Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/34352e3134302e3230302e302f32322d3232203d3e20323031333431.roa
File: 34352e3134302e3230302e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: pt+etDQu8TzUvsWLiylMWY3lXmw2mR1wOFHuU1xwvZg=
Subject key identifier: 53:92:24:C6:C6:E2:E4:3C:C4:C3:52:01:A9:AD:6A:3B:4B:C4:49:93
Certificate issuer: /CN=2b93b89afbb4d681de3c316382a63f25771434db
Certificate serial: 64DE1174CD4CB9FDA7E0E0BCD1C1209548748307
Authority key identifier: 2B:93:B8:9A:FB:B4:D6:81:DE:3C:31:63:82:A6:3F:25:77:14:34:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5O4mvu01oHePDFjgqY_JXcUNNs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/34352e3134302e3230302e302f32322d3232203d3e20323031333431.roa
Signing time: Mon 27 Mar 2023 08:27:01 +0000
ROA not before: Mon 27 Mar 2023 08:22:01 +0000
ROA not after: Mon 25 Mar 2024 08:27:01 +0000
asID: 201341
IP address blocks: 45.140.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:de:11:74:cd:4c:b9:fd:a7:e0:e0:bc:d1:c1:20:95:48:74:83:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b93b89afbb4d681de3c316382a63f25771434db
Validity
Not Before: Mar 27 08:22:01 2023 GMT
Not After : Mar 25 08:27:01 2024 GMT
Subject: CN=539224C6C6E2E43CC4C35201A9AD6A3B4BC44993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:4a:64:e4:af:8e:ac:07:dd:f9:5b:2b:c1:
ce:2a:c9:81:87:3b:8f:20:06:34:cb:bb:61:ad:08:
83:69:64:b8:cd:60:bb:ff:16:31:c8:79:d2:cc:b1:
9e:29:72:d9:88:23:b8:cd:b0:c0:95:9f:c9:fd:2e:
d9:59:b1:c9:bc:57:7b:d6:8b:5d:a3:3f:f2:4e:c6:
8e:49:16:31:4f:0f:0c:5a:4c:6c:ef:00:8a:b8:99:
56:1c:8d:da:05:a7:85:78:2f:f8:c0:55:2b:f9:ed:
c9:86:0b:4c:0e:36:ef:dd:df:e2:2b:ac:ec:59:5c:
ed:03:ce:8b:fb:e9:fe:18:61:e3:2f:41:bf:4d:c3:
64:1f:eb:53:30:df:b6:79:c6:c8:05:c3:35:08:5f:
db:fd:46:da:ad:9b:35:a3:1a:f9:d7:10:08:60:09:
5e:c6:bb:d4:b0:11:14:52:c4:79:89:55:c8:d0:f7:
97:01:d4:9e:5f:2c:00:f6:a7:97:7f:cc:27:19:69:
44:d9:d1:ad:ba:ec:ad:60:f2:43:42:e4:76:24:0d:
34:06:e0:8d:3f:56:80:fe:2c:d9:d1:f8:cc:55:0e:
a3:1a:74:ef:41:a9:26:23:ac:d5:a2:ce:b6:35:35:
0b:e4:48:cb:11:53:97:37:d5:8f:a9:db:af:33:d9:
b2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:92:24:C6:C6:E2:E4:3C:C4:C3:52:01:A9:AD:6A:3B:4B:C4:49:93
X509v3 Authority Key Identifier:
keyid:2B:93:B8:9A:FB:B4:D6:81:DE:3C:31:63:82:A6:3F:25:77:14:34:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/2B93B89AFBB4D681DE3C316382A63F25771434DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5O4mvu01oHePDFjgqY_JXcUNNs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/34352e3134302e3230302e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.200.0/22
Signature Algorithm: sha256WithRSAEncryption
86:34:04:4f:89:57:c5:4a:14:d9:43:3a:3e:f8:1e:ee:f1:b9:
f2:18:e1:14:8f:6e:9b:a2:10:11:2c:12:64:40:9c:ea:1f:3c:
7f:78:73:49:58:7b:65:c3:c9:df:90:bd:2d:ef:a3:2a:08:c9:
e2:60:7d:c1:5d:a4:c4:f3:ed:16:f9:4f:3b:01:98:34:2b:6f:
ab:d7:0d:bc:ed:5d:c6:cd:24:6d:03:6a:a6:27:c1:a1:a5:f0:
33:b3:ef:24:bb:a5:f9:6b:49:f7:59:6a:9c:bf:14:ea:68:05:
29:a1:12:24:70:4a:e4:2e:20:c7:19:7b:91:e7:bb:8b:46:47:
ec:74:85:3b:be:04:8a:1d:a4:7e:ca:93:65:36:3f:3a:19:a0:
84:95:89:27:1a:85:bb:32:d1:01:0d:9d:11:22:e7:e8:3d:19:
3c:81:75:5f:d3:5d:b2:44:e9:6f:ab:d3:ba:1a:03:e5:d2:c0:
99:ff:0f:25:0b:38:f6:09:68:ce:c3:d2:e9:8a:c1:20:7a:21:
68:58:63:07:a9:b0:9e:2e:32:4d:85:b8:dc:27:b3:55:0c:6f:
32:67:90:c2:88:31:cc:f2:7a:9d:01:5b:11:12:71:10:90:c8:
46:a7:56:0f:ad:6a:51:57:1d:53:44:33:16:59:05:cf:80:0a:
bb:9b:75:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org