Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/401be74d-c00c-4c14-88f5-591cc4a4297e/0/3134362e31392e3136372e302f32342d3234203d3e203633303233.roa
File: 3134362e31392e3136372e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier: /KpOjHYOPzsew2y0NiFVEAGrFGTq2skb9UiTr8+nH+Y=
Subject key identifier: 7C:99:45:D8:4C:6D:78:33:2E:5F:9D:D2:2B:C5:E5:31:97:F2:78:D2
Certificate issuer: /CN=1ae2e77f2a52d09b79d54ff6107f290ab91fde05
Certificate serial: 64B6FA887888B499D21D0E6540071E24159145BE
Authority key identifier: 1A:E2:E7:7F:2A:52:D0:9B:79:D5:4F:F6:10:7F:29:0A:B9:1F:DE:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GuLnfypS0Jt51U_2EH8pCrkf3gU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/401be74d-c00c-4c14-88f5-591cc4a4297e/0/3134362e31392e3136372e302f32342d3234203d3e203633303233.roa
Signing time: Thu 23 Mar 2023 15:49:44 +0000
ROA not before: Thu 23 Mar 2023 15:44:44 +0000
ROA not after: Thu 21 Mar 2024 15:49:44 +0000
asID: 63023
IP address blocks: 146.19.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b6:fa:88:78:88:b4:99:d2:1d:0e:65:40:07:1e:24:15:91:45:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ae2e77f2a52d09b79d54ff6107f290ab91fde05
Validity
Not Before: Mar 23 15:44:44 2023 GMT
Not After : Mar 21 15:49:44 2024 GMT
Subject: CN=7C9945D84C6D78332E5F9DD22BC5E53197F278D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7f:2d:fa:22:7f:ee:f7:cc:ac:f5:4f:83:f8:
3a:08:f3:c6:3b:a7:bd:72:94:7c:d2:05:f9:d0:a0:
22:4f:aa:54:49:f7:bb:08:0a:13:6b:ce:4c:9e:24:
c4:64:fd:95:a5:03:fd:da:75:de:70:ab:f5:9c:c9:
a5:d0:34:c9:aa:30:e0:81:50:9e:38:d4:f6:6d:9b:
7d:a6:82:3e:30:bd:69:a7:90:a8:14:e7:ea:bc:6e:
c9:8d:e6:f2:24:55:18:8f:a3:02:b6:74:a1:88:83:
dc:ad:9a:ff:61:1f:e0:52:3d:ad:85:f6:28:5b:90:
5e:6f:0f:5b:a1:ec:9c:ba:1c:24:46:2b:59:95:0d:
ff:cc:83:87:23:cf:a6:d0:c9:5e:65:83:ed:d1:1d:
c5:a1:92:d1:8b:e0:3e:bd:d3:59:c0:48:a2:85:63:
d1:b8:f4:16:fa:d5:51:95:80:a9:df:c0:48:69:eb:
d3:39:a2:48:bf:2b:c8:11:25:0b:e5:cc:d9:35:a3:
61:b1:89:2d:9b:7a:f9:d9:fc:12:18:c6:20:55:49:
13:06:26:b8:8a:bb:18:b1:af:5f:e0:73:00:61:45:
5a:39:7f:ad:b4:fd:0c:d7:53:71:06:1e:5b:0a:ac:
7b:bc:f2:56:2c:65:e6:ea:05:fe:1f:ec:fd:00:c1:
e5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:99:45:D8:4C:6D:78:33:2E:5F:9D:D2:2B:C5:E5:31:97:F2:78:D2
X509v3 Authority Key Identifier:
keyid:1A:E2:E7:7F:2A:52:D0:9B:79:D5:4F:F6:10:7F:29:0A:B9:1F:DE:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/401be74d-c00c-4c14-88f5-591cc4a4297e/0/1AE2E77F2A52D09B79D54FF6107F290AB91FDE05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuLnfypS0Jt51U_2EH8pCrkf3gU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/401be74d-c00c-4c14-88f5-591cc4a4297e/0/3134362e31392e3136372e302f32342d3234203d3e203633303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.167.0/24
Signature Algorithm: sha256WithRSAEncryption
da:8d:0a:24:25:65:9a:24:dd:fe:88:ce:89:08:2f:5a:a4:55:
ed:4b:48:0f:c9:b8:0b:33:5e:30:8b:43:03:ca:76:0f:4e:f0:
9e:b7:15:f7:d0:34:30:70:82:fc:c8:c4:1a:c3:e5:2f:e0:b9:
14:c3:c0:ba:72:df:13:d5:84:d0:51:95:ea:20:86:d8:c0:69:
e0:a0:a1:e1:be:65:aa:66:2c:3a:b9:5a:db:31:0e:3f:94:4b:
b8:13:e0:be:bd:cb:36:1a:21:41:03:54:24:55:27:fe:63:f1:
a4:3c:c2:64:42:2b:1b:77:be:d3:50:1e:46:2d:7d:8c:f0:df:
5a:d7:79:b3:b8:31:de:12:d1:2b:f3:f1:41:c3:5a:27:e7:a1:
2a:1b:e3:e6:c9:8f:6b:df:d8:74:04:b4:e2:17:ac:a9:b8:96:
d1:80:4e:6f:3e:86:e0:3f:b4:1a:c3:2d:3f:54:59:75:cb:3d:
c1:0e:b1:15:eb:61:29:28:7f:52:89:ff:3a:43:ad:b8:80:82:
20:69:e3:32:0f:9c:5e:45:30:27:b6:cb:c0:2e:bb:e9:97:6e:
27:fd:d5:49:b4:76:00:f0:76:8c:df:a9:77:14:5d:12:d9:89:
96:13:f8:3d:9a:19:a1:75:f3:2b:32:8a:8f:08:3e:de:8e:82:
dd:a1:40:eb
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUZLb6iHiItJnSHQ5lQAceJBWRRb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWFlMmU3N2YyYTUyZDA5Yjc5ZDU0ZmY2MTA3ZjI5MGFi
OTFmZGUwNTAeFw0yMzAzMjMxNTQ0NDRaFw0yNDAzMjExNTQ5NDRaMDMxMTAvBgNV
BAMTKDdDOTk0NUQ4NEM2RDc4MzMyRTVGOUREMjJCQzVFNTMxOTdGMjc4RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVfy36In/u98ys9U+D+DoI88Y7
p71ylHzSBfnQoCJPqlRJ97sIChNrzkyeJMRk/ZWlA/3add5wq/WcyaXQNMmqMOCB
UJ441PZtm32mgj4wvWmnkKgU5+q8bsmN5vIkVRiPowK2dKGIg9ytmv9hH+BSPa2F
9ihbkF5vD1uh7Jy6HCRGK1mVDf/Mg4cjz6bQyV5lg+3RHcWhktGL4D6901nASKKF
Y9G49Bb61VGVgKnfwEhp69M5oki/K8gRJQvlzNk1o2GxiS2bevnZ/BIYxiBVSRMG
JriKuxixr1/gcwBhRVo5f620/QzXU3EGHlsKrHu88lYsZebqBf4f7P0AweWtAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUfJlF2ExteDMuX53SK8XlMZfyeNIwHwYDVR0j
BBgwFoAUGuLnfypS0Jt51U/2EH8pCrkf3gUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAxYmU3NGQtYzAwYy00YzE0LTg4ZjUtNTkxY2M0YTQy
OTdlLzAvMUFFMkU3N0YyQTUyRDA5Qjc5RDU0RkY2MTA3RjI5MEFCOTFGREUwNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0d1TG5meXBTMEp0NTFVXzJFSDhwQ3Jr
ZjNnVS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAxYmU3NGQt
YzAwYy00YzE0LTg4ZjUtNTkxY2M0YTQyOTdlLzAvMzEzNDM2MmUzMTM5MmUzMTM2
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzAzMjMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
khOnMA0GCSqGSIb3DQEBCwUAA4IBAQDajQokJWWaJN3+iM6JCC9apFXtS0gPybgL
M14wi0MDynYPTvCetxX30DQwcIL8yMQaw+Uv4LkUw8C6ct8T1YTQUZXqIIbYwGng
oKHhvmWqZiw6uVrbMQ4/lEu4E+C+vcs2GiFBA1QkVSf+Y/GkPMJkQisbd77TUB5G
LX2M8N9a13mzuDHeEtEr8/FBw1on56EqG+PmyY9r39h0BLTiF6ypuJbRgE5vPobg
P7Qawy0/VFl1yz3BDrEV62EpKH9Sif86Q624gIIgaeMyD5xeRTAntsvALrvpl24n
/dVJtHYA8HaM36l3FF0S2YmWE/g9mhmhdfMrMoqPCD7ejoLdoUDr
-----END CERTIFICATE-----
Generated at Mon Dec 11 14:41:26 2023 by rpki-client on console-ams.rpki-client.org