Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/3134362e31392e3231362e302f32342d3234203d3e20323033373930.roa
File: 3134362e31392e3231362e302f32342d3234203d3e20323033373930.roa (raw, json)
Hash identifier: yC0wn685WtI0SVgoTDATwgqqWRqPaGIuyqwwwS/dFLw=
Subject key identifier: C0:99:5F:A2:05:AD:33:5E:B4:21:B6:F2:8D:23:65:D0:D5:41:AB:1D
Certificate issuer: /CN=8a9068a570898a8fc4eaf9b5dbcb95db81a9a840
Certificate serial: 1DDC875943E0D91BB3D1C5361B862684D3A1698C
Authority key identifier: 8A:90:68:A5:70:89:8A:8F:C4:EA:F9:B5:DB:CB:95:DB:81:A9:A8:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ipBopXCJio_E6vm128uV24GpqEA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/3134362e31392e3231362e302f32342d3234203d3e20323033373930.roa
Signing time: Tue 24 Oct 2023 16:27:36 +0000
ROA not before: Tue 24 Oct 2023 16:22:36 +0000
ROA not after: Tue 22 Oct 2024 16:27:36 +0000
asID: 203790
IP address blocks: 146.19.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:dc:87:59:43:e0:d9:1b:b3:d1:c5:36:1b:86:26:84:d3:a1:69:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9068a570898a8fc4eaf9b5dbcb95db81a9a840
Validity
Not Before: Oct 24 16:22:36 2023 GMT
Not After : Oct 22 16:27:36 2024 GMT
Subject: CN=C0995FA205AD335EB421B6F28D2365D0D541AB1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:97:d3:82:15:9e:01:07:23:04:f3:21:83:0a:
e0:fc:42:8e:5b:7c:a4:b8:7f:f2:a0:1d:73:07:5b:
1b:31:b7:73:ad:11:ee:95:ef:56:75:ba:36:78:84:
8f:df:15:b3:7e:85:be:aa:0d:00:c4:8f:1c:64:08:
27:09:fc:86:6a:4a:b1:01:1d:99:bb:80:a2:4e:52:
7d:47:2e:0c:b0:ea:75:66:d6:18:45:16:1b:26:ec:
b0:38:cc:a2:f3:2e:23:43:f3:0b:1e:4c:7d:71:5c:
6d:06:46:26:df:df:38:08:fc:5c:ec:5f:0a:cd:ea:
36:9e:eb:62:31:e0:a5:e3:92:b6:55:31:44:d4:94:
b1:da:89:01:a5:33:b8:c6:db:34:38:11:87:81:23:
c5:77:3b:9b:aa:c0:52:d8:a0:56:c8:e8:ed:95:00:
9c:fb:9a:fb:cb:eb:9d:87:ab:0a:4b:2e:7b:aa:8e:
07:80:2c:16:4b:db:3f:da:1b:dc:53:95:21:1d:94:
16:a4:09:bd:22:7e:fb:e4:c7:01:8c:3e:7a:f7:1b:
8e:2c:6e:49:f6:e2:33:67:05:fe:12:41:ec:3e:4c:
dc:97:2f:b4:84:3b:f2:02:f6:f7:f2:30:61:2d:1f:
fb:a6:0d:73:cb:6f:1e:89:9f:fd:a0:21:ad:cf:18:
94:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:99:5F:A2:05:AD:33:5E:B4:21:B6:F2:8D:23:65:D0:D5:41:AB:1D
X509v3 Authority Key Identifier:
keyid:8A:90:68:A5:70:89:8A:8F:C4:EA:F9:B5:DB:CB:95:DB:81:A9:A8:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/8A9068A570898A8FC4EAF9B5DBCB95DB81A9A840.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ipBopXCJio_E6vm128uV24GpqEA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b434bfeb-f84a-48a4-8bac-c3a58f43bce5/0/3134362e31392e3231362e302f32342d3234203d3e20323033373930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.216.0/24
Signature Algorithm: sha256WithRSAEncryption
42:0a:45:79:49:32:a9:3d:b0:e3:70:4c:ac:63:f6:7f:d2:2c:
a5:d4:55:b7:b0:84:98:2f:7f:a9:9c:77:a7:76:7b:cd:f4:d7:
76:21:f1:f7:e8:bf:a1:0d:cb:e9:5b:a7:66:1a:62:4d:05:63:
4d:0b:c6:54:f1:ea:e5:bf:d5:57:82:cb:3c:49:95:47:ef:cd:
51:03:5e:16:6f:7c:71:7b:05:35:1d:cf:f5:7e:3e:1d:7e:3f:
87:c2:b3:3f:84:fd:37:46:7c:6f:99:a9:81:6e:c6:ec:f5:49:
a2:de:4f:67:58:8b:2e:fb:f6:cc:0e:81:d6:98:c6:e0:52:ce:
4a:8c:f6:fe:f2:5e:b5:b0:11:3f:9f:62:96:a1:8a:ef:25:b1:
7b:6d:3a:2c:26:62:56:de:4e:97:ca:da:85:6f:2d:c0:56:a6:
ce:32:4c:be:94:6c:f1:66:14:fb:e8:93:03:85:0a:25:df:2b:
d8:6b:05:97:3c:7f:0a:ba:5b:c7:e0:a7:81:e5:da:13:68:ae:
30:29:ac:07:ad:bc:1e:20:7d:f3:1f:1b:8f:bd:e3:00:30:2b:
bf:d8:c1:c4:7b:8e:86:b9:4c:88:13:4d:0f:13:5f:43:0d:6d:
b4:f9:16:c3:09:bc:26:27:b4:1f:22:40:fc:ed:1a:d5:e6:f6:
b1:b2:52:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 09:15:15 2023 by rpki-client on console-fra.rpki-client.org