Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS43260.roa
File: AS43260.roa (raw, json)
Hash identifier: t1JBHIN3DZdtsgWNLqfQGPoWaxVukFSxlmLeMcqYRtY=
Subject key identifier: B6:55:19:DC:B1:08:C3:8E:DA:54:89:12:42:5B:EB:27:56:73:A7:0B
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 46876B0B092D61668FD48A350E0FE6DD15DFE318
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS43260.roa
Signing time: Tue 06 Jun 2023 09:25:56 +0000
ROA not before: Tue 06 Jun 2023 09:20:56 +0000
ROA not after: Tue 04 Jun 2024 09:25:56 +0000
asID: 43260
IP address blocks: 109.111.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:87:6b:0b:09:2d:61:66:8f:d4:8a:35:0e:0f:e6:dd:15:df:e3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:20:56 2023 GMT
Not After : Jun 4 09:25:56 2024 GMT
Subject: CN=B65519DCB108C38EDA548912425BEB275673A70B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a3:0f:0f:8b:c3:27:72:89:a0:d5:48:c3:13:
3a:0f:39:45:4a:b1:16:2f:9a:14:8e:60:51:f5:62:
cd:5c:a3:42:53:cc:82:75:15:64:4d:31:fb:12:b2:
6c:2a:b9:f1:6a:9d:17:3c:09:10:5b:a2:6d:13:13:
fb:98:9f:2b:b7:ca:b1:44:6d:64:b1:7a:51:a9:b1:
a4:75:72:10:1e:fe:4d:50:be:09:be:c2:0d:5d:97:
10:42:5c:c7:de:9b:5c:5e:0b:4d:ff:25:15:74:92:
8b:b4:05:34:02:26:8c:a8:a2:f9:1a:32:e8:58:ed:
5b:e2:44:26:54:f8:be:30:8c:69:50:1b:89:34:64:
e2:80:63:fc:3b:5b:8d:e2:70:4e:d5:cc:5a:bf:70:
e5:62:67:af:a1:e4:fa:3e:b7:f4:ae:f7:c9:1d:76:
e7:77:a8:63:c2:7e:ad:ce:f5:6c:a0:89:61:b9:ac:
a8:dd:f1:41:f3:87:56:86:60:fc:4d:94:de:3c:6c:
56:75:5f:b9:2d:91:d6:5f:5c:7d:ee:e7:6b:bb:38:
71:47:93:0f:97:d7:f7:32:4d:a7:eb:36:02:68:01:
0a:d0:a7:5f:57:2c:51:4f:c6:74:3c:79:ff:90:d8:
be:ba:e8:5b:75:7b:21:df:df:44:57:34:d1:09:72:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:55:19:DC:B1:08:C3:8E:DA:54:89:12:42:5B:EB:27:56:73:A7:0B
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS43260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.245.0/24
Signature Algorithm: sha256WithRSAEncryption
32:74:1c:27:bb:43:76:b9:0d:a8:4b:d8:59:9c:49:8e:b2:67:
8a:0e:0e:e7:40:c0:10:17:32:82:bb:13:70:56:3e:e9:8b:9c:
10:4b:9d:dd:94:81:5f:f4:cd:ad:78:ac:56:21:7d:5c:77:a6:
f6:c0:c6:fa:c7:c7:39:08:c6:3b:a0:56:26:85:c4:c9:88:83:
92:e0:4c:4d:20:8c:13:d7:c6:00:90:2f:00:f3:71:01:43:6a:
ed:15:28:2f:1a:3a:ac:85:99:4b:7e:54:87:33:82:ce:71:a2:
2c:d8:ea:03:d7:32:16:fa:eb:6a:89:91:84:9a:56:5d:cf:18:
15:3e:bc:de:a0:50:ae:a8:38:68:31:50:cc:c1:bb:aa:99:de:
9f:3c:65:3d:6d:1e:47:49:87:5e:84:15:f4:a6:5a:c8:c8:a8:
cf:25:09:86:65:58:b9:43:d9:36:ab:5e:f3:a0:32:39:a0:00:
1f:56:13:c3:18:56:1e:39:7c:14:7c:bf:60:d9:a6:30:06:86:
00:36:fe:b8:fe:a0:e5:44:c4:d0:ef:78:a2:30:d2:0d:40:73:
06:1f:32:24:0e:a3:30:7a:b7:9b:37:d6:0a:fd:57:f4:82:22:
5c:d1:fa:22:cc:9f:4a:f3:23:a4:81:fc:82:03:0a:52:cd:e4:
0f:1d:ad:08
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIURodrCwktYWaP1Io1Dg/m3RXf4xgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGY5OTQ4ZDgyYzc0ZjViODA2NjdiNGEzNzM5NGM4YTU2
YjdmZTQ4NDAeFw0yMzA2MDYwOTIwNTZaFw0yNDA2MDQwOTI1NTZaMDMxMTAvBgNV
BAMTKEI2NTUxOURDQjEwOEMzOEVEQTU0ODkxMjQyNUJFQjI3NTY3M0E3MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWow8Pi8Mncomg1UjDEzoPOUVK
sRYvmhSOYFH1Ys1co0JTzIJ1FWRNMfsSsmwqufFqnRc8CRBbom0TE/uYnyu3yrFE
bWSxelGpsaR1chAe/k1Qvgm+wg1dlxBCXMfem1xeC03/JRV0kou0BTQCJoyoovka
MuhY7VviRCZU+L4wjGlQG4k0ZOKAY/w7W43icE7VzFq/cOViZ6+h5Po+t/Su98kd
dud3qGPCfq3O9WygiWG5rKjd8UHzh1aGYPxNlN48bFZ1X7ktkdZfXH3u52u7OHFH
kw+X1/cyTafrNgJoAQrQp19XLFFPxnQ8ef+Q2L666Ft1eyHf30RXNNEJcuFBAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUtlUZ3LEIw47aVIkSQlvrJ1ZzpwswHwYDVR0j
BBgwFoAUT5lI2Cx09bgGZ7Sjc5TIpWt/5IQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDU1NmY0MTYtYWFkNi00MWJmLWFlYmYtODBhMmNjNjdh
NDY2LzAvNEY5OTQ4RDgyQzc0RjVCODA2NjdCNEEzNzM5NEM4QTU2QjdGRTQ4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q1bEkyQ3gwOWJnR1o3U2pjNVRJcFd0
XzVJUS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQ1NTZmNDE2LWFhZDYt
NDFiZi1hZWJmLTgwYTJjYzY3YTQ2Ni8wL0FTNDMyNjAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABtb/Uw
DQYJKoZIhvcNAQELBQADggEBADJ0HCe7Q3a5DahL2FmcSY6yZ4oODudAwBAXMoK7
E3BWPumLnBBLnd2UgV/0za14rFYhfVx3pvbAxvrHxzkIxjugViaFxMmIg5LgTE0g
jBPXxgCQLwDzcQFDau0VKC8aOqyFmUt+VIczgs5xoizY6gPXMhb662qJkYSaVl3P
GBU+vN6gUK6oOGgxUMzBu6qZ3p88ZT1tHkdJh16EFfSmWsjIqM8lCYZlWLlD2Tar
XvOgMjmgAB9WE8MYVh45fBR8v2DZpjAGhgA2/rj+oOVExNDveKIw0g1AcwYfMiQO
ozB6t5s31gr9V/SCIlzR+iLMn0rzI6SB/IIDClLN5A8drQg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org