Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3134342e34382e38302e302f32342d3234203d3e203438323636.roa
File: 3134342e34382e38302e302f32342d3234203d3e203438323636.roa (raw, json)
Hash identifier: FyBuwVDBZiZ1Fy5y55ngsSJqWSjU6niIrJ7f63zj548=
Subject key identifier: 71:9A:BD:6E:EF:05:DC:B9:85:9F:30:BF:21:48:4F:8D:C8:06:54:AF
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 30E513C9B923AAFBEB5863163EA2F4E96F399880
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3134342e34382e38302e302f32342d3234203d3e203438323636.roa
Signing time: Sun 01 Jan 2023 23:59:08 +0000
ROA not before: Sun 01 Jan 2023 23:54:08 +0000
ROA not after: Sun 31 Dec 2023 23:59:08 +0000
asID: 48266
IP address blocks: 144.48.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e5:13:c9:b9:23:aa:fb:eb:58:63:16:3e:a2:f4:e9:6f:39:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Jan 1 23:54:08 2023 GMT
Not After : Dec 31 23:59:08 2023 GMT
Subject: CN=719ABD6EEF05DCB9859F30BF21484F8DC80654AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:a0:14:87:56:b5:34:0b:6d:d9:f3:28:b5:
79:84:1e:b6:a2:7b:61:4b:5f:40:42:60:b3:fc:a7:
4b:72:04:aa:20:ea:7e:ca:39:8a:77:09:85:35:c4:
27:82:20:82:ed:69:fa:0d:a0:5f:d3:38:c7:75:f7:
74:31:16:19:a5:f0:12:1d:a0:52:54:92:8d:da:8a:
7e:df:bf:72:0d:51:d0:cd:a7:0d:f8:4e:ef:ac:db:
75:b5:fb:f3:20:95:dd:36:89:7f:4e:d8:18:ed:ae:
6a:2c:7b:08:b8:1b:cb:ed:26:a4:2f:56:8a:d4:c3:
dc:cd:eb:13:07:89:b8:4c:36:d5:65:f0:4a:52:e8:
d3:83:e0:53:d6:08:a4:3f:b4:65:ac:30:58:94:a0:
c4:fe:85:1f:1e:cd:26:49:ae:d1:8d:3e:f3:0a:6a:
32:d8:c6:17:62:20:96:3f:d4:94:b9:cf:5e:3a:93:
58:5b:2b:2a:5a:81:fc:88:ef:21:fd:48:76:db:ea:
ae:6c:dc:ad:48:2f:95:56:75:4c:07:a1:7e:56:32:
1c:f0:c7:8c:ed:26:8f:83:73:44:2b:5a:c1:61:e6:
54:49:d1:5a:91:38:b0:f3:65:b3:fc:01:ff:0c:f2:
21:37:a6:ce:05:88:1e:d0:2b:b9:21:e7:ed:c3:dc:
b1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9A:BD:6E:EF:05:DC:B9:85:9F:30:BF:21:48:4F:8D:C8:06:54:AF
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3134342e34382e38302e302f32342d3234203d3e203438323636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.48.80.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ed:45:dc:6f:c3:57:39:9b:3d:f5:2f:67:7b:6a:46:39:89:
f7:f1:39:35:5e:88:40:8e:27:76:f9:60:ca:bc:6b:37:e2:a8:
71:42:28:73:f4:ab:e4:83:59:b5:d7:e9:f9:5e:26:b3:a0:3d:
44:7b:91:64:22:0d:17:4a:f6:b0:51:15:37:63:3e:87:3d:03:
4c:6a:6e:48:14:75:c1:14:64:54:bc:96:93:b1:89:1c:58:6d:
1f:92:fe:e3:66:76:18:f7:ec:68:f3:12:b5:9f:d0:be:67:01:
59:26:04:66:bd:d0:f7:4f:a1:0c:f9:80:b4:19:04:5b:22:3b:
cb:c7:ea:49:5d:59:8d:35:43:54:d0:2e:83:ee:1a:d7:35:ac:
a0:f6:d7:d5:e5:eb:4f:f1:7e:14:d9:9b:0f:3d:f7:fb:34:46:
3b:08:1a:84:b3:fa:a3:1b:6b:8b:73:6b:1c:9b:58:7a:75:6c:
76:fe:4e:dc:c9:e8:c4:20:39:9c:fd:39:99:f5:4a:83:8d:0a:
ce:d1:6a:41:25:8a:af:35:ec:1e:6e:a4:2b:ae:fc:d7:57:f8:
8b:5a:92:10:77:0b:74:47:f4:01:6d:33:5c:ee:c6:42:f6:1e:
a4:89:45:02:c4:52:01:28:25:cc:dd:90:2c:94:f8:c1:b6:65:
5d:13:4f:af
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgIUMOUTybkjqvvrWGMWPqL06W85mIAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg5QjU0MzM5NTky
OTIxN0UzRUM3MDhBRjU0RTU4RTJGOTM4Q0IxQ0MxMB4XDTIzMDEwMTIzNTQwOFoX
DTIzMTIzMTIzNTkwOFowMzExMC8GA1UEAxMoNzE5QUJENkVFRjA1RENCOTg1OUYz
MEJGMjE0ODRGOERDODA2NTRBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALoHoBSHVrU0C23Z8yi1eYQetqJ7YUtfQEJgs/ynS3IEqiDqfso5incJhTXE
J4Iggu1p+g2gX9M4x3X3dDEWGaXwEh2gUlSSjdqKft+/cg1R0M2nDfhO76zbdbX7
8yCV3TaJf07YGO2uaix7CLgby+0mpC9WitTD3M3rEweJuEw21WXwSlLo04PgU9YI
pD+0ZawwWJSgxP6FHx7NJkmu0Y0+8wpqMtjGF2Iglj/UlLnPXjqTWFsrKlqB/Ijv
If1IdtvqrmzcrUgvlVZ1TAehflYyHPDHjO0mj4NzRCtawWHmVEnRWpE4sPNls/wB
/wzyITemzgWIHtAruSHn7cPcsVUCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBRxmr1u
7wXcuYWfML8hSE+NyAZUrzAfBgNVHSMEGDAWgBSbVDOVkpIX4+xwivVOWOL5OMsc
wTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mOGU3ZDg2Ny1j
MzVlLTRlNjktYTgxNS1iYTFlOWIzMzZkNjIvMy85QjU0MzM5NTkyOTIxN0UzRUM3
MDhBRjU0RTU4RTJGOTM4Q0IxQ0MxLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB
BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1
ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tMVF6bFpLU0YtUHNjSXIxVGxqaS1U
akxITUUuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUHMAuGgYtyc3lu
YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3
LWMzNWUtNGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8zLzMxMzQzNDJlMzQzODJlMzgz
MDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzgzMjM2MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACQ
MFAwDQYJKoZIhvcNAQELBQADggEBAJbtRdxvw1c5mz31L2d7akY5iffxOTVeiECO
J3b5YMq8azfiqHFCKHP0q+SDWbXX6fleJrOgPUR7kWQiDRdK9rBRFTdjPoc9A0xq
bkgUdcEUZFS8lpOxiRxYbR+S/uNmdhj37GjzErWf0L5nAVkmBGa90PdPoQz5gLQZ
BFsiO8vH6kldWY01Q1TQLoPuGtc1rKD219Xl60/xfhTZmw899/s0RjsIGoSz+qMb
a4tzaxybWHp1bHb+TtzJ6MQgOZz9OZn1SoONCs7RakEliq817B5upCuu/NdX+Ita
khB3C3RH9AFtM1zuxkL2HqSJRQLEUgEoJczdkCyU+MG2ZV0TT68=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:32 2025 by rpki-client