Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS3214.roa
File: AS3214.roa (raw, json)
Hash identifier: JbukYcFLuvzJ603gJuZlCu12mwHtGItvZ+8SiO02CqQ=
Subject key identifier: 7E:1E:76:A4:43:DA:52:AE:CA:2D:2F:21:EC:01:F3:9E:8C:86:0B:EB
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 6755E01250BEAD2A81D1F8A8776D1A67DC255120
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS3214.roa
Signing time: Tue 06 Jun 2023 09:26:28 +0000
ROA not before: Tue 06 Jun 2023 09:21:28 +0000
ROA not after: Tue 04 Jun 2024 09:26:28 +0000
asID: 3214
IP address blocks: 91.193.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:55:e0:12:50:be:ad:2a:81:d1:f8:a8:77:6d:1a:67:dc:25:51:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:21:28 2023 GMT
Not After : Jun 4 09:26:28 2024 GMT
Subject: CN=7E1E76A443DA52AECA2D2F21EC01F39E8C860BEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:26:53:fa:92:23:55:f9:a4:60:51:45:05:
22:54:3b:17:d1:8f:7d:2f:a1:b9:9e:cc:58:d6:c1:
53:ec:4a:da:3a:a3:47:95:98:e8:53:2c:61:57:d7:
8e:4c:a1:09:5f:8e:1b:87:79:b3:f1:92:01:80:c8:
8c:de:d9:0b:4a:c2:b5:a0:43:a1:d3:32:8f:17:6e:
06:cb:9a:e3:eb:40:b3:f5:ed:35:b2:01:aa:4a:d7:
37:1b:b2:e4:b5:d0:a3:ba:d0:c3:28:8c:f9:79:73:
c8:b4:47:c8:40:8c:eb:f8:38:62:9d:ac:73:9c:62:
9d:00:af:c9:c7:78:d9:38:d8:fc:6a:e4:b6:84:3b:
e3:71:27:8e:14:8b:73:31:d4:24:d3:de:d6:67:46:
32:78:e8:67:c4:14:7a:e9:e7:25:e3:fb:6c:06:30:
01:07:bd:18:8b:51:f6:54:fb:dd:e4:0d:54:58:80:
ce:85:d6:f3:47:23:ab:88:be:db:0e:f0:cc:91:af:
fc:3f:f3:7b:fa:fe:b4:4c:30:6c:aa:ae:1d:ca:a4:
a0:ef:2f:ea:8e:41:7f:cc:ce:7c:5b:24:c3:db:dc:
c3:da:dc:c8:57:d4:c5:93:ad:41:d5:23:2f:ba:9f:
ff:3e:c0:98:a3:5d:67:15:df:66:dd:28:fa:35:34:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1E:76:A4:43:DA:52:AE:CA:2D:2F:21:EC:01:F3:9E:8C:86:0B:EB
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS3214.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e5:39:87:23:e8:c5:e9:26:2c:93:6e:84:02:3d:c9:a8:d5:
bc:d0:eb:fc:24:76:87:93:f3:f4:f4:b8:37:a9:45:39:eb:e1:
9d:2b:e7:6b:0f:77:88:31:46:80:27:ca:a1:09:cc:04:5f:98:
da:13:69:68:f1:b7:b9:2e:57:0f:22:03:f7:70:f1:6d:83:ab:
de:0f:a8:18:46:b3:16:f5:d6:96:3c:2f:4e:d4:c5:56:a6:7b:
5b:85:06:6d:8a:95:1c:02:93:ab:19:e8:bc:a4:91:e2:2f:1f:
41:0b:64:66:ac:5d:77:c2:33:8f:d2:ab:8b:ad:05:d3:54:52:
e9:8e:8d:85:a2:51:dd:8e:c8:62:9c:67:53:47:67:11:2d:62:
39:91:5c:a7:56:5c:c8:32:40:eb:96:48:32:93:37:a5:9d:8b:
eb:8b:98:ac:10:51:03:35:c7:63:22:08:c9:db:ab:84:4e:ad:
71:eb:32:80:c1:0f:be:e9:a1:71:3e:80:88:bf:53:35:c8:26:
9f:23:5d:19:05:35:82:b8:6a:07:f5:78:2a:19:95:8b:92:6c:
23:69:88:36:d3:14:f6:41:1c:b3:43:68:c3:ac:0a:fb:7d:12:
60:67:82:b6:0e:3e:f7:e3:f9:3b:64:9a:61:9c:fc:f4:ba:ed:
3f:2a:f3:c4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUZ1XgElC+rSqB0fiod20aZ9wlUSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTIxMjhaFw0yNDA2MDQwOTI2MjhaMDMxMTAvBgNV
BAMTKDdFMUU3NkE0NDNEQTUyQUVDQTJEMkYyMUVDMDFGMzlFOEM4NjBCRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV6yZT+pIjVfmkYFFFBSJUOxfR
j30vobmezFjWwVPsSto6o0eVmOhTLGFX145MoQlfjhuHebPxkgGAyIze2QtKwrWg
Q6HTMo8XbgbLmuPrQLP17TWyAapK1zcbsuS10KO60MMojPl5c8i0R8hAjOv4OGKd
rHOcYp0Ar8nHeNk42Pxq5LaEO+NxJ44Ui3Mx1CTT3tZnRjJ46GfEFHrp5yXj+2wG
MAEHvRiLUfZU+93kDVRYgM6F1vNHI6uIvtsO8MyRr/w/83v6/rRMMGyqrh3KpKDv
L+qOQX/MznxbJMPb3MPa3MhX1MWTrUHVIy+6n/8+wJijXWcV32bdKPo1NCSZAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUfh52pEPaUq7KLS8h7AHznoyGC+swHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ1NTZmNDE2LWFhZDYt
NDFiZi1hZWJmLTgwYTJjYzY3YTQ2Ni8wL0FTMzIxNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvBSzAN
BgkqhkiG9w0BAQsFAAOCAQEAZOU5hyPoxekmLJNuhAI9yajVvNDr/CR2h5Pz9PS4
N6lFOevhnSvnaw93iDFGgCfKoQnMBF+Y2hNpaPG3uS5XDyID93DxbYOr3g+oGEaz
FvXWljwvTtTFVqZ7W4UGbYqVHAKTqxnovKSR4i8fQQtkZqxdd8Izj9Kri60F01RS
6Y6NhaJR3Y7IYpxnU0dnES1iOZFcp1ZcyDJA65ZIMpM3pZ2L64uYrBBRAzXHYyII
ydurhE6tcesygMEPvumhcT6AiL9TNcgmnyNdGQU1grhqB/V4KhmVi5JsI2mINtMU
9kEcs0Now6wK+30SYGeCtg4+9+P5O2SaYZz89LrtPyrzxA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:33 2025 by rpki-client