Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3134342e34382e38332e302f32342d3234203d3e20313338393935.roa
File: 3134342e34382e38332e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier: 4zERCmy1lzpmjrGjKl1aVm1YndIBaytes6xFVi6L7Ao=
Subject key identifier: 13:12:E4:32:E9:A1:14:48:00:4F:C2:A8:16:F1:E5:55:F4:77:A6:4E
Certificate issuer: /CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Certificate serial: 237E08D4EA06EE38BCA7346325180DBDDEB9C901
Authority key identifier: 9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3134342e34382e38332e302f32342d3234203d3e20313338393935.roa
Signing time: Sun 01 Jan 2023 23:59:09 +0000
ROA not before: Sun 01 Jan 2023 23:54:09 +0000
ROA not after: Sun 31 Dec 2023 23:59:09 +0000
asID: 138995
IP address blocks: 144.48.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:7e:08:d4:ea:06:ee:38:bc:a7:34:63:25:18:0d:bd:de:b9:c9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000/serialNumber=9B543395929217E3EC708AF54E58E2F938CB1CC1
Validity
Not Before: Jan 1 23:54:09 2023 GMT
Not After : Dec 31 23:59:09 2023 GMT
Subject: CN=1312E432E9A11448004FC2A816F1E555F477A64E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:f0:6d:1c:3f:42:a4:21:79:bf:1e:d1:ed:
72:3b:a5:82:58:29:0e:fe:41:34:fe:cc:5e:a6:76:
97:9b:13:25:7e:85:3e:f8:56:38:26:a9:3e:78:37:
59:5d:61:12:44:6a:9c:e6:6f:88:df:d4:14:a8:7b:
26:9e:1f:2f:64:bf:69:97:ef:46:30:bd:29:f0:b1:
47:56:b5:10:82:b0:97:c1:53:5a:7f:7c:9d:80:46:
fa:79:78:d7:2c:c2:d4:9d:cd:87:a8:e5:9f:a8:4c:
cf:f2:79:1b:c8:71:f5:1f:2f:24:54:cb:fd:95:fe:
ca:00:70:d9:17:af:c0:f3:3e:1d:b9:ce:f6:c7:ac:
09:bf:82:0f:73:ec:1b:94:be:08:88:cc:a4:3d:c1:
3e:10:66:ab:83:dd:3a:3e:37:65:f1:53:27:60:55:
d9:b2:87:79:77:06:ad:2b:8b:50:84:d8:f7:30:40:
20:17:c8:1f:7f:48:ec:6f:94:0d:c0:02:d5:8d:c8:
72:48:96:30:8f:63:37:d2:d5:be:8a:e6:2b:88:72:
42:96:5f:5c:b7:1f:88:65:1b:1c:dd:7d:5f:91:49:
1d:75:c1:92:54:4a:64:ba:8b:c8:0d:58:5b:d1:f8:
03:0e:b3:aa:86:33:6b:ca:8f:e9:0a:1d:cf:93:6a:
1d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:12:E4:32:E9:A1:14:48:00:4F:C2:A8:16:F1:E5:55:F4:77:A6:4E
X509v3 Authority Key Identifier:
keyid:9B:54:33:95:92:92:17:E3:EC:70:8A:F5:4E:58:E2:F9:38:CB:1C:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/9B543395929217E3EC708AF54E58E2F938CB1CC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1QzlZKSF-PscIr1Tlji-TjLHME.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/3/3134342e34382e38332e302f32342d3234203d3e20313338393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.48.83.0/24
Signature Algorithm: sha256WithRSAEncryption
04:0a:0d:82:df:a9:45:a3:e1:75:5e:1e:0e:71:a5:c6:f5:65:
2a:d2:c2:2f:d1:1b:8d:5a:b0:7d:f3:de:a1:3f:89:7a:a7:e1:
02:97:2e:11:c0:21:a7:4f:23:98:f8:96:33:23:56:23:eb:50:
c8:5b:45:4e:b0:f5:75:5f:62:d0:8c:19:53:07:b5:57:30:b5:
60:e4:1c:47:6d:b4:ee:a3:3e:52:1f:94:41:29:0b:66:5d:30:
55:f5:8a:59:1d:ba:bc:e6:8b:ca:a6:e9:24:5c:32:46:60:5a:
57:3b:13:ea:e4:c7:8b:8a:9a:1c:c9:cf:2b:63:4b:a5:e8:b6:
da:6d:b8:13:f0:d7:9b:a7:cc:78:7d:35:de:17:f4:97:b2:72:
23:95:3a:32:eb:7c:b9:df:5e:67:77:47:71:c0:67:2a:8c:76:
8d:c4:0d:2d:2f:a1:c1:2a:73:16:0c:93:7f:c7:57:48:67:e3:
94:31:ee:82:89:5a:8a:0a:f2:d8:05:c4:ac:4f:ac:00:a1:8e:
dc:4c:68:37:49:98:a2:6d:23:7d:46:23:81:31:0d:ac:eb:d0:
22:cb:bc:eb:7d:ab:36:d9:ed:8c:15:d0:6b:06:9a:85:5c:d1:
19:f1:07:dc:d2:0b:ae:c8:82:b4:31:48:15:44:13:d5:cf:d5:
89:13:a5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org