Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/34352e3133302e3232342e302f32322d3234203d3e20323031333431.roa
File: 34352e3133302e3232342e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier: +ptn10/Y/3sG/NNZwG96ivxRZ4RI3vaxP9qmfblIXNw=
Subject key identifier: 9D:58:AA:43:C5:54:E1:2C:4D:97:9C:ED:DA:85:8B:33:67:59:15:07
Certificate issuer: /CN=2b93b89afbb4d681de3c316382a63f25771434db
Certificate serial: 51F8FB9EBCEB0DA016EA58094A12B9C75BC0565D
Authority key identifier: 2B:93:B8:9A:FB:B4:D6:81:DE:3C:31:63:82:A6:3F:25:77:14:34:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5O4mvu01oHePDFjgqY_JXcUNNs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/34352e3133302e3232342e302f32322d3234203d3e20323031333431.roa
Signing time: Mon 27 Mar 2023 08:27:01 +0000
ROA not before: Mon 27 Mar 2023 08:22:01 +0000
ROA not after: Mon 25 Mar 2024 08:27:01 +0000
asID: 201341
IP address blocks: 45.130.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:f8:fb:9e:bc:eb:0d:a0:16:ea:58:09:4a:12:b9:c7:5b:c0:56:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b93b89afbb4d681de3c316382a63f25771434db
Validity
Not Before: Mar 27 08:22:01 2023 GMT
Not After : Mar 25 08:27:01 2024 GMT
Subject: CN=9D58AA43C554E12C4D979CEDDA858B3367591507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:d9:2e:7b:3a:9d:15:56:6d:0d:e2:6b:12:
53:f7:0e:3c:f9:ce:47:0b:c0:09:b1:39:be:9b:80:
c7:6b:20:69:f1:85:f4:a4:e0:ef:d5:f7:6a:15:99:
b3:fb:39:f4:94:61:92:14:dd:b6:12:3d:a5:af:3d:
cd:38:2e:99:b5:cd:8e:bf:29:54:fb:8d:50:61:a9:
1e:d2:c9:65:90:0c:87:b4:2f:54:28:fa:04:e5:04:
01:86:33:17:85:2d:7c:61:dc:90:87:c9:94:d4:90:
d4:42:ed:91:35:4d:10:51:b8:e5:26:9c:fb:d4:e8:
89:45:49:36:f9:80:24:37:24:74:92:f1:4f:cc:92:
4a:8d:e3:7f:10:43:ce:c3:8d:ae:e4:4b:04:d2:3b:
cc:82:42:fb:91:41:36:1c:6d:22:a0:01:e6:5d:bf:
6d:e7:71:2d:20:86:44:ed:04:e5:14:ab:b5:3d:d2:
03:a5:75:b7:e0:ab:df:a5:00:6b:f8:79:bc:28:f8:
37:2f:2e:86:f1:b1:c6:57:40:77:3a:eb:a0:e1:a1:
44:30:38:b4:98:71:d7:a1:68:be:92:b0:32:3d:02:
a8:e5:a3:e8:22:2e:ee:3a:54:da:07:36:23:2d:e7:
ca:94:fb:59:ba:ff:32:2e:49:15:c8:1f:9e:39:ff:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:58:AA:43:C5:54:E1:2C:4D:97:9C:ED:DA:85:8B:33:67:59:15:07
X509v3 Authority Key Identifier:
keyid:2B:93:B8:9A:FB:B4:D6:81:DE:3C:31:63:82:A6:3F:25:77:14:34:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/2B93B89AFBB4D681DE3C316382A63F25771434DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5O4mvu01oHePDFjgqY_JXcUNNs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/34352e3133302e3232342e302f32322d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.224.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:d7:d9:7b:42:55:9d:29:6f:60:c9:07:e6:9a:3f:47:38:f3:
0c:b7:77:fb:3e:b4:dc:10:fa:f7:5c:ad:e4:3e:79:1e:11:fa:
7f:89:69:ed:41:74:7e:e5:f9:48:52:d4:73:32:89:13:6a:74:
eb:c8:c5:28:1e:6f:a1:24:33:ce:27:05:b8:f0:a2:5c:78:d1:
cd:3a:e2:73:a5:6a:e1:c2:da:e7:cf:a0:7f:89:34:b3:b3:24:
2a:2d:a9:7c:72:d9:e9:4d:fd:f5:2c:c6:a4:cb:72:8c:8c:71:
0b:ff:97:52:f0:f3:1d:14:17:65:02:7a:89:cc:62:a5:b5:b3:
4c:45:6e:55:10:42:43:26:97:4c:7c:30:de:33:a2:89:23:57:
42:91:f1:05:e4:88:0d:ae:25:2d:92:c9:8d:a6:ef:4f:20:21:
ae:cd:70:41:ba:32:b6:e3:d9:c9:d1:0f:75:30:be:de:4d:35:
73:50:1f:dc:2e:bc:bd:0d:9f:4a:71:60:7d:ba:49:9b:da:1f:
fa:02:b1:e7:35:a1:ac:a8:e0:89:c4:5e:8e:ee:f7:02:26:d2:
67:90:0d:89:10:5f:fc:95:df:ad:60:5c:c1:c7:ff:f4:79:b4:
64:d1:9a:f9:30:9e:3a:be:cd:f4:14:80:46:2f:35:d4:72:2c:
c5:5e:53:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org