Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3134312e39382e37332e302f32342d3234203d3e203531353631.roa
File: 3134312e39382e37332e302f32342d3234203d3e203531353631.roa (raw, json)
Hash identifier: 64v1Vm381RNeIzaQYwtfqDq/9JSxjaYzp32FIQG98xg=
Subject key identifier: 7E:E2:94:43:80:FD:B7:A2:BC:DE:11:3C:C7:63:59:0D:1E:7D:11:84
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 45E458E50D6274BB6A6B4AB0DC11A9B63E739C21
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3134312e39382e37332e302f32342d3234203d3e203531353631.roa
Signing time: Sat 29 Apr 2023 09:38:23 +0000
ROA not before: Sat 29 Apr 2023 09:33:23 +0000
ROA not after: Sat 27 Apr 2024 09:38:23 +0000
asID: 51561
IP address blocks: 141.98.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:e4:58:e5:0d:62:74:bb:6a:6b:4a:b0:dc:11:a9:b6:3e:73:9c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:33:23 2023 GMT
Not After : Apr 27 09:38:23 2024 GMT
Subject: CN=7EE2944380FDB7A2BCDE113CC763590D1E7D1184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:36:f9:c3:3f:03:95:b9:ad:4a:89:5c:a2:
de:5c:82:c9:e3:ac:b6:5d:9d:ef:4d:e5:03:8e:73:
64:3b:9e:8a:88:19:10:c1:3f:19:e8:8f:7d:c0:e2:
00:76:6e:d3:82:9a:46:9f:0d:35:04:b6:d5:8f:59:
45:57:3b:03:50:33:56:94:70:89:dc:54:e0:ed:fb:
0d:57:05:b0:61:66:24:51:09:89:71:e4:45:c1:33:
5a:db:8c:26:42:30:55:1b:b1:8e:d1:60:8a:5e:81:
31:ba:d4:02:c2:69:e3:55:78:13:30:70:2b:33:58:
5f:92:36:92:a4:2c:6b:aa:84:1f:6d:55:c1:1b:19:
77:3c:83:6d:a0:3f:75:8d:c3:77:96:e9:1a:80:d2:
81:c0:c4:e2:f2:36:b6:5b:47:29:af:43:10:c3:3f:
eb:fd:48:00:e9:d8:67:83:c3:77:c5:af:4a:70:ee:
b5:68:14:1f:b0:2a:05:ab:d2:f9:01:c6:bd:2a:4a:
5b:a6:f5:96:ba:38:dd:83:6d:4d:78:ea:38:de:a3:
72:81:9b:cf:a0:e4:fa:e7:88:26:a3:37:4b:85:28:
ae:81:44:e2:db:7a:8d:97:b3:0d:c1:44:e5:ea:15:
31:5c:6b:f6:45:33:ef:f4:cd:0c:76:11:f4:ec:6b:
a9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E2:94:43:80:FD:B7:A2:BC:DE:11:3C:C7:63:59:0D:1E:7D:11:84
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3134312e39382e37332e302f32342d3234203d3e203531353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.73.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:97:f0:46:43:f6:06:1e:d5:8d:4d:bd:45:3c:1f:37:31:b1:
22:7f:4a:bf:c4:98:a8:64:65:d1:96:a2:2f:77:cf:5e:d2:88:
47:5d:bc:fc:f9:77:40:35:5e:08:30:c2:35:20:ba:da:1a:2b:
3d:86:0d:c4:a8:84:e7:8f:96:21:89:ac:a6:b0:f6:87:62:d2:
34:99:c4:41:38:af:c3:be:a0:9b:30:82:5b:d8:a2:7b:78:99:
73:7d:22:15:e6:e3:53:3e:43:d2:8b:e6:0f:b3:52:1f:c9:68:
82:21:02:18:5c:91:e0:be:5a:84:3c:ff:46:84:3d:50:75:55:
9e:8e:e4:b2:bf:1c:c9:28:d0:c7:65:58:8a:8d:bf:b2:cf:98:
36:2c:a9:d1:dd:4f:88:ee:46:5b:72:d9:18:1e:a1:70:18:47:
74:c1:60:d3:c4:5f:7c:0c:90:f8:54:4d:53:90:2e:5c:b9:ba:
5d:56:cf:c3:67:09:0d:f2:b0:10:c8:61:fc:b3:72:7a:7d:96:
51:d8:90:93:9d:2b:1a:fa:39:8e:ba:ce:97:b6:2a:16:4f:f4:
41:c8:8a:1d:8f:2d:40:b6:1f:d1:df:39:16:77:ec:83:1f:44:
7d:4b:43:ff:4b:22:05:c9:f6:db:4f:2d:a1:7d:c2:90:dc:da:
79:8a:a3:8c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUReRY5Q1idLtqa0qw3BGptj5znCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY2ZjFhZjllOTE5YTk2NTMyNjgzMjdiOTg4MTRjYWZl
YjVjMGExMzAeFw0yMzA0MjkwOTMzMjNaFw0yNDA0MjcwOTM4MjNaMDMxMTAvBgNV
BAMTKDdFRTI5NDQzODBGREI3QTJCQ0RFMTEzQ0M3NjM1OTBEMUU3RDExODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Ijb5wz8DlbmtSolcot5cgsnj
rLZdne9N5QOOc2Q7noqIGRDBPxnoj33A4gB2btOCmkafDTUEttWPWUVXOwNQM1aU
cIncVODt+w1XBbBhZiRRCYlx5EXBM1rbjCZCMFUbsY7RYIpegTG61ALCaeNVeBMw
cCszWF+SNpKkLGuqhB9tVcEbGXc8g22gP3WNw3eW6RqA0oHAxOLyNrZbRymvQxDD
P+v9SADp2GeDw3fFr0pw7rVoFB+wKgWr0vkBxr0qSlum9Za6ON2DbU146jjeo3KB
m8+g5PrniCajN0uFKK6BROLbeo2Xsw3BROXqFTFca/ZFM+/0zQx2EfTsa6lvAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUfuKUQ4D9t6K83hE8x2NZDR59EYQwHwYDVR0j
BBgwFoAU328a+ekZqWUyaDJ7mIFMr+tcChMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzAvREY2RjFBRjlFOTE5QTk2NTMyNjgzMjdCOTg4MTRDQUZFQjVDMEExMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyOGEtZWtacVdVeWFESjdtSUZNci10
Y0NoTS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzAvMzEzNDMxMmUzOTM4MmUzNzMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMTM1MzYzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI1i
STANBgkqhkiG9w0BAQsFAAOCAQEAXpfwRkP2Bh7VjU29RTwfNzGxIn9Kv8SYqGRl
0ZaiL3fPXtKIR128/Pl3QDVeCDDCNSC62horPYYNxKiE54+WIYmsprD2h2LSNJnE
QTivw76gmzCCW9iie3iZc30iFebjUz5D0ovmD7NSH8logiECGFyR4L5ahDz/RoQ9
UHVVno7ksr8cySjQx2VYio2/ss+YNiyp0d1PiO5GW3LZGB6hcBhHdMFg08RffAyQ
+FRNU5AuXLm6XVbPw2cJDfKwEMhh/LNyen2WUdiQk50rGvo5jrrOl7YqFk/0QciK
HY8tQLYf0d85Fnfsgx9EfUtD/0siBcn2208toX3CkNzaeYqjjA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org