Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35312e302f32342d3234203d3e203234383531.roa
File: 3134362e3234372e35312e302f32342d3234203d3e203234383531.roa (raw, json)
Hash identifier: zRn95fZoa98Dxgk18rTQZPg3Vz861tTnSVUdcy0yTb0=
Subject key identifier: 59:34:EF:41:8B:D8:63:0D:1E:67:6C:8E:88:5D:A6:35:8D:BA:64:F8
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 7F50815E19E6D2D845B837D53A776254607909EC
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35312e302f32342d3234203d3e203234383531.roa
Signing time: Mon 25 Nov 2024 12:43:28 +0000
ROA not before: Mon 25 Nov 2024 12:38:28 +0000
ROA not after: Mon 24 Nov 2025 12:43:28 +0000
asID: 24851
IP address blocks: 146.247.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:50:81:5e:19:e6:d2:d8:45:b8:37:d5:3a:77:62:54:60:79:09:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Nov 25 12:38:28 2024 GMT
Not After : Nov 24 12:43:28 2025 GMT
Subject: CN=5934EF418BD8630D1E676C8E885DA6358DBA64F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:94:e5:50:96:8d:03:6a:02:9f:32:84:28:
39:b5:f4:ef:3a:75:95:17:57:fc:66:9d:37:80:3d:
a2:dc:9a:70:cc:d1:03:54:b8:8a:a4:1f:3c:40:45:
76:7d:6b:7e:55:98:17:95:4b:79:89:0a:78:93:40:
40:5d:e2:84:91:68:2f:ff:c1:0b:f1:b3:de:fa:c5:
78:8f:99:33:0e:72:c7:ef:2d:77:31:58:dd:cc:43:
56:f3:57:7f:65:f7:8e:01:d3:43:17:ea:47:54:c4:
16:10:fe:94:28:96:20:47:2e:a2:65:5a:de:b4:d7:
ab:a9:6e:f2:c6:b2:60:20:8c:11:fd:dd:13:7f:4a:
9e:79:67:ed:59:2b:51:98:1e:ea:19:8e:e2:18:4e:
23:9f:e9:3b:72:96:0e:8c:70:8b:2b:53:36:18:09:
c5:ba:f8:9c:33:8d:33:53:70:64:b7:ed:e2:6b:ec:
c1:d7:da:13:78:05:60:5a:2a:51:1a:91:40:aa:c3:
60:ca:13:b1:bd:28:13:a2:c7:b8:d8:63:d4:32:a0:
64:b5:bf:01:15:86:f9:45:c0:8b:06:d7:c3:04:58:
4d:fb:15:90:2a:5d:0f:d2:e7:89:3e:5a:aa:a8:67:
91:f7:fa:3f:6d:2b:21:35:c1:ca:7a:7d:09:57:af:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:34:EF:41:8B:D8:63:0D:1E:67:6C:8E:88:5D:A6:35:8D:BA:64:F8
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35312e302f32342d3234203d3e203234383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.51.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ec:5a:6b:aa:1b:0d:f2:b6:99:9e:8d:32:cf:25:09:20:c6:
7b:06:4f:fc:31:2a:bb:d8:06:a2:1d:75:b4:e3:29:36:f2:f8:
26:b9:7f:ab:be:bb:d6:16:a0:1c:8b:33:e0:b6:59:2f:2b:7d:
10:ad:a6:22:a4:2f:a4:59:24:af:3d:2e:7b:ec:3e:fd:59:0a:
05:a2:5c:60:d3:0c:3a:a1:69:48:d9:76:a7:81:d8:67:b0:52:
c6:22:26:fc:25:c8:d7:0b:29:a3:d6:08:a3:8c:de:f3:2a:6f:
d2:e7:e3:6e:bc:30:15:bd:6c:e4:40:4d:a6:a2:60:d0:29:53:
68:82:00:72:89:12:c3:64:79:44:c9:a9:3f:c7:4c:bc:b4:e4:
14:f3:dc:e6:b3:cc:1f:32:b2:47:85:3a:99:ac:03:4b:17:81:
f0:af:d2:14:7f:0e:76:15:e5:ae:20:a2:28:73:00:77:83:5b:
8b:27:b7:b3:43:e0:ed:ef:be:22:42:96:ee:56:98:1a:13:54:
89:93:e2:ff:90:4b:22:bd:78:f1:a8:27:a7:79:64:b9:e5:c5:
ab:80:fe:71:27:82:20:61:85:e9:40:92:f6:ba:a3:79:d7:f3:
79:7a:0b:89:f7:67:2a:95:bb:1f:91:05:ea:14:46:84:58:64:
f3:2e:2b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:16 2025 by rpki-client