a7:89:22:6f:
98:a9:f7:23:62:0a:c5:e9:64:85:9f:23:d7:ca:04:
8a:c3:8f:4e:25:0b:fd:48:1f:b9:30:2c:84:53:d8:
6b:65:b0:4c:ee:4f:0d:6f:96:f8:4b:21:64:3d:ef:
70:6b:a5:58:fe:7c:f6:80:92:22:ca:14:bc:99:3d:
4f:02:11:8b:f8:f7:0e:fc:72:01:4f:49:33:78:b4:
55:1f:a6:0b:f4:21:b5:10:d6:da:55:50:b3:c4:c7:
d5:f3:f1:4b:fc:24:7a:76:ff:26:c3:ef:72:d4:82:
99:e0:83:e9:5a:5b:d5:ac:a3:7a:1c:c9:59:b5:1c:
5c:10:b0:88:79:50:58:48:b2:38:cb:6b:e6:3f:b3:
b4:51:b6:23:49:3f:2e:7e:3e:cb:32:56:42:ed:22:
ae:28:1f:91:4e:f5:97:cf:45:79:fa:8f:9b:ab:c8:
d8:6e:e5:37:f8:b1:4b:64:ce:b4:54:81:c2:72:d2:
d4:c5:e1:99:11:6e:72:de:10:33:dc:7a:83:e2:c3:
f7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DF:BB:85:74:5E:9E:0B:6E:DF:DE:72:83:C8:6C:CD:6F:BD:D8:24
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/3139342e3135302e3231302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.210.0/24
Signature Algorithm: sha256WithRSAEncryption
54:88:e2:59:8b:19:b8:ec:14:b7:58:6d:9e:6b:7b:6f:75:9c:
7c:cd:9f:db:96:69:e9:eb:05:f7:fe:60:50:36:c3:49:d2:24:
cb:57:dd:7d:09:25:ea:06:35:b1:cb:15:2e:73:d4:0a:3c:78:
be:75:72:f6:2a:d4:9d:35:98:42:d9:84:ae:79:30:52:4a:75:
86:b7:48:2e:bc:d2:25:3e:d7:cf:87:6b:b6:9c:4a:95:31:1f:
0e:35:c2:4e:ea:69:a9:3b:96:a8:3b:2b:76:25:25:e5:57:f4:
43:6c:a5:60:8f:57:f0:8a:43:9c:74:5b:6c:19:35:78:e1:16:
da:86:d8:11:0a:fd:19:17:97:46:ca:d5:c2:8c:f3:a1:a0:9a:
bd:7f:89:c3:dc:13:1f:5e:71:79:92:47:d3:b2:e8:9c:7a:58:
a4:02:28:2d:3b:45:f7:fc:99:94:16:d1:57:ac:14:a8:01:77:
eb:79:db:d8:ab:c3:8e:d1:c6:73:08:f4:c3:2b:44:b1:20:ae:
af:7b:97:19:39:8b:60:7d:29:f7:97:69:90:ee:c1:4c:ac:2f:
3e:46:59:6a:6c:d2:8a:69:c4:fd:91:6f:7e:f0:1e:55:14:9e:
e0:9e:b7:9d:7e:de:ab:3d:08:9b:59:27:76:cb:3f:ed:03:2d:
49:b0:a4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org