Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3134312e39382e37352e302f32342d3234203d3e20313437323933.roa
File: 3134312e39382e37352e302f32342d3234203d3e20313437323933.roa (raw, json)
Hash identifier: vZkwsoxVqx98CrH/2oV7uv+U9hYfx74hWcmsooKlRGQ=
Subject key identifier: C3:B7:7F:AA:0E:E5:4B:4C:F4:3A:10:B0:C1:C8:60:3A:82:DD:D2:13
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 5D135EE3BCDFA139B8FE9B6206273F9144ACF48D
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3134312e39382e37352e302f32342d3234203d3e20313437323933.roa
Signing time: Sat 29 Apr 2023 09:38:47 +0000
ROA not before: Sat 29 Apr 2023 09:33:47 +0000
ROA not after: Sat 27 Apr 2024 09:38:47 +0000
asID: 147293
IP address blocks: 141.98.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:13:5e:e3:bc:df:a1:39:b8:fe:9b:62:06:27:3f:91:44:ac:f4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:33:47 2023 GMT
Not After : Apr 27 09:38:47 2024 GMT
Subject: CN=C3B77FAA0EE54B4CF43A10B0C1C8603A82DDD213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:10:b9:42:72:80:a7:c6:f2:5a:6e:46:65:
ec:6f:99:1e:8f:37:44:1c:5e:fd:ae:55:61:2f:90:
fb:8f:00:68:11:e0:05:79:65:d0:f9:18:0b:a6:18:
9f:3e:2c:10:16:79:9f:0d:a0:20:1d:20:7a:41:cc:
90:3f:5f:6f:eb:65:4b:e4:34:e4:c6:97:1a:4d:f3:
da:94:77:bd:e9:a4:f1:85:0a:f1:85:2c:ea:6d:47:
e0:27:39:e0:67:21:0f:aa:5d:7d:f4:58:d6:23:d9:
91:cf:56:be:3f:c4:df:d1:a8:9a:bd:cb:c2:3b:ae:
0a:ad:c8:0f:71:1b:34:fb:b6:e8:7e:d8:a2:42:ee:
e0:d0:e7:cb:58:54:0f:a7:e8:fa:bd:97:cb:e1:4b:
33:85:c6:b3:dc:4c:7a:9d:25:30:4c:7b:f7:fc:4e:
33:2e:cd:4c:f6:42:b4:d4:7b:fc:cf:b3:e2:03:f9:
2d:8c:1f:20:aa:0e:43:64:00:c1:d3:83:87:38:e5:
36:00:67:e7:ef:f5:93:0e:ea:87:6b:52:8c:5b:7c:
10:e8:d2:c2:b8:70:0c:3c:b0:0b:9d:da:cb:6e:86:
4e:19:67:35:04:3c:00:7f:c7:0e:7b:46:d6:39:29:
94:b5:ca:5d:4e:b0:b8:f8:94:96:8d:9f:38:c4:22:
a2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B7:7F:AA:0E:E5:4B:4C:F4:3A:10:B0:C1:C8:60:3A:82:DD:D2:13
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/3134312e39382e37352e302f32342d3234203d3e20313437323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.75.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a4:6d:e4:28:74:ae:3d:ac:93:06:ce:f2:a8:f2:ff:2c:63:
f4:04:41:8d:68:fa:f8:28:1d:13:d1:06:59:5f:86:6f:1d:6d:
5b:47:82:4a:d6:5d:ae:c8:bc:ab:4e:a2:cd:00:62:e6:b4:60:
20:56:18:55:12:54:18:77:a0:f6:6f:50:4f:ae:88:b5:96:51:
bf:20:f2:05:b0:39:a1:2f:0d:ed:0f:64:cc:20:1a:cd:a7:04:
d3:41:62:13:e0:5a:6b:d0:16:2c:77:61:5b:5b:14:6b:7a:96:
07:82:71:82:04:81:0e:07:d6:db:af:7c:bb:08:2d:7a:ba:5d:
36:db:09:d7:91:d5:ab:cb:a9:15:46:2d:a2:44:68:4e:66:53:
75:3e:54:a9:e1:f3:8a:0f:91:85:3b:30:dd:ae:2e:63:5d:5e:
a0:c1:4f:a1:3c:43:03:3b:a5:5b:ac:fa:fd:62:64:57:44:2c:
a6:df:e7:40:5b:ac:8f:96:3f:dd:69:bb:ef:09:b7:56:bb:6d:
7e:43:56:8d:06:a9:6d:06:d1:5e:b9:f5:01:9d:63:65:98:bc:
98:4c:fe:a4:d4:e6:cb:8b:1e:de:55:03:8c:47:fc:bf:2e:01:
d9:6c:c0:52:0b:01:0f:7d:61:bb:e1:31:b4:38:a9:69:26:02:
26:99:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org