Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/3134362e31392e35332e302f32342d3234203d3e20313432313131.roa
File: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (raw, json)
Hash identifier: XA8Z0UGN6UN8fQLjlYbFDCpbyjGG4cbx3Ss5Lz2cJgY=
Subject key identifier: A2:AA:6A:77:94:79:8C:1C:23:52:56:84:AE:3A:76:68:8A:84:C1:8A
Certificate issuer: /CN=449d34b3ae807293e23a0f8d13d8f4581073b255
Certificate serial: 374108971660BAE529D6EA986CB3ED1D1DB6C47D
Authority key identifier: 44:9D:34:B3:AE:80:72:93:E2:3A:0F:8D:13:D8:F4:58:10:73:B2:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ00s66AcpPiOg-NE9j0WBBzslU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/3134362e31392e35332e302f32342d3234203d3e20313432313131.roa
Signing time: Thu 04 May 2023 07:47:42 +0000
ROA not before: Thu 04 May 2023 07:42:42 +0000
ROA not after: Thu 02 May 2024 07:47:42 +0000
asID: 142111
IP address blocks: 146.19.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:41:08:97:16:60:ba:e5:29:d6:ea:98:6c:b3:ed:1d:1d:b6:c4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449d34b3ae807293e23a0f8d13d8f4581073b255
Validity
Not Before: May 4 07:42:42 2023 GMT
Not After : May 2 07:47:42 2024 GMT
Subject: CN=A2AA6A7794798C1C23525684AE3A76688A84C18A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:17:4c:ed:4c:34:17:0d:f0:46:89:81:3c:
72:f8:28:fc:32:06:43:33:4d:0a:65:5a:a6:7f:7d:
32:dc:17:82:0e:9c:28:2b:bd:be:2c:c6:29:90:2e:
d1:dd:38:b4:5b:90:89:c7:2f:6b:62:a5:88:ad:34:
30:06:a9:91:bc:de:14:74:db:14:65:28:79:c8:a3:
33:7e:b6:12:d8:e7:44:fe:13:f9:8b:75:13:80:c9:
9e:54:44:a0:9c:38:ae:48:3a:53:c9:b8:e5:97:90:
aa:77:20:45:ec:cf:3d:d7:ec:69:eb:d1:a7:3a:f3:
c9:96:23:b4:f0:b0:e4:36:15:c5:45:e1:8d:4a:b4:
f7:52:bf:e8:72:dc:90:1b:3f:8b:75:47:b8:6a:37:
80:56:4d:dc:49:18:e9:54:5e:c7:35:a1:11:ef:25:
27:af:ec:f6:21:6a:4a:06:ae:48:a4:ab:77:c1:9d:
4e:27:07:ba:0c:2f:65:c7:f5:bc:4c:8c:5c:1e:50:
71:52:66:03:e3:55:ab:86:f4:01:41:b8:8f:b9:67:
75:56:99:2c:59:8e:be:85:b4:95:65:6b:45:4e:65:
e1:e6:bb:82:ce:f7:e1:3d:3e:2d:a7:1c:da:68:9a:
c8:35:7a:dc:ff:9e:d1:dc:d5:e9:83:d8:35:6f:40:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AA:6A:77:94:79:8C:1C:23:52:56:84:AE:3A:76:68:8A:84:C1:8A
X509v3 Authority Key Identifier:
keyid:44:9D:34:B3:AE:80:72:93:E2:3A:0F:8D:13:D8:F4:58:10:73:B2:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/449D34B3AE807293E23A0F8D13D8F4581073B255.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ00s66AcpPiOg-NE9j0WBBzslU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/3134362e31392e35332e302f32342d3234203d3e20313432313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.53.0/24
Signature Algorithm: sha256WithRSAEncryption
65:4b:17:8a:a6:97:fd:16:ba:c8:21:df:10:ec:a8:40:f8:a6:
19:1c:99:f0:35:d9:65:8d:54:b2:5f:6f:84:ce:ed:8e:e7:64:
8c:f8:f9:d2:a3:98:67:11:85:6a:75:5c:2e:4d:24:63:54:b6:
f3:5f:21:dc:f1:72:ea:a7:a9:c4:e5:23:44:d5:c4:4e:6d:0e:
d1:72:d0:18:20:55:d0:9f:d0:0d:ec:9a:d0:45:03:4f:92:3e:
29:a8:5b:a7:dc:75:16:02:9f:bf:8d:ed:63:9b:4f:4e:cf:24:
57:1d:f6:63:4d:ab:d9:d2:e1:4c:e8:b9:33:ef:48:c1:e9:04:
2e:9e:10:74:ee:44:41:26:bc:6c:85:40:f1:8d:7f:60:7a:8e:
20:cc:f0:7b:a5:15:58:44:64:d5:6b:a0:0e:6c:44:72:b0:9d:
34:ba:1e:95:50:c1:5e:21:af:22:61:fc:55:81:f4:e2:a9:2f:
3c:76:d0:e6:ce:79:81:46:3d:89:cc:e6:12:16:fc:84:d0:73:
44:87:56:08:5c:45:96:aa:f0:3a:9f:28:55:4e:e2:49:84:05:
01:03:25:d0:d5:d3:43:0e:57:99:11:09:3b:33:d3:68:13:07:
c5:6d:3a:8b:2e:38:23:a4:10:9e:54:25:c2:0d:e9:c1:87:7b:
10:05:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 6 07:08:03 2023 by rpki-client on console-ams.rpki-client.org