Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e36322e302f32342d3234203d3e203234383531.roa
File: 3134362e3234372e36322e302f32342d3234203d3e203234383531.roa (raw, json)
Hash identifier: 3irJhAGcE48vEZNOxKTwKsy4d69RVyIL6ZEClAmlLA0=
Subject key identifier: 69:19:2F:4E:35:3E:66:BB:CA:51:A9:54:61:41:4F:7B:2D:78:C7:A8
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 7355777D7908F68DBFEE2C0F761FD2F76447A02A
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e36322e302f32342d3234203d3e203234383531.roa
Signing time: Mon 25 Nov 2024 12:43:28 +0000
ROA not before: Mon 25 Nov 2024 12:38:28 +0000
ROA not after: Mon 24 Nov 2025 12:43:28 +0000
asID: 24851
IP address blocks: 146.247.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:55:77:7d:79:08:f6:8d:bf:ee:2c:0f:76:1f:d2:f7:64:47:a0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Nov 25 12:38:28 2024 GMT
Not After : Nov 24 12:43:28 2025 GMT
Subject: CN=69192F4E353E66BBCA51A95461414F7B2D78C7A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:a1:27:6e:4d:4e:60:d3:54:d5:b0:ab:67:
2d:e8:8a:e7:f8:e3:d1:37:ec:45:b7:17:8e:60:99:
1c:66:02:0d:82:6b:3e:81:a6:3f:55:b6:b1:fb:39:
f0:bc:a7:b5:70:04:61:48:65:2f:eb:1e:1f:c7:c5:
0d:81:dc:e3:31:17:ec:dd:ee:45:de:71:2e:58:49:
c4:11:9c:b3:1c:63:8a:f8:01:a3:10:4e:6d:f1:31:
2b:4d:e1:56:d4:00:d0:b6:6d:24:e2:b4:ab:ec:85:
98:4f:28:a3:c2:bf:aa:48:7f:d4:50:fe:12:31:5a:
99:fe:4f:70:e4:ee:97:8a:e5:28:a1:c3:dc:2a:c8:
06:0b:95:c8:e9:59:d3:60:a4:da:59:a7:25:71:0f:
e8:ff:79:f5:18:34:70:34:5c:8e:ea:56:0a:7d:a3:
9f:6a:b2:6b:26:1a:f0:74:45:1c:bd:a5:cd:6d:a6:
01:ad:63:0c:45:75:73:f6:54:68:ea:cd:38:af:4d:
99:e0:fa:ea:df:bf:c1:fe:e0:6e:7f:05:90:33:c4:
f0:87:e6:81:83:14:b9:b8:e8:a6:e7:53:67:9f:39:
b2:d3:3f:53:82:4d:e2:a8:f8:6f:16:3c:3b:c5:9d:
87:bc:e9:e2:3c:0c:4c:3c:b4:ae:02:80:6e:28:d7:
ee:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:19:2F:4E:35:3E:66:BB:CA:51:A9:54:61:41:4F:7B:2D:78:C7:A8
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e36322e302f32342d3234203d3e203234383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.62.0/24
Signature Algorithm: sha256WithRSAEncryption
af:ca:7b:73:72:f9:81:be:38:18:ad:8c:9e:9e:7c:69:17:ad:
42:0a:5a:c3:9d:d6:1b:bf:f3:eb:37:b6:5b:7c:85:02:87:cb:
c8:08:c6:e9:53:0d:7e:99:03:3a:ef:b6:b0:7a:15:dc:59:75:
98:ff:54:db:f8:88:8f:2c:f2:aa:18:4b:7b:22:08:c4:f4:49:
ff:15:f9:ef:8f:98:15:8e:0a:22:ef:a3:5a:f8:01:99:5f:48:
c4:bd:d8:a6:92:7d:8b:74:1f:92:54:6c:92:a6:fa:84:5b:f8:
6e:6d:f6:8d:17:71:e4:3f:07:d8:fb:bc:26:e4:54:9b:58:50:
a6:7b:7d:b4:31:fb:11:15:4d:95:4a:22:0b:7c:2d:cd:24:e0:
41:04:f1:f3:fe:ca:db:3a:56:17:eb:4d:1d:12:ca:f7:c0:3c:
21:89:fe:f1:e5:c6:30:e7:eb:d5:6a:2f:e0:54:90:42:bf:90:
27:c5:8e:49:46:11:f9:a0:d1:c8:b5:3d:be:26:6a:97:41:24:
60:43:bb:0c:80:78:95:a1:7a:67:ba:39:b5:a2:d6:0c:38:59:
89:33:6a:42:73:f1:81:55:0e:4d:43:b1:45:c0:85:8d:58:49:
25:8c:83:da:d4:02:43:69:3d:e8:cb:8e:4d:e2:b5:84:50:53:
e0:d8:09:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:13:16 2025 by rpki-client