Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/5/3231362e3134362e32342e302f32342d3234203d3e20323132363138.roa
File: 3231362e3134362e32342e302f32342d3234203d3e20323132363138.roa (raw, json)
Hash identifier: QTM2WTkhIg4lk8Goos8UTvNRe0AxrWrYokgI8Q7uf+4=
Subject key identifier: B5:85:8C:E2:CF:4D:C5:5C:55:4C:C6:71:63:46:9E:E1:47:66:62:B6
Certificate issuer: /CN=EF426F94C58940B7071B544A524D3C9EA3456B00
Certificate serial: 3B40DD69EA667718E7A91F147B722A7BB1E43B14
Authority key identifier: EF:42:6F:94:C5:89:40:B7:07:1B:54:4A:52:4D:3C:9E:A3:45:6B:00
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/EF426F94C58940B7071B544A524D3C9EA3456B00.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/5/3231362e3134362e32342e302f32342d3234203d3e20323132363138.roa
Signing time: Sun 09 Apr 2023 01:29:34 +0000
ROA not before: Sun 09 Apr 2023 01:24:34 +0000
ROA not after: Sun 07 Apr 2024 01:29:34 +0000
asID: 212618
IP address blocks: 216.146.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:40:dd:69:ea:66:77:18:e7:a9:1f:14:7b:72:2a:7b:b1:e4:3b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF426F94C58940B7071B544A524D3C9EA3456B00
Validity
Not Before: Apr 9 01:24:34 2023 GMT
Not After : Apr 7 01:29:34 2024 GMT
Subject: CN=B5858CE2CF4DC55C554CC67163469EE1476662B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:95:af:01:c9:30:36:6d:9b:e7:d4:69:66:
19:04:c6:31:38:1f:4b:62:55:34:ee:c6:f3:9d:69:
19:cf:ee:39:ef:0e:56:98:b4:32:ea:8e:ac:26:16:
fc:a1:62:3c:ae:a9:a9:10:81:ce:f7:02:65:d0:db:
c5:21:38:60:4e:24:21:2f:9c:45:6a:87:cb:7e:c0:
e8:43:36:f3:0c:52:56:7f:eb:77:fb:7d:cd:42:a5:
13:68:73:a7:bf:e8:5c:3e:f7:00:85:81:f3:2b:38:
b3:50:79:9b:3f:d8:53:a3:0c:15:4d:58:36:42:52:
1d:c5:8e:c0:30:03:7a:cc:63:21:bc:cf:72:47:3a:
95:8b:0e:1e:df:b2:af:bc:0a:4f:38:78:74:11:32:
97:20:33:af:7f:84:4f:3c:53:6a:c8:e5:e4:c1:ad:
96:e6:f9:fc:7b:65:eb:24:7e:ce:45:8f:7d:16:12:
b2:a1:a7:99:60:49:8b:70:31:9f:11:de:a3:09:ce:
96:28:e1:6b:39:88:bc:17:dc:d1:10:1d:75:7e:11:
50:3c:3a:78:7f:8c:9c:fd:b3:dc:74:31:c0:03:b4:
0a:28:ed:0f:f6:61:ff:a9:12:1a:bf:2e:3d:2c:eb:
72:4b:12:7b:e1:0d:87:d1:88:f3:ce:a1:13:02:c5:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:85:8C:E2:CF:4D:C5:5C:55:4C:C6:71:63:46:9E:E1:47:66:62:B6
X509v3 Authority Key Identifier:
keyid:EF:42:6F:94:C5:89:40:B7:07:1B:54:4A:52:4D:3C:9E:A3:45:6B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/5/EF426F94C58940B7071B544A524D3C9EA3456B00.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/EF426F94C58940B7071B544A524D3C9EA3456B00.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/75704d48-5a15-4128-af8d-fc769c5c25a1/5/3231362e3134362e32342e302f32342d3234203d3e20323132363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.146.24.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:11:01:6d:43:71:2d:96:80:21:99:33:6a:0e:69:7a:49:be:
f5:aa:29:12:fd:51:15:3c:e4:1c:3c:05:6b:01:25:86:ae:3b:
40:aa:a6:c9:00:83:20:b6:74:f1:d6:ba:12:68:cb:c1:07:01:
fe:2f:ed:53:e8:f6:99:80:2d:dd:7a:42:e8:9f:a3:10:97:08:
67:10:7d:50:b6:09:2b:8c:0b:6c:6e:5c:66:bd:fa:f1:f7:4d:
b3:90:67:46:02:70:fe:9b:64:65:23:c9:2b:49:1a:1b:9f:a8:
ec:16:65:51:08:72:d4:31:71:85:36:0c:12:b9:52:42:8f:b7:
12:3a:63:bb:ba:27:f1:d4:63:15:69:37:31:66:fc:b8:d5:18:
23:13:86:ed:68:ae:73:08:8d:09:af:da:83:4f:99:05:8f:a6:
b3:26:db:02:94:ce:ea:9b:87:20:19:d7:af:78:16:1e:5b:fb:
ea:8e:14:bc:4c:30:83:80:7c:e0:a5:60:f9:d7:53:73:2f:77:
c5:9a:cd:1c:36:46:eb:27:72:b9:07:26:18:74:78:52:ca:90:
72:ab:5e:0c:43:be:11:a7:66:53:d3:f9:a7:d0:df:f5:29:28:
e6:ee:6d:dc:e9:f0:e7:b4:d9:f0:ed:2a:3a:15:28:06:77:71:
74:1b:fe:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org