Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e34382e302f32332d3234203d3e203234383531.roa
File: 3134362e3234372e34382e302f32332d3234203d3e203234383531.roa (raw, json)
Hash identifier: CYrx2Q8+pBHAyk1lGd5Mg9MkvR7v5zfpX8Vn/ABu+6Q=
Subject key identifier: 5C:99:15:25:23:39:57:2E:B6:D5:66:AC:87:6B:D2:55:13:B2:BA:FE
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 464E198E46CD29F06000DDDA87D46369C7CFC78E
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e34382e302f32332d3234203d3e203234383531.roa
Signing time: Mon 09 Dec 2024 14:13:11 +0000
ROA not before: Mon 09 Dec 2024 14:08:11 +0000
ROA not after: Mon 08 Dec 2025 14:13:11 +0000
asID: 24851
IP address blocks: 146.247.48.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:4e:19:8e:46:cd:29:f0:60:00:dd:da:87:d4:63:69:c7:cf:c7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Dec 9 14:08:11 2024 GMT
Not After : Dec 8 14:13:11 2025 GMT
Subject: CN=5C9915252339572EB6D566AC876BD25513B2BAFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:0a:63:ea:37:0c:70:7e:e2:5a:4d:07:b3:
42:0a:e7:c6:43:3f:ba:06:0e:37:91:aa:d0:98:4d:
f6:bc:cf:c2:9a:07:7f:fe:1f:b6:89:24:1d:0f:d2:
a8:ed:bc:ff:a9:ae:66:af:36:3d:ab:49:24:1c:3f:
30:de:89:66:f5:26:59:cc:f3:26:b4:8c:cc:a6:9c:
4d:d9:38:5e:e3:3c:69:8b:bd:28:99:a3:6e:b8:cd:
d9:dc:75:47:1e:ea:fa:8c:11:75:23:11:2c:8a:5f:
ac:a6:c7:7e:b0:a7:16:3a:c7:9f:76:e7:29:b3:27:
85:14:e0:ae:c3:8e:1d:8a:8a:5a:b6:19:03:8c:d7:
15:04:11:f8:15:d8:44:6d:28:2b:bf:2e:69:c4:16:
58:12:d0:58:80:d8:58:a8:5f:83:fc:31:20:86:a2:
a1:a9:90:99:d7:88:66:4e:a1:b3:f7:e0:80:47:ae:
a4:bd:10:1d:b0:10:c5:e1:fb:6f:df:4f:ca:e2:82:
7a:4e:7b:90:23:c7:b8:b5:1e:7c:96:c1:9b:1f:dd:
e0:06:b4:7c:c9:20:a7:48:00:e0:fb:33:f9:34:57:
db:28:9a:48:e9:73:ac:4c:22:4c:67:83:c2:24:54:
bc:6d:44:ba:b0:34:9a:e5:ae:df:f5:24:c1:79:ca:
64:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:99:15:25:23:39:57:2E:B6:D5:66:AC:87:6B:D2:55:13:B2:BA:FE
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e34382e302f32332d3234203d3e203234383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.48.0/23
Signature Algorithm: sha256WithRSAEncryption
59:52:7e:a4:cc:25:14:e0:58:49:42:be:d4:2c:22:cf:ad:e4:
46:8a:d8:17:36:90:a8:91:2c:8c:c3:31:89:cd:8c:06:e1:53:
51:93:63:38:07:dc:d3:4f:3b:53:19:0b:b2:5e:d8:06:b9:50:
f3:d5:b9:4e:55:5b:e1:45:79:37:ea:99:29:a1:e6:dc:c7:a8:
b7:19:f6:03:18:ba:81:09:aa:a5:00:83:e2:68:2f:30:4b:c7:
78:2c:a7:88:23:57:b0:a3:a2:97:9e:ae:84:dd:c2:27:49:be:
4a:a5:c0:4e:c7:31:3b:71:06:70:b8:d7:ee:b4:90:02:b4:02:
0c:2e:c0:c3:a5:a9:be:5b:d2:ca:a6:73:44:55:46:83:c2:4d:
7a:8c:45:d8:35:42:3d:4b:b3:ee:5e:21:8f:3b:63:b5:2b:70:
4f:29:c5:44:da:78:b3:0f:46:70:db:6b:2a:04:02:86:ab:d4:
a4:89:b6:33:21:ab:53:96:b3:4f:2c:8b:d7:20:3a:7d:5c:18:
96:17:e8:6b:62:7b:2e:8a:a1:d0:4b:66:a9:83:1c:a8:12:b8:
c4:15:2d:93:da:c3:d8:f5:8e:a7:2c:2f:16:70:fa:b8:0c:9c:
5a:73:a1:61:6d:e2:74:7a:64:76:5c:c2:82:5e:71:8d:1d:b4:
78:51:95:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:15 2025 by rpki-client