Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/34352e31302e3231322e302f32322d3234203d3e20323031333431.roa
File: 34352e31302e3231322e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier: 72va/lOWm751CCrK0lgzTH23Qk4xvVe31ubxrwdN39k=
Subject key identifier: 6F:5D:DB:39:CE:18:3C:2B:9F:AF:9B:40:B0:04:3C:EB:D3:7F:73:42
Certificate issuer: /CN=5d2125f62f509085753ba79e14ab685d68fb498d
Certificate serial: 0864A59DFDD1D63482EC85E9000EF58AE38B3D0F
Authority key identifier: 5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/34352e31302e3231322e302f32322d3234203d3e20323031333431.roa
Signing time: Mon 27 Mar 2023 08:27:49 +0000
ROA not before: Mon 27 Mar 2023 08:22:49 +0000
ROA not after: Mon 25 Mar 2024 08:27:49 +0000
asID: 201341
IP address blocks: 45.10.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:64:a5:9d:fd:d1:d6:34:82:ec:85:e9:00:0e:f5:8a:e3:8b:3d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2125f62f509085753ba79e14ab685d68fb498d
Validity
Not Before: Mar 27 08:22:49 2023 GMT
Not After : Mar 25 08:27:49 2024 GMT
Subject: CN=6F5DDB39CE183C2B9FAF9B40B0043CEBD37F7342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:da:7b:71:24:c7:d0:b0:0e:e9:17:ef:f6:
4a:76:be:9b:55:6c:d1:c1:2b:37:24:c5:53:a5:f3:
6f:0d:ca:1d:20:e6:ca:fd:c9:93:bb:0c:2a:2c:d5:
5b:88:f9:51:9c:ef:3a:ce:e8:3f:bc:51:ba:49:0a:
15:0e:c6:d7:9b:83:70:77:e2:f2:a0:d5:15:2f:5c:
6b:7b:04:2f:f0:c9:cc:16:46:46:63:24:7e:fd:b9:
24:4a:12:75:83:52:56:eb:b2:fb:85:5b:39:ee:9a:
06:45:d1:14:63:22:e8:21:86:7f:fb:74:11:c5:3a:
74:72:8d:41:ca:40:7a:bc:e6:ac:5b:92:da:db:5c:
a2:52:14:3c:70:91:d4:63:9d:9a:76:92:e4:4b:d8:
44:cf:35:4a:40:6e:6a:e0:1b:a3:d8:42:a2:22:01:
ed:38:4f:81:80:1f:7b:59:59:7c:5c:fa:52:60:82:
f2:ee:2c:67:b6:f1:91:a2:4a:fc:9b:86:f3:d4:56:
4a:02:55:1d:c6:bf:21:d0:e2:ec:a3:71:76:3a:8d:
a7:e7:46:87:f7:18:08:d5:00:d5:2d:b0:5e:e7:78:
43:92:8f:4f:4a:e5:3c:54:1f:4b:83:08:21:2d:ca:
31:75:0d:d8:80:f1:a4:dd:5f:36:ac:2e:e5:0d:92:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5D:DB:39:CE:18:3C:2B:9F:AF:9B:40:B0:04:3C:EB:D3:7F:73:42
X509v3 Authority Key Identifier:
keyid:5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/5D2125F62F509085753BA79E14AB685D68FB498D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/34352e31302e3231322e302f32322d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.212.0/22
Signature Algorithm: sha256WithRSAEncryption
57:c4:da:bb:8c:b3:86:e9:dc:15:3e:fb:b0:53:a6:49:a7:7e:
56:a2:2d:6e:02:2d:0b:04:b6:b0:d8:aa:cd:e2:3c:2c:b3:cf:
1c:83:2c:50:f3:80:62:30:32:54:32:96:0d:29:b0:5c:60:09:
57:10:a6:ad:04:66:06:33:c8:a0:df:13:9c:bc:90:ec:f6:44:
08:da:56:09:56:7d:95:e0:4f:8c:ce:6a:07:10:d0:f7:3b:ed:
fe:69:80:7b:d0:76:7c:4b:a5:46:33:d6:35:25:d3:65:9b:97:
f6:be:20:b8:4e:ac:4d:d0:17:c0:93:b4:2e:3d:f8:e9:d9:9a:
30:b0:84:22:b4:ef:f6:6a:1c:6a:8e:db:13:63:a6:ab:39:e8:
28:e8:00:e3:50:db:e5:a5:42:f2:e4:f3:73:0f:46:5b:c7:d5:
da:a2:fc:d3:e6:a3:29:0b:a4:2e:1f:46:ea:71:36:27:dd:d6:
ff:cd:f2:e9:22:f2:1f:46:ac:3c:22:79:a0:19:b1:5d:33:dc:
88:f4:0e:06:74:28:dc:28:4c:cd:d2:34:4f:47:1a:e2:68:0c:
c4:da:2a:15:72:82:a8:6c:05:07:88:a4:77:87:c2:58:33:21:
d5:05:63:8f:e9:b0:4b:0c:6a:17:c3:99:ec:9e:cd:29:c0:2e:
9d:f4:5b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org