Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3134342e34382e38302e302f32322d3234203d3e203631313338.roa
File: 3134342e34382e38302e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier: Tl955RJHfZcs156a3SNHGZkwuSemU149AVAx0pa52Sg=
Subject key identifier: DC:E1:C5:03:A8:DB:14:79:58:72:B7:6A:70:7E:00:8B:94:18:11:FD
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 0D386DB94C5CA17CAB4B2638BE6E524E94A49ADD
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3134342e34382e38302e302f32322d3234203d3e203631313338.roa
Signing time: Sun 01 Jan 2023 23:59:09 +0000
ROA not before: Sun 01 Jan 2023 23:54:09 +0000
ROA not after: Sun 31 Dec 2023 23:59:09 +0000
asID: 61138
IP address blocks: 144.48.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:38:6d:b9:4c:5c:a1:7c:ab:4b:26:38:be:6e:52:4e:94:a4:9a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Validity
Not Before: Jan 1 23:54:09 2023 GMT
Not After : Dec 31 23:59:09 2023 GMT
Subject: CN=DCE1C503A8DB14795872B76A707E008B941811FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:b7:b1:2f:08:a0:88:64:34:61:1f:70:2b:
b2:87:0e:6d:27:bb:f1:3f:73:ed:a4:0f:4b:80:5d:
fb:8a:ae:e0:b8:73:f8:30:40:9c:a1:9d:26:9e:41:
e0:7d:b1:f0:4c:dc:cd:f0:9b:59:56:a6:96:a3:eb:
73:fe:a0:2d:4e:9a:a5:52:04:da:30:b1:5f:50:c6:
9f:69:bf:7a:8a:f7:5d:2e:78:eb:74:fe:58:34:3a:
a6:87:ab:2a:43:85:79:3e:f0:e7:48:f1:95:b7:e7:
db:ad:ff:2b:94:12:8b:1b:d0:70:5a:47:be:25:75:
eb:bc:b6:46:7e:28:dc:cd:7e:2f:24:c8:dd:14:c7:
f1:37:42:e1:99:a3:51:9a:02:92:9f:36:4f:80:4b:
f7:a9:58:b7:67:49:67:2c:ae:5f:95:d6:33:7e:04:
c0:c4:f2:3f:ba:d9:86:e2:86:a0:a1:b6:c3:a8:05:
cd:ef:58:57:e5:c9:b9:dd:3a:73:2d:a5:f3:a2:26:
41:ff:a7:fa:41:6e:fa:6a:84:06:8a:fe:a6:b4:0a:
79:bb:58:21:e2:7b:0d:61:97:2e:e0:1d:ea:4e:b3:
50:42:94:f3:4f:31:96:e0:69:19:09:4e:8b:79:cf:
38:9d:5b:48:4d:52:d0:e7:e1:62:f9:57:51:1d:d5:
0d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E1:C5:03:A8:DB:14:79:58:72:B7:6A:70:7E:00:8B:94:18:11:FD
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3134342e34382e38302e302f32322d3234203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.48.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:1d:0a:75:14:37:ee:db:6f:10:70:ee:75:73:96:6b:2a:28:
f5:7b:15:f5:cd:d9:77:7f:39:4d:37:8e:41:e1:b9:0b:ef:4b:
7b:61:bd:a2:6f:71:57:56:66:ff:ef:ee:a4:cb:28:d9:5a:23:
84:ec:35:76:0c:ba:6a:a7:95:8c:ea:78:69:b4:cb:2c:23:85:
d8:42:01:2e:55:26:4f:45:74:34:1c:cb:02:bb:b5:fe:01:32:
f4:0c:2f:b0:fc:0d:44:ce:36:fc:1d:ac:ef:b2:ca:2b:74:49:
6e:61:d7:e3:e9:25:58:a7:bd:aa:4b:89:92:57:e7:bb:b2:26:
31:35:dc:de:a2:b4:4e:af:0b:e7:75:4b:ac:96:bc:d7:3e:23:
22:15:cf:60:ef:f6:f0:a4:57:13:71:54:a9:6b:3a:40:4b:95:
eb:40:95:ae:ce:20:32:8e:2f:f0:0e:01:6d:14:57:03:db:76:
72:30:8c:3d:19:6d:22:89:11:1c:d8:23:f7:da:83:bd:2f:dd:
8d:4b:c5:1d:14:83:97:ed:3a:26:07:95:c2:5a:d9:ee:76:6b:
7e:51:84:8c:63:5a:f8:7f:fc:a3:80:16:8b:9d:b6:02:12:b8:
24:c0:a5:9c:c0:69:69:4d:4f:fc:94:2f:1a:7a:1f:08:16:bc:
7a:38:cd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org