Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3134312e39382e37342e302f32342d3234203d3e20343030383130.roa
File: 3134312e39382e37342e302f32342d3234203d3e20343030383130.roa (raw, json)
Hash identifier: uTKHMbOVMrCRir10NAwxn3f4hq3OC+WE2EtlkSJGv6k=
Subject key identifier: 89:FB:13:39:9F:12:4A:B2:B4:68:6B:AF:B9:51:D2:8F:D0:14:34:C3
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 52289587E4E236C1FB9D5AC15F95B20037FE26BF
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3134312e39382e37342e302f32342d3234203d3e20343030383130.roa
Signing time: Sat 29 Apr 2023 09:38:35 +0000
ROA not before: Sat 29 Apr 2023 09:33:35 +0000
ROA not after: Sat 27 Apr 2024 09:38:35 +0000
asID: 400810
IP address blocks: 141.98.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:28:95:87:e4:e2:36:c1:fb:9d:5a:c1:5f:95:b2:00:37:fe:26:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:33:35 2023 GMT
Not After : Apr 27 09:38:35 2024 GMT
Subject: CN=89FB13399F124AB2B4686BAFB951D28FD01434C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:bb:78:b7:f6:77:25:81:e5:7e:5c:07:5d:
dd:39:bb:21:3c:bd:6a:2c:03:10:b1:15:a3:15:6c:
53:02:b9:dd:af:e8:f9:a4:e9:b2:c2:fa:a9:bd:c4:
1e:fe:24:85:e2:d6:63:00:4b:c8:db:d7:7b:54:d2:
31:28:2b:1a:33:59:5e:ef:80:80:5e:ad:14:a4:4d:
30:f0:31:d2:eb:da:7b:ff:73:b3:44:b1:bb:5d:d4:
8c:db:96:c0:a0:0e:9d:51:05:64:c6:69:b4:01:de:
ed:b6:5a:ae:89:2e:40:33:b0:d8:07:5c:c6:83:6f:
e7:23:9b:d6:0d:16:56:bc:d1:bc:3d:f1:b3:11:a1:
54:c8:93:4f:15:e3:ff:08:f2:80:c0:d3:9f:ac:97:
8f:b6:e8:b3:57:f8:41:1d:ce:e9:8b:55:7e:d3:08:
c2:4a:cc:79:e6:6d:ff:cd:2e:7a:2c:bb:09:f4:9d:
ae:34:ff:f2:36:fc:9b:61:15:71:99:3e:b6:a3:c3:
c5:8e:e5:a9:b9:89:cd:33:30:1f:e1:f0:41:aa:92:
d7:21:df:d3:a0:46:98:71:77:dd:32:ad:4e:e5:5e:
4f:02:b3:e7:e6:6e:96:ab:1b:f5:f6:f7:a1:90:c4:
2f:c0:22:d3:c7:dc:a6:32:9d:00:b4:13:16:39:cc:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FB:13:39:9F:12:4A:B2:B4:68:6B:AF:B9:51:D2:8F:D0:14:34:C3
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3134312e39382e37342e302f32342d3234203d3e20343030383130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.74.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2f:0d:60:e6:6f:6f:ee:8c:5e:3b:55:2d:5a:d3:f7:51:07:
41:bb:b1:b6:46:07:ff:99:97:76:c9:99:14:26:8f:da:a9:da:
a6:19:02:cf:99:f0:fc:b4:07:5d:1f:30:25:08:dc:15:c8:8a:
b1:25:58:28:99:ef:5b:f9:53:05:f4:23:86:e8:9c:89:d8:77:
c2:22:c9:ca:a2:52:bf:36:18:d2:15:21:49:fc:34:f2:a9:a1:
4d:1a:2f:6c:bb:93:cb:87:a9:9a:23:6b:14:bf:c8:e5:a9:38:
bd:c1:1b:5f:51:67:31:1c:f1:12:70:fa:09:09:c0:a3:48:b0:
60:01:6e:fe:27:b4:5c:b6:92:44:ca:42:23:b4:23:f6:26:75:
dd:eb:b0:cc:eb:51:b7:79:dd:25:fc:6b:61:2a:6f:f6:c1:c6:
76:59:d8:aa:47:72:8a:dd:57:73:df:5a:6b:9c:1b:5f:5a:2e:
61:aa:f1:5e:56:2c:fd:41:ef:4f:e3:7a:5b:f4:bd:5c:3c:c3:
87:9c:b2:6a:fc:bf:ab:76:bb:c3:e9:ae:24:d7:80:de:5a:36:
e6:bc:5e:a0:cc:01:63:1f:9d:e3:58:4e:de:37:55:e5:c5:46:
3b:b9:27:10:f8:2b:37:09:8b:58:72:5f:d2:d4:7e:10:32:2c:
24:6b:ec:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org