Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/208/34362e3235332e3134312e302f32342d3234203d3e20323031333431.roa
File: 34362e3235332e3134312e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: 6ZeEx+9Hub//iLLQSKWaLJ7fJH4EZY5MFEFeyCnDC7I=
Subject key identifier: 97:43:FA:3E:B4:4E:BD:A7:3D:BA:60:58:5D:02:47:B8:FA:67:41:AA
Certificate issuer: /CN=c357c8a01c922b6e9308c3bf953baa5077244457
Certificate serial: 4DE0728DE92E31BE1CB35B37C4C97BF20DE4A35A
Authority key identifier: C3:57:C8:A0:1C:92:2B:6E:93:08:C3:BF:95:3B:AA:50:77:24:44:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1fIoBySK26TCMO_lTuqUHckRFc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/208/34362e3235332e3134312e302f32342d3234203d3e20323031333431.roa
Signing time: Mon 27 Mar 2023 08:27:39 +0000
ROA not before: Mon 27 Mar 2023 08:22:39 +0000
ROA not after: Mon 25 Mar 2024 08:27:39 +0000
asID: 201341
IP address blocks: 46.253.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:e0:72:8d:e9:2e:31:be:1c:b3:5b:37:c4:c9:7b:f2:0d:e4:a3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c357c8a01c922b6e9308c3bf953baa5077244457
Validity
Not Before: Mar 27 08:22:39 2023 GMT
Not After : Mar 25 08:27:39 2024 GMT
Subject: CN=9743FA3EB44EBDA73DBA60585D0247B8FA6741AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:41:8a:af:5a:47:a8:f5:00:ff:6f:8d:8e:
d7:ee:37:ca:a3:d1:a5:a5:ac:5b:21:1f:04:ca:56:
a3:20:74:8e:d7:d0:9a:07:3a:02:70:f1:d1:14:af:
fe:bb:4c:e2:fc:10:c9:0a:fd:ed:65:57:66:25:91:
78:2b:a8:26:d2:13:b4:12:63:49:66:45:f5:72:32:
b8:4c:2f:85:b5:70:bd:bb:d7:64:d6:e7:f0:9d:f3:
e6:39:9a:06:52:1a:75:c1:e9:a5:a6:32:23:07:db:
84:d9:3f:00:e8:9e:68:2e:b0:9b:4e:79:ba:16:b2:
e1:8e:8f:ca:0f:2b:98:97:95:3f:13:83:ab:99:72:
ad:7d:99:bc:4e:09:26:b2:d6:c7:70:cc:12:77:50:
40:a9:ec:2c:d0:4b:cd:b3:f1:a9:d8:4d:ec:29:5c:
df:83:f8:01:b1:5e:f6:82:60:39:32:bf:d8:81:d1:
16:45:65:4b:37:57:d1:ba:7f:3f:f0:ba:85:96:3f:
77:4c:b4:51:8f:61:f2:5a:55:60:ac:02:97:b1:47:
fd:96:87:bc:55:ac:0f:5b:be:ca:7b:f8:1b:1c:87:
c5:49:60:64:4d:cd:16:88:82:88:0e:71:f9:ec:b9:
b3:4a:64:60:dc:5f:21:09:7e:55:27:6c:cd:fa:2a:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:43:FA:3E:B4:4E:BD:A7:3D:BA:60:58:5D:02:47:B8:FA:67:41:AA
X509v3 Authority Key Identifier:
keyid:C3:57:C8:A0:1C:92:2B:6E:93:08:C3:BF:95:3B:AA:50:77:24:44:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/208/C357C8A01C922B6E9308C3BF953BAA5077244457.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1fIoBySK26TCMO_lTuqUHckRFc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/208/34362e3235332e3134312e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.141.0/24
Signature Algorithm: sha256WithRSAEncryption
85:8f:d5:df:87:98:6a:be:3c:88:5a:d1:3c:cf:c5:bf:4d:f4:
b5:a6:6f:ae:80:2a:16:3f:13:ee:2f:97:06:b2:f8:eb:75:1e:
b7:56:c0:36:f5:ad:a3:e0:88:a2:42:a7:f6:14:61:9e:06:d8:
de:c1:fa:89:cc:da:6f:d0:e0:b0:ea:f4:3c:91:e1:54:57:f1:
72:89:38:8c:51:ef:b6:00:7e:bb:c7:c2:ce:2a:1a:32:f0:e5:
e5:4c:9d:99:19:7d:78:cc:e6:0a:70:c3:cf:9b:73:49:be:33:
b0:dd:3d:74:ea:24:10:7a:bb:64:32:46:6c:47:28:1d:92:37:
37:0f:1b:c9:a5:cd:2a:ee:fd:92:d6:0c:32:7d:30:6c:a4:04:
6e:43:52:4e:03:cf:2d:f1:85:4c:62:77:ad:67:3f:52:64:5e:
37:65:0d:1e:6f:ec:0d:48:b5:86:41:dc:7a:27:bd:59:8e:e1:
50:d8:a2:91:3f:1a:ef:24:47:22:f7:19:d2:b9:59:2b:c8:98:
84:9b:31:13:16:31:1b:dd:0a:fa:69:12:8d:e6:01:e1:01:84:
05:18:c7:8e:07:8a:9d:8f:1e:d5:5b:53:32:13:d8:9b:b0:39:
b5:7c:c8:cc:07:bf:35:1c:fd:ce:8d:e0:b2:62:d0:6d:ac:f3:
fb:e1:e6:54
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org