Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/3139342e35392e3232332e302f32342d3234203d3e20313430313535.roa
File: 3139342e35392e3232332e302f32342d3234203d3e20313430313535.roa (raw, json)
Hash identifier: ISmAr1F6Z4ckmhjWzhCPHeF5UITyj76WBEcfrUg7uPw=
Subject key identifier: 4F:AD:16:82:22:E5:57:2E:E3:34:56:37:79:7B:73:E5:9F:C7:45:82
Certificate issuer: /CN=fd1dcaa8fb487991afbb8f182f73e457ccb1f884
Certificate serial: 5AAD74C307AEFD7EC69268D1D58681B4B16D8C46
Authority key identifier: FD:1D:CA:A8:FB:48:79:91:AF:BB:8F:18:2F:73:E4:57:CC:B1:F8:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_R3KqPtIeZGvu48YL3PkV8yx-IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/3139342e35392e3232332e302f32342d3234203d3e20313430313535.roa
Signing time: Wed 05 Jul 2023 05:15:22 +0000
ROA not before: Wed 05 Jul 2023 05:10:22 +0000
ROA not after: Wed 03 Jul 2024 05:15:22 +0000
asID: 140155
IP address blocks: 194.59.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ad:74:c3:07:ae:fd:7e:c6:92:68:d1:d5:86:81:b4:b1:6d:8c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1dcaa8fb487991afbb8f182f73e457ccb1f884
Validity
Not Before: Jul 5 05:10:22 2023 GMT
Not After : Jul 3 05:15:22 2024 GMT
Subject: CN=4FAD168222E5572EE3345637797B73E59FC74582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:73:76:5a:7b:11:0a:ed:9c:76:06:ee:ba:
da:3c:ac:e7:92:1a:2b:ec:83:65:6f:df:2f:a8:a0:
e7:54:d1:82:54:c2:23:49:82:f6:39:56:f0:13:31:
2f:6e:fb:50:93:0c:7d:ab:24:d7:27:a7:74:f9:75:
a7:87:da:29:90:28:cd:b5:c1:86:c4:e7:9b:4c:c9:
bf:38:d8:15:4a:b6:20:93:63:83:d2:3f:08:72:00:
dd:83:1c:65:ea:bb:cb:9b:d8:d6:0c:37:e3:72:fe:
73:82:18:58:a0:60:71:22:3d:82:5d:9f:27:00:1c:
e4:01:8b:1f:bf:22:68:f1:13:a7:9a:b9:f8:90:ba:
1e:3a:73:92:de:5d:ea:2b:11:d7:5b:c4:3e:d3:2a:
66:28:9b:d2:09:9d:9f:f0:d7:e9:7e:ad:98:7d:de:
09:0d:52:04:e8:32:31:fe:38:ba:8e:1b:1e:46:ad:
d2:bb:00:a1:47:98:55:12:f3:64:3f:d9:12:0a:68:
71:53:0b:9d:92:f7:c9:35:17:ae:92:7b:12:e0:76:
a4:c0:1a:df:82:64:0c:31:fd:bf:80:11:d1:dd:a0:
0f:f5:f5:d1:a0:4e:68:7f:76:82:50:ce:43:0f:ab:
69:7f:37:83:97:51:b9:30:ce:8d:6b:5d:f3:39:ed:
91:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AD:16:82:22:E5:57:2E:E3:34:56:37:79:7B:73:E5:9F:C7:45:82
X509v3 Authority Key Identifier:
keyid:FD:1D:CA:A8:FB:48:79:91:AF:BB:8F:18:2F:73:E4:57:CC:B1:F8:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/FD1DCAA8FB487991AFBB8F182F73E457CCB1F884.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_R3KqPtIeZGvu48YL3PkV8yx-IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d097597a-c01a-47ae-a01a-790a923ea522/0/3139342e35392e3232332e302f32342d3234203d3e20313430313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ee:7e:70:32:4f:9f:87:fb:1f:1a:06:ce:cb:48:65:8c:7d:
ce:31:1e:06:37:77:9f:3e:74:ff:d7:36:87:ea:f9:74:c4:89:
d8:ff:68:d3:27:37:7e:27:2f:ea:57:ba:e4:50:5e:2d:db:22:
ed:6c:9e:8f:8f:d9:b0:a8:53:33:dd:0c:47:6a:4f:f0:25:db:
7d:5c:5b:b9:97:38:21:76:21:14:a0:6f:51:69:bc:65:9d:b2:
36:6d:04:f7:ce:5b:65:65:d3:78:39:72:c1:95:90:4f:a9:6f:
27:1b:bc:14:36:79:5b:b5:66:c8:27:01:db:e1:78:27:7b:bc:
73:26:5b:36:40:a4:3c:27:a9:1b:7b:00:2d:81:1b:18:c2:19:
90:d5:aa:35:c9:3a:fc:2b:d3:90:81:d5:67:28:cc:70:58:25:
cd:27:45:71:a3:1c:5b:55:d8:be:b7:0a:df:fe:8c:46:57:f3:
c0:9d:0c:33:29:b2:ec:e2:0c:18:e6:0d:ec:5f:5b:24:24:8e:
99:c5:9d:92:96:e5:9f:ab:6b:cb:27:8e:67:cb:c9:a8:ce:38:
30:34:e6:73:37:2f:4b:51:63:d3:68:0a:db:98:56:c9:95:49:
18:e7:bf:62:7c:54:46:d3:db:23:01:a8:77:aa:f8:3f:1b:66:
cb:4e:3c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-fra.rpki-client.org