Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/646b5ebc-f4ee-4c8e-80a2-17b3e3acf734/1/3138352e312e3134382e302f32342d3234203d3e203536373338.roa
File: 3138352e312e3134382e302f32342d3234203d3e203536373338.roa (raw, json)
Hash identifier: 4OS8BsVEDTHkhR9qzRPvIEQxEBBx9Ji7h6mowoIgUSk=
Subject key identifier: 9A:7A:45:84:D3:2C:2D:FF:B1:99:7A:4C:C4:93:87:AC:5C:28:3A:0A
Certificate issuer: /CN=25297f0c4b0430f30a7878d51fb3b7ac11250092
Certificate serial: 19C3D8BFC3B873ABD6D15B390E3F9519B55695C6
Authority key identifier: 25:29:7F:0C:4B:04:30:F3:0A:78:78:D5:1F:B3:B7:AC:11:25:00:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSl_DEsEMPMKeHjVH7O3rBElAJI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/646b5ebc-f4ee-4c8e-80a2-17b3e3acf734/1/3138352e312e3134382e302f32342d3234203d3e203536373338.roa
Signing time: Thu 21 Sep 2023 21:47:27 +0000
ROA not before: Thu 21 Sep 2023 21:42:27 +0000
ROA not after: Thu 19 Sep 2024 21:47:27 +0000
asID: 56738
IP address blocks: 185.1.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c3:d8:bf:c3:b8:73:ab:d6:d1:5b:39:0e:3f:95:19:b5:56:95:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25297f0c4b0430f30a7878d51fb3b7ac11250092
Validity
Not Before: Sep 21 21:42:27 2023 GMT
Not After : Sep 19 21:47:27 2024 GMT
Subject: CN=9A7A4584D32C2DFFB1997A4CC49387AC5C283A0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dc:05:3d:93:03:42:ce:4d:5a:c8:62:99:90:
58:b5:2c:cb:16:ec:8d:bd:41:34:1a:85:99:ee:a7:
93:b7:d4:69:1a:63:b9:76:a9:6b:4a:1f:85:77:c9:
cd:72:6c:a9:91:2b:cd:4c:59:89:d5:6c:77:d9:d7:
4f:d2:ea:11:a5:70:98:58:1a:b6:52:97:b2:5f:33:
ce:dd:ab:20:eb:88:16:fa:94:9d:df:99:42:3f:42:
52:5d:b6:e7:2e:e2:7d:db:c3:10:69:b0:58:99:b5:
ad:b7:6a:b6:f1:57:b6:5a:7e:a5:00:ab:cd:43:b5:
b0:22:39:0e:b9:be:3a:31:0e:6d:7c:32:7b:b7:dc:
d4:d7:5b:f7:78:b8:50:fc:5b:38:5b:5a:7f:65:df:
4a:60:59:ac:4d:e6:88:de:f6:d1:94:2f:fc:3f:fa:
cd:2b:1c:80:cc:40:f4:23:7d:fb:5a:3b:36:1f:42:
c2:65:27:f3:52:7d:7d:28:f9:56:ed:1e:4a:c0:be:
56:a1:cc:1a:2c:d4:1d:22:c2:2e:04:19:9b:47:48:
66:62:76:93:09:dc:17:23:d0:82:e3:73:1c:89:23:
6e:27:3d:d1:f9:97:3a:73:df:da:4e:d3:fc:d3:09:
d2:fc:5e:c3:b7:67:55:f3:80:11:c5:5e:da:8c:4c:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7A:45:84:D3:2C:2D:FF:B1:99:7A:4C:C4:93:87:AC:5C:28:3A:0A
X509v3 Authority Key Identifier:
keyid:25:29:7F:0C:4B:04:30:F3:0A:78:78:D5:1F:B3:B7:AC:11:25:00:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/646b5ebc-f4ee-4c8e-80a2-17b3e3acf734/1/25297F0C4B0430F30A7878D51FB3B7AC11250092.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSl_DEsEMPMKeHjVH7O3rBElAJI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/646b5ebc-f4ee-4c8e-80a2-17b3e3acf734/1/3138352e312e3134382e302f32342d3234203d3e203536373338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.148.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a1:c8:3c:de:01:15:d1:b6:dc:74:02:0a:04:87:36:23:c5:
5b:38:c9:7c:55:39:c4:10:72:b3:96:59:0c:4d:6b:bb:89:17:
89:7a:38:66:b2:d9:31:a5:9a:b4:42:14:d9:af:59:08:86:21:
21:51:0d:c0:6a:96:dd:39:d0:ec:0f:73:43:7b:7d:e5:3b:76:
af:c7:db:b4:2b:0a:4d:c5:6a:29:00:06:3b:bc:73:07:f2:99:
66:ad:92:1c:ea:54:3e:1d:af:d4:e5:3b:a3:d0:f1:6c:3e:ec:
53:b9:28:ed:d4:d8:17:e7:9d:5e:62:cd:af:af:c5:63:23:52:
05:19:f8:f6:f6:ed:e6:f2:86:97:2a:d1:a8:c2:da:dc:e0:23:
0c:5a:05:64:a2:10:52:d4:62:c8:3c:ec:92:73:3f:c3:84:30:
ec:85:ea:3d:61:01:e7:31:af:c9:84:ae:50:09:16:6f:59:29:
bf:3f:71:9c:fd:00:af:06:7d:07:00:63:64:20:f0:5a:3a:fc:
f9:7f:e0:ee:47:fa:38:15:07:a4:ba:b9:9c:9e:cb:08:c9:2e:
77:53:a3:71:2c:50:d8:97:98:4d:ba:d0:cf:46:95:88:ab:81:
d0:f1:14:41:a5:20:10:12:fc:fc:41:f6:3e:50:d7:58:af:71:
29:b9:18:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:06 2024 by rpki-client on console-ams.rpki-client.org