Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS3507.roa
File: AS3507.roa (raw, json)
Hash identifier: MuVn8z6dzjZ+SrXx+y+vTKNUmWMUILzuzXfLtvSdVqI=
Subject key identifier: 97:E5:ED:7B:69:EF:3B:EC:75:28:B8:53:EE:65:FD:6D:30:F7:F2:77
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 4CCB9D22E7EEA9967AF3181337720B35A63D5002
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS3507.roa
Signing time: Tue 06 Jun 2023 09:25:57 +0000
ROA not before: Tue 06 Jun 2023 09:20:57 +0000
ROA not after: Tue 04 Jun 2024 09:25:57 +0000
asID: 3507
IP address blocks: 89.23.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:cb:9d:22:e7:ee:a9:96:7a:f3:18:13:37:72:0b:35:a6:3d:50:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:20:57 2023 GMT
Not After : Jun 4 09:25:57 2024 GMT
Subject: CN=97E5ED7B69EF3BEC7528B853EE65FD6D30F7F277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:0b:83:bf:ee:01:ba:00:f9:f1:94:f2:ad:
21:19:79:01:9e:a2:5f:87:92:25:64:6b:ed:17:74:
1b:e0:c3:c2:2e:a7:a2:e2:a0:aa:4b:49:02:91:bc:
3e:ba:82:96:02:7f:82:1c:1b:40:16:f7:ba:04:29:
2a:e7:04:27:13:dd:2f:1b:97:6f:60:aa:48:19:77:
d0:b1:89:85:69:05:a0:98:eb:9e:27:87:1d:2b:fa:
ec:4b:3f:1e:fa:25:eb:36:8b:c8:41:58:95:d6:4e:
85:67:3c:75:3c:9f:09:fa:4e:84:dd:78:f1:f5:a2:
0f:a4:bb:ce:76:bf:4f:b9:c4:21:43:39:2b:79:8e:
9a:ab:3b:c8:7f:f1:93:90:dc:53:f8:dc:6b:df:57:
35:89:68:c7:25:7f:1b:63:71:93:7f:2d:31:8d:56:
e0:7a:e5:d2:6c:6e:6a:92:5b:0e:bd:d2:aa:d4:15:
13:48:89:c0:d0:42:6a:8b:cc:4b:2c:bc:15:f6:16:
7d:cd:c8:22:96:64:9e:86:48:9d:08:a2:2c:7e:4c:
63:78:a3:c5:65:13:01:08:0c:54:03:ea:09:05:c4:
ed:d2:40:72:aa:c5:bc:cb:9a:1e:44:37:18:78:17:
90:d9:78:eb:95:b6:a6:92:cf:ea:54:cf:ac:b9:9d:
64:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E5:ED:7B:69:EF:3B:EC:75:28:B8:53:EE:65:FD:6D:30:F7:F2:77
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS3507.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.80.0/24
Signature Algorithm: sha256WithRSAEncryption
21:8b:a3:2d:13:2c:45:9f:86:2b:ff:c9:ff:e8:09:bc:fd:b2:
81:36:dc:2a:be:95:ac:d6:4a:5f:0d:6c:fd:0e:44:36:60:a9:
dc:60:9d:00:a5:5d:a1:a9:43:0f:68:df:17:8c:7d:74:a5:3e:
2d:3d:29:4b:c1:9c:f8:68:85:73:27:7a:5a:06:9a:c7:9b:37:
4b:0f:e7:c3:d7:f3:76:b2:77:c3:82:22:01:f4:c6:58:c3:4f:
ef:7c:34:8e:f9:25:00:12:a4:24:97:8a:1c:cf:66:23:3f:52:
0d:d3:5b:5f:6a:ae:a7:b0:0b:0f:62:c1:2c:6f:69:6b:90:42:
32:3c:4f:0c:49:c4:bb:bd:ee:25:72:ff:c8:62:0b:ff:88:bc:
19:6d:93:14:40:3c:82:50:ea:f2:eb:bc:b8:c0:b2:59:24:64:
f1:ff:60:97:e3:af:63:fe:66:68:64:8d:83:2f:49:ed:b1:18:
52:09:37:67:67:8f:54:9d:56:7a:72:71:e5:ff:c4:0a:1d:c6:
b1:91:e7:b0:43:61:49:4d:bd:40:c6:60:6a:51:01:bf:43:51:
83:72:67:6b:dc:c5:4a:cb:cd:65:4f:99:9a:92:a8:ad:19:27:
a3:9d:fe:8f:6a:22:ff:2a:05:82:23:9f:88:a5:50:9a:1d:3d:
5a:58:33:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org