Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/401be74d-c00c-4c14-88f5-591cc4a4297e/0/3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa
File: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (raw, json)
Hash identifier: qUVtzc9rAVyjmWXMOxCWPueifZrggdmZNemUG+vVqH0=
Subject key identifier: 44:3C:C9:74:6F:4C:65:BB:60:8C:AB:D8:C3:C1:43:A9:BA:E6:B2:02
Certificate issuer: /CN=1ae2e77f2a52d09b79d54ff6107f290ab91fde05
Certificate serial: 4CC97D144D48EC50F1798951D4A740A207710AC1
Authority key identifier: 1A:E2:E7:7F:2A:52:D0:9B:79:D5:4F:F6:10:7F:29:0A:B9:1F:DE:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuLnfypS0Jt51U_2EH8pCrkf3gU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/401be74d-c00c-4c14-88f5-591cc4a4297e/0/3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa
Signing time: Thu 23 Mar 2023 15:48:22 +0000
ROA not before: Thu 23 Mar 2023 15:43:22 +0000
ROA not after: Thu 21 Mar 2024 15:48:22 +0000
asID: 142111
IP address blocks: 146.19.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:c9:7d:14:4d:48:ec:50:f1:79:89:51:d4:a7:40:a2:07:71:0a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae2e77f2a52d09b79d54ff6107f290ab91fde05
Validity
Not Before: Mar 23 15:43:22 2023 GMT
Not After : Mar 21 15:48:22 2024 GMT
Subject: CN=443CC9746F4C65BB608CABD8C3C143A9BAE6B202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f3:b4:10:a8:f4:e8:c1:24:ba:7c:e7:49:6f:
28:70:9d:a0:f5:b6:c3:b0:58:b6:ce:2b:ee:50:3c:
8a:6c:06:ee:68:8c:1a:75:01:84:74:35:9c:a8:dd:
31:84:d9:2d:d7:f1:d2:19:46:76:29:45:ae:66:da:
d8:5f:0f:25:13:14:bb:32:32:53:e1:66:21:e8:28:
21:f9:aa:a7:b3:27:fb:6f:c1:2c:bf:e8:3f:ae:76:
ae:20:04:83:95:b3:b3:30:50:b7:8c:68:65:19:3a:
81:b1:74:49:1b:0a:e8:2c:5d:04:6f:99:14:73:63:
4a:80:72:46:af:10:f1:3f:1b:14:35:88:fe:26:2f:
1c:c5:26:96:9f:7d:aa:0f:3b:67:89:a9:54:c5:bb:
43:9e:2c:8f:3e:83:9f:93:ac:1f:49:70:3c:00:0b:
57:be:4f:e0:7e:25:9a:ad:cc:ac:9d:ce:0d:8e:94:
fd:49:c8:65:65:8a:50:a3:b4:7a:e0:a7:79:2a:cd:
ad:c0:83:5d:82:a2:ed:43:3e:ad:09:1f:3e:79:2b:
1a:72:17:06:cc:76:2c:d1:ff:2c:ec:07:85:43:70:
39:52:ae:61:bc:8b:30:8c:92:da:dc:56:e0:66:38:
a5:2a:37:5b:ac:ab:9b:24:c5:05:0c:1a:6d:59:20:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3C:C9:74:6F:4C:65:BB:60:8C:AB:D8:C3:C1:43:A9:BA:E6:B2:02
X509v3 Authority Key Identifier:
keyid:1A:E2:E7:7F:2A:52:D0:9B:79:D5:4F:F6:10:7F:29:0A:B9:1F:DE:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/401be74d-c00c-4c14-88f5-591cc4a4297e/0/1AE2E77F2A52D09B79D54FF6107F290AB91FDE05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuLnfypS0Jt51U_2EH8pCrkf3gU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/401be74d-c00c-4c14-88f5-591cc4a4297e/0/3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.167.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:34:58:40:cf:79:3d:02:ac:57:72:2f:05:42:15:c0:47:56:
d5:ed:18:5b:47:78:02:d4:17:51:c4:3f:41:91:e9:1f:ea:ac:
04:f2:90:89:df:f0:9d:19:bf:89:b9:51:0a:59:e4:ea:07:a3:
3b:39:fb:9f:5b:6e:69:67:2c:55:5a:cd:74:fb:33:62:c9:b2:
f8:fe:93:93:bf:63:1b:53:2f:ce:22:31:c2:55:21:24:21:81:
d7:ab:a6:a1:3d:b4:ec:f0:22:81:2a:e7:a6:2c:d2:3d:8d:dd:
d5:21:59:ad:55:22:2e:5a:4e:26:f1:b3:4f:31:b8:6f:db:b7:
5f:74:04:32:b8:b1:84:f2:91:d9:fd:f6:40:8a:81:4a:76:ee:
cb:5b:e2:4c:48:0b:f1:ac:4e:be:08:9e:22:61:1b:eb:70:0b:
4c:82:46:4c:f7:f4:be:9b:e9:5b:63:61:f3:09:c5:cb:ff:d1:
28:19:f4:42:ef:79:18:d3:04:cf:73:12:5a:e6:cb:65:82:98:
1a:c6:b2:14:8d:f7:0d:8c:54:3e:30:9f:f2:42:46:94:4b:4f:
90:6d:04:a7:ce:f2:52:4a:c7:23:3d:06:49:09:a6:a5:cd:ac:
39:1a:06:93:12:8e:f7:23:c6:dc:99:b6:40:8c:00:6f:3a:e0:
92:a7:8e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 14:23:42 2023 by rpki-client on console-fra.rpki-client.org