Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/34352e3133382e3234302e302f32322d3232203d3e20323031333431.roa
File: 34352e3133382e3234302e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: wa95ywDlUkFOHi/LB7wXKPksYlBIsigsFMU0fV7nlqI=
Subject key identifier: E9:F0:7C:DE:67:95:6E:02:EB:75:92:43:9D:E2:C2:8A:E8:F6:2E:9A
Certificate issuer: /CN=5d2125f62f509085753ba79e14ab685d68fb498d
Certificate serial: 5CD91B465C97F48E96FE30B796FC0B030FFD0DCB
Authority key identifier: 5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/34352e3133382e3234302e302f32322d3232203d3e20323031333431.roa
Signing time: Mon 27 Mar 2023 08:27:49 +0000
ROA not before: Mon 27 Mar 2023 08:22:49 +0000
ROA not after: Mon 25 Mar 2024 08:27:49 +0000
asID: 201341
IP address blocks: 45.138.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:d9:1b:46:5c:97:f4:8e:96:fe:30:b7:96:fc:0b:03:0f:fd:0d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2125f62f509085753ba79e14ab685d68fb498d
Validity
Not Before: Mar 27 08:22:49 2023 GMT
Not After : Mar 25 08:27:49 2024 GMT
Subject: CN=E9F07CDE67956E02EB7592439DE2C28AE8F62E9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:df:42:f6:21:6f:73:c7:72:67:74:d0:b5:
1d:a3:11:48:df:1d:58:17:e3:3d:03:03:ca:91:3a:
e2:87:66:e2:02:78:fd:4f:0d:f4:47:97:79:9d:79:
f0:1a:94:60:13:16:2c:13:be:3a:cd:59:4c:80:ab:
f8:e7:04:a5:08:7c:b3:3a:50:68:7b:5a:ea:d2:e9:
66:a5:5e:9b:ff:95:8b:bc:6e:44:a1:3e:a3:cc:e8:
6b:67:18:d3:1e:b6:37:6a:68:ff:c4:a3:26:0e:35:
2e:cd:7a:86:6f:39:ed:73:17:49:4e:89:50:f6:9a:
c7:57:1e:29:a0:9a:9d:c0:59:a7:c1:e0:22:09:7e:
44:e0:40:3f:43:40:6d:6f:72:5c:ac:9e:d7:6c:1f:
9a:6d:05:ca:b2:f2:4b:09:c8:91:0c:27:4d:0d:8f:
51:d2:45:2e:09:4b:eb:bb:87:90:18:69:58:6c:55:
c6:33:65:e0:15:76:fa:f9:b7:66:1a:38:fb:b9:fa:
4c:c0:8e:78:05:f6:86:34:76:3b:8c:e9:1d:eb:41:
d2:ec:67:eb:97:ac:ed:a4:2b:da:1d:76:04:b2:a8:
30:ff:a4:35:e7:fe:8d:da:31:d0:61:7a:c1:a3:b2:
59:0d:07:a3:b4:98:91:36:a7:e8:13:b8:cb:ac:bc:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F0:7C:DE:67:95:6E:02:EB:75:92:43:9D:E2:C2:8A:E8:F6:2E:9A
X509v3 Authority Key Identifier:
keyid:5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/5D2125F62F509085753BA79E14AB685D68FB498D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/34352e3133382e3234302e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.240.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:5d:48:30:8e:22:84:97:79:f5:80:fb:68:12:0d:6d:bf:f7:
9f:16:fc:8b:b0:bc:fe:81:cd:b9:22:3e:3b:4e:fe:3b:cc:0d:
e6:3d:64:79:b9:09:f4:41:50:52:a9:db:02:38:2c:13:aa:c8:
84:61:68:ba:3d:1f:54:f9:41:b3:4c:f1:b3:e2:77:42:75:39:
0b:34:49:ac:46:8a:f0:e2:bb:e8:b2:08:06:b5:b2:87:38:e5:
48:63:a8:62:f2:ca:9f:a5:45:a5:00:0b:46:51:de:c4:92:f3:
4e:37:2b:0f:e9:fc:e5:f4:23:a9:8a:fd:d4:0b:c6:7b:ed:22:
54:38:5d:49:e2:92:1c:9e:a8:3c:25:61:0d:02:55:7d:e9:7c:
8d:b3:77:04:f3:a1:8b:08:0c:9f:dc:26:05:b4:2c:f6:1a:79:
ac:3d:10:1d:a5:3a:5a:2f:c5:f4:cb:fe:12:72:7c:86:4e:21:
c7:68:19:b1:20:ff:54:ee:2d:15:0b:9d:97:ed:ba:cb:f4:26:
e8:1b:c1:fc:c5:60:ce:bc:12:80:db:73:7b:92:e1:76:a1:9d:
dd:90:2d:74:23:c5:6d:05:52:ac:e4:2f:2f:7a:7f:00:28:6d:
c4:9b:7b:a1:9b:76:10:b3:d5:ca:86:4f:df:56:9a:a5:cc:80:
c9:b5:72:13
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org