Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ee45b736-fe15-438d-9769-71c9b7f6187b/0/3134362e31392e38362e302f32342d3234203d3e20313339363630.roa
File: 3134362e31392e38362e302f32342d3234203d3e20313339363630.roa (raw, json)
Hash identifier: tfrO66xmEhwiM+RveQMb/4op66nWs2pOLFSUX2SjyQU=
Subject key identifier: 76:7C:9A:8A:DF:52:5B:AE:F9:6F:2A:30:52:77:49:B0:4C:28:7D:50
Certificate issuer: /CN=086e606484fd4dbc6c9099fe4b67a8f14d88a4c5
Certificate serial: 035CD656D82382D4C75586909EEF56D8F5482CC2
Authority key identifier: 08:6E:60:64:84:FD:4D:BC:6C:90:99:FE:4B:67:A8:F1:4D:88:A4:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CG5gZIT9TbxskJn-S2eo8U2IpMU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ee45b736-fe15-438d-9769-71c9b7f6187b/0/3134362e31392e38362e302f32342d3234203d3e20313339363630.roa
Signing time: Wed 22 Mar 2023 08:13:48 +0000
ROA not before: Wed 22 Mar 2023 08:08:48 +0000
ROA not after: Wed 20 Mar 2024 08:13:48 +0000
asID: 139660
IP address blocks: 146.19.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5c:d6:56:d8:23:82:d4:c7:55:86:90:9e:ef:56:d8:f5:48:2c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086e606484fd4dbc6c9099fe4b67a8f14d88a4c5
Validity
Not Before: Mar 22 08:08:48 2023 GMT
Not After : Mar 20 08:13:48 2024 GMT
Subject: CN=767C9A8ADF525BAEF96F2A30527749B04C287D50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:db:58:4b:dc:68:3b:cc:28:d1:a5:6a:f0:
97:34:69:77:2e:18:40:5c:fc:7f:16:a8:72:99:79:
43:db:4b:94:30:f2:f3:92:e9:20:61:18:d5:86:6e:
98:a9:50:d1:a2:82:bb:0c:44:63:cd:15:05:05:21:
78:a8:6d:22:bb:df:b9:0c:88:50:ac:23:a4:9e:89:
df:bf:43:e4:11:5a:68:7b:79:2c:91:60:72:0f:2a:
c6:f5:05:95:57:07:02:1f:57:99:e1:98:db:99:58:
38:f4:b1:b1:b1:e0:c3:9e:b5:be:fb:be:6c:8b:2e:
db:55:45:be:16:ab:50:79:eb:05:02:76:d9:36:24:
43:a1:d0:6a:47:46:20:73:cb:36:38:df:3d:72:88:
27:5f:98:cf:b8:22:01:b0:6d:d4:e8:5d:3f:34:b8:
d6:d2:16:b4:28:72:ca:35:47:a1:51:d3:d9:ab:a9:
7e:64:03:50:ca:77:9c:61:05:4c:c1:d3:dd:ec:d8:
1d:eb:76:36:e0:8b:09:c5:c7:c1:ec:de:58:81:ec:
2f:c1:43:27:ee:5c:5f:37:ef:61:6c:81:74:7a:2d:
56:48:c0:18:7e:44:50:a8:99:c8:e8:30:4f:60:f5:
3d:08:83:8f:9e:58:c4:d1:af:f4:2e:31:c7:a2:00:
b4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7C:9A:8A:DF:52:5B:AE:F9:6F:2A:30:52:77:49:B0:4C:28:7D:50
X509v3 Authority Key Identifier:
keyid:08:6E:60:64:84:FD:4D:BC:6C:90:99:FE:4B:67:A8:F1:4D:88:A4:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ee45b736-fe15-438d-9769-71c9b7f6187b/0/086E606484FD4DBC6C9099FE4B67A8F14D88A4C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CG5gZIT9TbxskJn-S2eo8U2IpMU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ee45b736-fe15-438d-9769-71c9b7f6187b/0/3134362e31392e38362e302f32342d3234203d3e20313339363630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.86.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d5:71:c7:e7:82:73:f7:cf:2b:6d:66:8f:8c:8f:b4:a9:8c:
12:15:53:52:28:ab:26:ee:f8:8d:5c:b8:ea:e3:f7:4c:5d:24:
1b:b4:fb:43:eb:63:5f:54:65:1f:e6:6e:ac:9b:96:ed:27:fb:
96:43:6a:cf:ec:7e:6c:fc:0f:ad:6c:82:b8:48:48:19:5c:dc:
6a:d0:f2:fb:79:81:43:f8:43:fb:ff:90:57:2d:39:13:e8:74:
b1:ac:d7:80:7b:1a:16:f3:97:cc:6f:7e:9e:21:45:29:fb:27:
dc:db:65:49:6f:00:8d:d0:cf:e3:10:17:5e:35:4d:43:6a:ab:
fe:7f:fb:26:c5:c2:7e:74:3d:da:20:26:0e:84:ea:a2:3f:10:
80:d6:f6:c8:18:3a:cf:d0:a2:16:ed:63:9f:e3:a6:ba:1a:bd:
a9:ac:7b:77:c1:d2:25:a8:3f:0b:86:a7:5a:cb:48:51:35:1c:
72:0d:29:88:f9:87:e5:97:4b:96:fc:9e:e9:86:15:17:50:ae:
d4:13:b8:25:9a:11:29:ca:24:7e:bb:78:e8:7f:5f:25:33:1c:
00:11:bc:7b:b7:49:c1:e6:71:37:05:85:0f:ae:8a:cf:f9:50:
a1:43:46:69:2d:1e:84:45:e9:27:19:68:d0:ce:43:9b:64:1c:
ac:4f:14:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:09 2025 by rpki-client