Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd8bbcab-b55f-4551-afed-83e6fb646138/1/3134362e31392e39372e302f32342d3234203d3e203531303838.roa
File: 3134362e31392e39372e302f32342d3234203d3e203531303838.roa (raw, json)
Hash identifier: oIs0/do7a7kPzE4RZDaD7cJ1tY0wXGd1DvVlud1YKNY=
Subject key identifier: 60:8F:10:23:EE:5E:3D:55:AC:B8:FA:9D:EA:36:10:13:FE:B1:50:8C
Certificate issuer: /CN=0d5f4fd1267e75116cfbbf22bd52efbda97fb9c4
Certificate serial: 46983DF0CF68962AABB0674B3A50230EC4447FAE
Authority key identifier: 0D:5F:4F:D1:26:7E:75:11:6C:FB:BF:22:BD:52:EF:BD:A9:7F:B9:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DV9P0SZ-dRFs-78ivVLvval_ucQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd8bbcab-b55f-4551-afed-83e6fb646138/1/3134362e31392e39372e302f32342d3234203d3e203531303838.roa
Signing time: Mon 05 Dec 2022 11:50:55 +0000
ROA not before: Mon 05 Dec 2022 11:45:55 +0000
ROA not after: Mon 04 Dec 2023 11:50:55 +0000
asID: 51088
IP address blocks: 146.19.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:98:3d:f0:cf:68:96:2a:ab:b0:67:4b:3a:50:23:0e:c4:44:7f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d5f4fd1267e75116cfbbf22bd52efbda97fb9c4
Validity
Not Before: Dec 5 11:45:55 2022 GMT
Not After : Dec 4 11:50:55 2023 GMT
Subject: CN=608F1023EE5E3D55ACB8FA9DEA361013FEB1508C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d4:06:53:72:fd:a1:7f:1c:03:9c:87:da:be:
e4:04:56:57:78:81:1b:35:0c:d3:a0:97:7d:b3:06:
3e:42:15:62:cb:8f:fa:24:07:aa:2b:cb:ae:f2:da:
ce:50:fb:f7:38:8c:43:8e:0d:17:04:46:84:f5:12:
68:0d:55:68:2a:6a:80:2a:f1:86:a4:ef:21:a0:39:
6e:64:53:4f:a1:b9:36:f9:79:e3:d9:89:9a:0a:30:
c6:94:e6:c1:61:5d:d3:fd:02:87:91:82:9f:16:6e:
ff:c9:f4:63:db:45:8e:b2:eb:08:75:93:ab:06:e3:
ba:a1:00:9f:81:eb:c8:6b:7f:19:a7:a1:d2:9d:6a:
94:cd:7c:45:39:e3:90:12:12:8d:d2:08:4f:aa:f2:
11:13:85:f7:a1:e9:a4:3f:cb:00:b8:fe:f7:2e:fd:
89:95:a8:2a:d2:52:0c:53:04:f2:c1:62:70:a7:6b:
6d:c1:0b:a6:69:13:fb:32:99:ae:e2:6c:53:8a:85:
b5:38:21:ed:ec:a2:d7:3b:3d:94:df:3e:d2:b7:9d:
4c:82:de:28:82:48:db:c8:09:d1:42:9f:14:47:a4:
da:8d:1f:73:78:1c:53:2c:7a:3b:a0:46:6d:ee:81:
fd:34:5b:2d:d4:6a:83:43:5e:66:ac:1c:b7:1e:ae:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8F:10:23:EE:5E:3D:55:AC:B8:FA:9D:EA:36:10:13:FE:B1:50:8C
X509v3 Authority Key Identifier:
keyid:0D:5F:4F:D1:26:7E:75:11:6C:FB:BF:22:BD:52:EF:BD:A9:7F:B9:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd8bbcab-b55f-4551-afed-83e6fb646138/1/0D5F4FD1267E75116CFBBF22BD52EFBDA97FB9C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DV9P0SZ-dRFs-78ivVLvval_ucQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd8bbcab-b55f-4551-afed-83e6fb646138/1/3134362e31392e39372e302f32342d3234203d3e203531303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.97.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:13:47:89:ec:07:a1:7a:c5:47:ef:b3:61:6d:bd:4d:a0:3a:
fb:f8:8b:ab:e7:f8:ee:a9:26:33:e9:9c:b5:17:11:ca:60:dc:
ee:12:e8:ea:a1:81:42:81:4f:4c:09:f2:4d:ee:ef:4e:a1:be:
77:44:67:47:57:c9:2c:6c:98:df:15:e7:e3:43:ce:4d:06:25:
74:3e:50:e5:b3:71:0c:6c:31:da:5c:c5:d8:e3:a8:20:0b:89:
23:6c:dc:1a:37:52:87:37:e7:91:e3:12:12:79:70:6c:dc:d8:
0d:49:38:e5:08:6a:16:fa:08:1a:8f:15:a2:94:64:cc:d5:05:
44:a4:5f:33:9b:49:fd:cc:8c:af:08:c6:11:23:a8:ef:ff:b9:
c5:3c:68:81:46:b5:e1:5b:45:06:42:78:51:4a:7d:bd:9f:d8:
44:13:a8:b2:77:b6:70:d2:f0:c7:95:00:dc:47:58:3d:86:e4:
3e:5a:8b:db:2d:e2:39:db:0c:56:ef:8b:32:d5:74:6f:90:39:
ab:e4:ce:df:ad:2e:a2:36:b3:ae:3e:ff:57:f7:3a:75:1f:4d:
bf:ee:21:27:67:8b:18:8f:81:37:ac:33:10:1c:86:43:db:09:
da:b6:7e:0e:45:44:20:27:13:6e:28:0a:20:a9:3d:68:f6:c4:
f1:b5:5d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:49 2023 by rpki-client on console-ams.rpki-client.org