Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/3134362e31392e32332e302f32342d3234203d3e203631333137.roa
File: 3134362e31392e32332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: P+g/RSKt4HAxR9HohWdfZOzZyozkGT2slBFYD2b43hk=
Subject key identifier: B1:7B:33:F0:AA:E6:84:03:03:E2:68:2D:12:A4:9A:62:FB:22:00:EB
Certificate issuer: /CN=493377f0bd467548da4ccd542329a7156b8972a2
Certificate serial: 0D9EC29F632A51A67D725EDA68A86F853219C555
Authority key identifier: 49:33:77:F0:BD:46:75:48:DA:4C:CD:54:23:29:A7:15:6B:89:72:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STN38L1GdUjaTM1UIymnFWuJcqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/3134362e31392e32332e302f32342d3234203d3e203631333137.roa
Signing time: Thu 19 Oct 2023 09:53:56 +0000
ROA not before: Thu 19 Oct 2023 09:48:56 +0000
ROA not after: Thu 17 Oct 2024 09:53:56 +0000
asID: 61317
IP address blocks: 146.19.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:9e:c2:9f:63:2a:51:a6:7d:72:5e:da:68:a8:6f:85:32:19:c5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493377f0bd467548da4ccd542329a7156b8972a2
Validity
Not Before: Oct 19 09:48:56 2023 GMT
Not After : Oct 17 09:53:56 2024 GMT
Subject: CN=B17B33F0AAE6840303E2682D12A49A62FB2200EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d3:ec:d0:d8:f4:4c:3a:71:2c:79:23:90:4f:
95:32:43:e1:31:1a:fc:a4:dd:99:f7:f9:7f:01:e2:
71:7c:3b:21:a8:f2:39:b2:b9:42:5e:05:85:74:19:
9f:05:7d:fc:05:bb:90:92:25:11:06:a9:8d:7c:bd:
70:76:f7:dc:a2:2f:84:c2:a2:67:ae:40:fe:8b:b1:
f8:5b:29:3a:0b:9e:3e:58:ea:10:f5:75:af:7e:f3:
fb:00:d2:b8:b4:30:4b:86:96:4f:f6:b6:af:ba:5f:
c9:37:f6:61:08:b5:3c:b2:ab:ae:b2:e5:e9:e4:fa:
df:c4:cd:bb:75:be:3f:1d:96:5e:18:3c:0b:f3:21:
15:da:13:97:c0:a1:fd:10:71:00:a3:1f:86:b3:d0:
30:eb:b2:73:d4:32:0b:39:79:cc:68:28:51:44:b2:
94:9b:48:6a:c7:20:0e:08:13:0f:2e:b7:0a:38:52:
9e:44:a0:22:9f:86:4b:6e:33:9d:3b:25:2b:b7:2c:
13:ab:5c:47:b8:49:50:5e:2a:34:d4:e5:82:1e:38:
2c:58:8d:b6:df:c1:41:aa:2d:3f:5c:63:be:1b:7a:
52:2d:b0:80:57:8b:dd:cd:b7:dd:99:bb:22:b1:03:
b0:95:47:42:52:2d:a6:a3:c3:ab:9e:f8:3c:7e:6a:
9a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7B:33:F0:AA:E6:84:03:03:E2:68:2D:12:A4:9A:62:FB:22:00:EB
X509v3 Authority Key Identifier:
keyid:49:33:77:F0:BD:46:75:48:DA:4C:CD:54:23:29:A7:15:6B:89:72:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/493377F0BD467548DA4CCD542329A7156B8972A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STN38L1GdUjaTM1UIymnFWuJcqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/3134362e31392e32332e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.23.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ca:b6:47:60:25:95:d8:e0:a1:7d:42:b4:03:41:bb:bd:8c:
57:0a:00:82:ef:d4:c9:05:f2:22:a4:5d:f9:d8:53:1c:54:06:
e6:70:c4:49:5e:48:4a:38:2c:2c:31:a6:fa:69:b8:61:c5:5f:
76:0e:60:95:9e:22:9a:b1:d4:55:6e:1a:f4:1a:02:14:a2:50:
4e:71:71:55:c1:e1:fa:0c:a3:a3:78:d2:7e:6e:13:38:9c:51:
88:ca:24:95:35:bd:9a:8e:88:a5:fe:c3:bb:58:2f:d8:35:c7:
d8:62:dc:b9:f3:b1:21:b9:a3:a7:b4:fa:52:0f:b6:c8:06:02:
38:e0:34:97:c0:1b:6e:49:c2:85:9f:c9:6d:a5:be:c1:22:87:
e4:6d:6a:c4:3f:10:c8:67:e8:a9:2f:40:59:07:79:4b:05:33:
12:be:24:80:8d:43:ad:99:4a:81:76:0c:60:75:02:27:69:0e:
b8:39:c6:eb:7d:96:39:63:38:3b:c1:f9:45:06:60:57:2e:8b:
8a:12:3b:bb:8a:36:a9:75:64:e5:e3:8f:d1:70:08:b4:87:80:
ab:55:a1:0d:ac:c6:0a:ff:0d:48:2f:f7:ec:20:21:bd:4f:12:
30:60:a5:28:5c:a6:e2:66:81:10:40:66:0e:c8:de:28:2b:06:
ca:0c:e2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 15:00:48 2023 by rpki-client on console-fra.rpki-client.org