Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/3134362e31392e35332e302f32342d3234203d3e203633303233.roa
File: 3134362e31392e35332e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier: JfqItKBXDdBK3/M9521plj4220aUSBOBo4T2760VQNQ=
Subject key identifier: 3F:92:49:4F:A4:0C:68:48:6F:C4:B0:83:DC:52:9E:F3:C3:81:26:6E
Certificate issuer: /CN=449d34b3ae807293e23a0f8d13d8f4581073b255
Certificate serial: 1C4426D0F08E43AE36F8090071E1A90272B3E84F
Authority key identifier: 44:9D:34:B3:AE:80:72:93:E2:3A:0F:8D:13:D8:F4:58:10:73:B2:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ00s66AcpPiOg-NE9j0WBBzslU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/3134362e31392e35332e302f32342d3234203d3e203633303233.roa
Signing time: Thu 04 May 2023 07:47:42 +0000
ROA not before: Thu 04 May 2023 07:42:42 +0000
ROA not after: Thu 02 May 2024 07:47:42 +0000
asID: 63023
IP address blocks: 146.19.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:44:26:d0:f0:8e:43:ae:36:f8:09:00:71:e1:a9:02:72:b3:e8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449d34b3ae807293e23a0f8d13d8f4581073b255
Validity
Not Before: May 4 07:42:42 2023 GMT
Not After : May 2 07:47:42 2024 GMT
Subject: CN=3F92494FA40C68486FC4B083DC529EF3C381266E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:4f:8d:32:b2:ea:a9:d7:b7:d4:8a:56:a2:
17:f5:66:88:d3:bf:49:be:0c:97:67:48:d5:9f:bd:
7f:67:ac:47:d9:f1:30:d3:c6:89:dc:e1:fd:9e:00:
d9:1d:85:c0:e5:0c:78:97:7c:63:a5:17:1f:1c:b7:
4a:67:c1:49:59:03:ef:8b:15:39:d9:b8:63:c7:3d:
60:92:74:88:08:44:72:56:ea:94:e7:cf:3d:af:0c:
de:04:9d:d1:9a:9f:0b:d7:81:95:15:7e:c9:d3:c7:
6a:f1:12:4d:a7:ad:93:50:5d:9e:77:e5:04:ff:e3:
3e:0c:88:8b:85:da:b8:95:8e:97:20:8f:2e:9f:dc:
e3:8e:17:05:3d:1d:c5:a9:dd:fa:2f:42:e6:eb:29:
a8:2b:f0:19:7e:fb:7a:56:9e:74:79:ce:c8:25:9f:
e2:1e:c3:6f:e2:8f:b0:02:fd:8c:27:d1:46:eb:68:
ad:12:2c:1c:27:43:1a:9a:d9:76:dc:c2:c1:14:80:
85:26:08:73:ac:f8:6d:31:28:c4:64:89:21:5f:8d:
3c:14:57:9c:f6:ae:87:30:33:50:56:aa:fd:98:6d:
0b:96:c7:0d:cf:01:92:64:be:cf:56:81:0d:92:fe:
28:b9:01:8b:72:00:fb:78:cc:66:9c:09:f9:14:06:
ae:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:92:49:4F:A4:0C:68:48:6F:C4:B0:83:DC:52:9E:F3:C3:81:26:6E
X509v3 Authority Key Identifier:
keyid:44:9D:34:B3:AE:80:72:93:E2:3A:0F:8D:13:D8:F4:58:10:73:B2:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/449D34B3AE807293E23A0F8D13D8F4581073B255.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ00s66AcpPiOg-NE9j0WBBzslU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bad83e8f-0023-48f8-8473-7909c99ac308/0/3134362e31392e35332e302f32342d3234203d3e203633303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.53.0/24
Signature Algorithm: sha256WithRSAEncryption
69:47:5e:03:54:ca:ee:f1:57:8d:31:c8:e8:3f:90:f1:42:2a:
6f:b7:18:e4:e1:80:ee:c9:cb:af:ce:f7:00:e0:46:4e:51:36:
4b:ac:01:fa:e3:ec:05:98:18:3e:da:0f:77:ad:24:e2:d6:15:
84:86:20:fd:31:b6:c9:2a:1d:94:01:79:29:b9:40:3b:36:0d:
f8:7d:9f:a5:4c:54:41:bd:cb:86:fa:3a:f3:1d:f3:b9:58:f5:
d6:26:de:93:cc:17:d1:44:ff:79:8e:83:18:d2:e0:58:18:d7:
1d:ee:0a:b3:f7:e4:05:db:f9:ef:72:18:83:69:bb:52:e6:7d:
6f:32:e6:78:64:81:76:ba:98:e8:7e:0f:b8:40:09:df:af:73:
cb:2c:2b:e3:48:f1:eb:72:60:91:1c:4b:af:c2:7d:c2:40:b7:
38:3f:a0:94:b8:98:b8:9d:1d:53:df:bd:ec:f7:7c:bb:10:c1:
d4:63:6f:4b:10:81:3d:e9:79:1c:a1:41:43:6f:93:27:d4:e6:
d3:8e:e0:4f:01:51:c2:a5:a2:97:ee:69:06:fd:fb:6d:6f:ce:
36:02:45:fd:74:25:06:0b:77:9f:1e:5b:90:8f:aa:c0:04:5b:
57:56:e1:10:81:25:43:d3:1e:1f:f3:d4:75:cc:02:df:57:36:
77:49:de:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:17 2024 by rpki-client on console-fra.rpki-client.org