Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ee45b736-fe15-438d-9769-71c9b7f6187b/0/3134362e31392e38362e302f32342d3234203d3e203430363736.roa
File: 3134362e31392e38362e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier: lN3XjmD/grmb6He3OksnyheJK2PsnfIG4ocFH8LwPEQ=
Subject key identifier: 15:D6:EC:A5:F7:5A:9A:A1:50:BB:A5:4A:12:42:7D:AB:1D:81:53:F4
Certificate issuer: /CN=086e606484fd4dbc6c9099fe4b67a8f14d88a4c5
Certificate serial: 6352A82DA5FE78D6BB79C37CC6539EEFF3E6BFA1
Authority key identifier: 08:6E:60:64:84:FD:4D:BC:6C:90:99:FE:4B:67:A8:F1:4D:88:A4:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CG5gZIT9TbxskJn-S2eo8U2IpMU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ee45b736-fe15-438d-9769-71c9b7f6187b/0/3134362e31392e38362e302f32342d3234203d3e203430363736.roa
Signing time: Wed 22 Mar 2023 08:13:46 +0000
ROA not before: Wed 22 Mar 2023 08:08:46 +0000
ROA not after: Wed 20 Mar 2024 08:13:46 +0000
asID: 40676
IP address blocks: 146.19.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:52:a8:2d:a5:fe:78:d6:bb:79:c3:7c:c6:53:9e:ef:f3:e6:bf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086e606484fd4dbc6c9099fe4b67a8f14d88a4c5
Validity
Not Before: Mar 22 08:08:46 2023 GMT
Not After : Mar 20 08:13:46 2024 GMT
Subject: CN=15D6ECA5F75A9AA150BBA54A12427DAB1D8153F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:bb:01:6c:4c:29:b7:d9:b0:a9:53:c7:32:
56:b0:f2:fb:9a:2c:37:0f:6a:00:c7:74:e0:c8:19:
5d:77:1f:4d:d1:a1:42:5f:bc:d0:80:70:5e:3e:e9:
b6:d5:40:9e:cd:31:50:a7:96:b9:4b:83:30:7b:1c:
82:8d:f8:58:a4:b7:cd:e6:6c:4b:9a:00:23:06:8b:
6e:c0:5c:18:71:24:d1:0c:2f:c2:36:e1:7a:67:19:
9b:ea:b7:da:90:66:fe:b0:85:b9:5f:db:d5:10:19:
f6:78:f0:99:8a:74:24:95:63:96:1b:23:c0:6b:18:
39:0f:22:90:87:95:15:7f:65:79:bb:a3:04:34:d1:
f7:3d:57:47:dd:79:bd:d4:50:34:98:c8:a2:b7:a4:
27:d9:c8:d0:f6:d4:3b:d8:17:a8:ff:56:08:94:b2:
bd:2d:25:52:52:1c:56:a8:3e:9f:28:9d:ff:9d:b5:
8b:33:97:18:6d:66:f9:34:51:99:0e:ae:03:a9:31:
81:5a:3b:1a:f9:24:09:a9:bb:a2:3b:6c:4d:77:07:
5c:61:27:f8:8c:51:69:a8:bf:3b:a9:b9:90:f4:2f:
af:18:cd:30:7c:25:74:36:c1:72:d2:f8:58:5d:73:
58:f0:f6:6e:f6:a6:6b:82:c2:82:bd:37:00:48:28:
ef:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D6:EC:A5:F7:5A:9A:A1:50:BB:A5:4A:12:42:7D:AB:1D:81:53:F4
X509v3 Authority Key Identifier:
keyid:08:6E:60:64:84:FD:4D:BC:6C:90:99:FE:4B:67:A8:F1:4D:88:A4:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ee45b736-fe15-438d-9769-71c9b7f6187b/0/086E606484FD4DBC6C9099FE4B67A8F14D88A4C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CG5gZIT9TbxskJn-S2eo8U2IpMU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ee45b736-fe15-438d-9769-71c9b7f6187b/0/3134362e31392e38362e302f32342d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.86.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:6f:80:d7:ac:3f:41:48:34:4f:23:dd:c7:6e:f3:0f:be:2f:
88:d9:ab:1a:d7:2a:a9:0f:f3:19:7c:da:c8:1f:f2:cd:b9:48:
a8:43:86:69:82:d9:28:21:d6:a1:2f:46:8d:e5:6d:79:3f:22:
80:83:cd:06:a2:39:3d:a9:61:59:67:d8:6e:7f:42:da:62:79:
82:53:58:d6:83:5c:1d:c3:52:a6:15:63:f4:82:93:27:0c:e3:
6e:b0:05:eb:d8:45:ba:96:21:b2:98:c7:70:d9:83:ab:da:8e:
5e:b8:82:a1:f4:17:57:c8:17:7e:51:c7:d5:69:e5:e9:f8:1d:
58:34:94:4e:db:3d:d9:0c:ea:71:5c:71:eb:64:6e:bf:59:43:
13:eb:6e:0f:7b:23:16:bd:72:5a:c6:9a:1c:4b:9e:10:04:1a:
b8:52:7b:ee:e1:cd:31:7b:9c:f5:ca:18:8e:98:c7:7c:fd:bc:
34:d7:46:77:b0:fb:14:32:e0:a3:93:00:ab:ad:bb:f8:88:6d:
ae:f9:30:c6:f3:65:98:74:29:b9:d9:d4:e4:70:fe:18:be:00:
d1:75:da:85:c6:a1:70:94:10:a6:0c:b3:e9:20:03:d1:ce:1c:
8f:4d:fc:ae:11:4e:e4:f2:81:ae:22:12:83:35:1b:f1:aa:9e:
25:71:f6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org