Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8b50e534-c05c-4176-b397-8c9a63effcd9/0/3134362e31392e32322e302f32342d3234203d3e20323039323432.roa
File: 3134362e31392e32322e302f32342d3234203d3e20323039323432.roa (raw, json)
Hash identifier: Od4TVyPIR589SIObgjWhNda5l+IHDnxDnIRMh0W2s04=
Subject key identifier: F2:17:FC:3D:4B:4D:42:DE:D9:92:F2:8D:F7:61:5E:CA:D9:BD:0F:0A
Certificate issuer: /CN=2b6e7d29f16acb46c58258ca9084e431dab0e783
Certificate serial: 74B4C612FA640F8EC002E3B5BD651EA521266A7F
Authority key identifier: 2B:6E:7D:29:F1:6A:CB:46:C5:82:58:CA:90:84:E4:31:DA:B0:E7:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K259KfFqy0bFgljKkITkMdqw54M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8b50e534-c05c-4176-b397-8c9a63effcd9/0/3134362e31392e32322e302f32342d3234203d3e20323039323432.roa
Signing time: Thu 23 Mar 2023 16:37:36 +0000
ROA not before: Thu 23 Mar 2023 16:32:36 +0000
ROA not after: Thu 21 Mar 2024 16:37:36 +0000
asID: 209242
IP address blocks: 146.19.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:b4:c6:12:fa:64:0f:8e:c0:02:e3:b5:bd:65:1e:a5:21:26:6a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6e7d29f16acb46c58258ca9084e431dab0e783
Validity
Not Before: Mar 23 16:32:36 2023 GMT
Not After : Mar 21 16:37:36 2024 GMT
Subject: CN=F217FC3D4B4D42DED992F28DF7615ECAD9BD0F0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:d2:db:cb:87:59:9e:36:a2:17:a0:2a:c9:
c2:03:40:f3:ee:37:37:f2:d3:aa:5c:67:1d:a6:d6:
ce:40:13:b6:06:b6:48:cc:eb:d1:27:a1:23:1a:54:
49:b4:79:6e:bf:c7:fb:73:cd:ef:cd:84:14:32:bb:
92:32:9b:66:36:f0:54:dd:b9:b4:31:c7:c7:c6:a6:
6d:e1:8f:44:72:1e:5b:48:38:d9:04:fc:5d:1f:5e:
0c:08:ed:fb:f3:2c:ba:ed:42:df:1c:2d:8f:3e:6f:
a0:b6:ee:4e:61:25:ae:e5:3a:ea:51:ec:ff:90:ee:
f3:29:c9:a0:d6:c7:76:55:8b:e1:7d:49:e2:36:30:
77:94:8b:80:72:a2:96:ea:f6:82:20:34:f8:a0:0b:
82:cd:81:fe:d0:3d:2b:ad:ea:3c:5b:60:0b:ae:ca:
53:c9:ea:51:4a:dc:5e:a1:2f:16:77:61:b0:15:44:
fa:68:67:e3:ce:dd:3c:dc:2d:e3:7d:c6:2b:fb:26:
a1:33:e3:84:24:5d:e7:13:6d:d1:6d:a3:d0:89:a8:
2d:83:03:8b:9f:cf:d3:e7:a4:71:c0:31:ef:15:d5:
0d:6f:60:d7:9a:aa:aa:7b:e9:d2:0f:0e:4e:07:0b:
63:d9:be:60:8e:2e:57:51:6f:03:5e:16:e5:49:a6:
d8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:17:FC:3D:4B:4D:42:DE:D9:92:F2:8D:F7:61:5E:CA:D9:BD:0F:0A
X509v3 Authority Key Identifier:
keyid:2B:6E:7D:29:F1:6A:CB:46:C5:82:58:CA:90:84:E4:31:DA:B0:E7:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8b50e534-c05c-4176-b397-8c9a63effcd9/0/2B6E7D29F16ACB46C58258CA9084E431DAB0E783.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K259KfFqy0bFgljKkITkMdqw54M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8b50e534-c05c-4176-b397-8c9a63effcd9/0/3134362e31392e32322e302f32342d3234203d3e20323039323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.22.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:56:07:ed:2f:d2:19:ac:92:83:da:b0:18:0e:8e:16:3e:92:
01:8b:06:a6:39:bb:7b:79:64:b5:0d:21:0d:c6:4b:e5:51:98:
74:60:82:6a:dd:76:de:df:59:2e:87:0f:f8:a5:09:4a:da:cb:
ce:13:6c:b6:ba:99:a2:e2:fb:cf:f8:6d:5d:da:0f:91:07:65:
9a:8e:48:c8:84:af:ec:0f:19:06:81:30:af:85:c5:94:90:46:
47:be:61:5b:e2:1a:b7:fb:5d:89:f2:69:fd:4e:7e:0f:f6:5c:
3d:e1:1d:2e:e3:38:f7:13:41:e5:c9:4e:3f:6e:17:4c:ca:a1:
f0:c2:24:b8:5a:19:e0:a5:e1:31:fe:64:90:73:ef:1c:7a:fb:
79:67:b7:ef:01:30:36:5e:25:b2:65:ab:dc:31:1b:56:b9:82:
be:84:1e:44:3f:67:14:48:0d:5d:9d:03:e0:84:61:33:2d:d0:
3e:bf:b2:19:0b:1d:90:89:6c:30:c9:27:ad:0d:6a:89:fa:48:
4c:cb:8d:45:e2:06:b5:04:e9:9f:6a:24:c4:40:62:3d:98:f9:
ca:d9:5e:8d:2b:60:e6:fb:cc:96:0b:42:f1:fb:2a:11:f5:53:
36:07:0e:4f:9d:10:d0:5b:3c:9a:c9:b1:06:7c:22:fe:7e:2d:
a1:a3:d3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:52 2025 by rpki-client