Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/47ade1b3-32d2-4e7d-a914-d7aaa438e0c9/0/3134362e31392e33382e302f32342d3234203d3e203135333737.roa
File: 3134362e31392e33382e302f32342d3234203d3e203135333737.roa (raw, json)
Hash identifier: VTQjnPkWRsTUUL7QknMvgmT/2lmPAb/bGnpaaBTI/Jw=
Subject key identifier: 81:12:E1:AA:C3:D5:26:AB:B3:23:93:5A:F3:CE:41:8D:EC:FB:35:3C
Certificate issuer: /CN=4ddf9d47831335c9710dcb1a0af7d304b2700e7f
Certificate serial: 0EE20B1B0D1C540725F56E53FE7458A91D7E74F3
Authority key identifier: 4D:DF:9D:47:83:13:35:C9:71:0D:CB:1A:0A:F7:D3:04:B2:70:0E:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Td-dR4MTNclxDcsaCvfTBLJwDn8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/47ade1b3-32d2-4e7d-a914-d7aaa438e0c9/0/3134362e31392e33382e302f32342d3234203d3e203135333737.roa
Signing time: Thu 23 Mar 2023 16:00:11 +0000
ROA not before: Thu 23 Mar 2023 15:55:11 +0000
ROA not after: Thu 21 Mar 2024 16:00:11 +0000
asID: 15377
IP address blocks: 146.19.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:e2:0b:1b:0d:1c:54:07:25:f5:6e:53:fe:74:58:a9:1d:7e:74:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddf9d47831335c9710dcb1a0af7d304b2700e7f
Validity
Not Before: Mar 23 15:55:11 2023 GMT
Not After : Mar 21 16:00:11 2024 GMT
Subject: CN=8112E1AAC3D526ABB323935AF3CE418DECFB353C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:bb:87:4f:04:6a:df:8c:c4:50:1f:aa:b6:
5f:a2:43:5e:e6:5d:81:75:df:b4:9e:14:b9:13:18:
d5:77:9d:54:09:10:99:2c:b0:a1:09:22:76:80:f6:
75:a3:ec:c7:44:49:1d:e9:c6:29:82:77:84:7b:01:
98:f8:7f:93:06:2e:35:29:bf:33:89:aa:a1:55:4c:
c1:23:e0:48:d0:d0:17:dc:4b:54:9e:31:a1:37:f1:
61:ee:a0:c0:7d:f6:f3:84:fd:7e:2a:b6:6c:bd:24:
f4:b8:36:51:3d:e1:75:1d:ca:26:3f:08:26:ba:ec:
9d:ca:d5:b3:4e:14:90:6b:6a:08:e2:23:e2:2f:46:
33:42:5a:9a:1c:44:de:03:2a:b8:ae:7c:25:57:e8:
39:05:23:ff:5b:aa:24:61:28:56:44:57:21:ed:67:
b6:cb:e5:cb:76:4c:c4:c8:b4:ca:b5:c4:b8:0a:06:
3d:20:be:85:f2:d0:f1:df:44:18:42:5b:97:26:2f:
7d:ba:59:d5:1b:93:5a:e2:04:c4:9d:33:f0:5e:9d:
79:3c:58:b8:bf:3f:27:3f:a5:19:f9:38:32:cc:a6:
f7:0b:36:5a:6f:f6:3d:00:8c:f0:d2:82:f0:81:56:
0d:99:13:f8:26:2d:17:a2:06:da:f5:82:a3:11:f8:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:12:E1:AA:C3:D5:26:AB:B3:23:93:5A:F3:CE:41:8D:EC:FB:35:3C
X509v3 Authority Key Identifier:
keyid:4D:DF:9D:47:83:13:35:C9:71:0D:CB:1A:0A:F7:D3:04:B2:70:0E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/47ade1b3-32d2-4e7d-a914-d7aaa438e0c9/0/4DDF9D47831335C9710DCB1A0AF7D304B2700E7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Td-dR4MTNclxDcsaCvfTBLJwDn8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/47ade1b3-32d2-4e7d-a914-d7aaa438e0c9/0/3134362e31392e33382e302f32342d3234203d3e203135333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.38.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:68:3f:8b:71:60:a7:61:16:7d:1d:f1:47:1e:36:9f:19:93:
5e:c6:e8:e2:93:3a:59:97:83:e3:39:b8:32:56:5e:0b:d5:f9:
df:a3:d4:ca:8c:38:ca:fa:6d:24:79:16:53:f8:0c:c9:02:e9:
03:3b:e6:85:55:33:db:3c:f7:bd:12:15:96:2a:3f:16:0f:ae:
e7:50:7d:34:c2:e4:fa:d8:43:aa:af:7c:6c:5f:c3:6e:63:7a:
a8:1a:4e:1d:90:60:51:66:0a:b3:6e:d1:b2:de:e1:f6:27:25:
6c:54:ef:f5:29:63:a2:5f:a8:8a:c3:a6:e4:ae:0b:09:20:36:
0e:75:f1:ae:bc:4d:a7:16:93:83:3f:84:88:4b:e5:3f:b3:8b:
ed:55:c1:f3:0e:dc:0a:db:61:b1:a6:a6:e7:63:65:8d:e8:b4:
e9:3c:4b:62:a1:f2:64:5c:cb:99:a9:5d:00:85:5f:2b:f3:63:
5c:f6:a3:de:14:6d:cd:e7:c6:09:93:7e:43:1a:c9:b6:24:f3:
c3:6f:8f:d9:4b:00:b3:46:49:45:2b:d8:ec:1f:1f:b0:84:21:
3d:3c:20:1e:df:da:4b:e3:d1:71:a4:ab:59:05:94:13:4e:fa:
fe:06:49:80:66:20:72:59:27:bc:79:21:fa:ba:53:62:2a:04:
6f:bf:e5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:13 2024 by rpki-client on console-fra.rpki-client.org