Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/34352e38372e382e302f32322d3234203d3e20323031333431.roa
File: 34352e38372e382e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier: 3d7BDJi27ha/MWbKF1LZmgyFykA+Dr1bk755Dy5CEhk=
Subject key identifier: C5:2C:38:E8:0D:28:2D:7C:8F:20:7A:AA:FD:09:65:44:15:8D:53:99
Certificate issuer: /CN=2b93b89afbb4d681de3c316382a63f25771434db
Certificate serial: 5A4D5F72B0D024430BE74CE517FE68AB8B9E993A
Authority key identifier: 2B:93:B8:9A:FB:B4:D6:81:DE:3C:31:63:82:A6:3F:25:77:14:34:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5O4mvu01oHePDFjgqY_JXcUNNs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/34352e38372e382e302f32322d3234203d3e20323031333431.roa
Signing time: Mon 27 Mar 2023 08:27:01 +0000
ROA not before: Mon 27 Mar 2023 08:22:01 +0000
ROA not after: Mon 25 Mar 2024 08:27:01 +0000
asID: 201341
IP address blocks: 45.87.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:4d:5f:72:b0:d0:24:43:0b:e7:4c:e5:17:fe:68:ab:8b:9e:99:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b93b89afbb4d681de3c316382a63f25771434db
Validity
Not Before: Mar 27 08:22:01 2023 GMT
Not After : Mar 25 08:27:01 2024 GMT
Subject: CN=C52C38E80D282D7C8F207AAAFD096544158D5399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b4:cb:5f:4c:ba:72:ef:24:ca:c5:26:77:64:
87:63:6c:3a:bf:c9:2c:d1:5a:31:9b:80:96:15:54:
1a:15:88:71:08:57:b2:a5:12:c7:c9:3a:d3:ed:5c:
c3:45:e1:cc:6d:e4:df:95:67:00:43:f7:e8:ef:6f:
6a:e9:59:90:5c:b2:1d:ff:f3:da:24:f6:2b:e8:63:
15:a6:f2:be:1b:6d:04:a8:56:41:61:58:09:fb:6f:
88:c8:e9:9d:63:7f:5b:0c:64:7d:ef:54:bc:04:7d:
94:a9:40:cf:67:75:6b:d7:25:56:39:99:a5:c6:a7:
cc:1f:8c:bf:77:d7:fc:de:55:74:7e:d2:9c:6b:c6:
cb:ba:52:44:8c:05:67:76:ea:9c:69:62:4c:2f:a9:
55:9a:53:5b:ff:e3:f3:7b:4f:f5:d6:db:c7:ce:df:
7a:c6:3d:07:e1:53:20:72:20:5c:37:fc:27:cd:52:
7f:65:94:e4:bd:0d:c5:73:f5:92:8a:44:e1:15:0e:
20:74:d3:59:e5:e5:f5:7e:59:20:0d:e4:0c:61:e8:
c1:bd:e4:28:5b:ef:72:d8:70:26:3d:60:e1:a4:39:
83:22:b6:74:1f:44:72:0a:41:29:f4:ed:2b:58:1d:
c1:98:f5:b7:d4:4d:7b:30:46:2e:08:f4:21:49:b0:
40:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2C:38:E8:0D:28:2D:7C:8F:20:7A:AA:FD:09:65:44:15:8D:53:99
X509v3 Authority Key Identifier:
keyid:2B:93:B8:9A:FB:B4:D6:81:DE:3C:31:63:82:A6:3F:25:77:14:34:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/2B93B89AFBB4D681DE3C316382A63F25771434DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5O4mvu01oHePDFjgqY_JXcUNNs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/34352e38372e382e302f32322d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.8.0/22
Signature Algorithm: sha256WithRSAEncryption
19:50:40:15:d2:f1:d1:2e:92:29:e1:d0:54:3a:05:65:74:85:
7f:a7:a1:c8:80:b1:45:d0:ca:85:10:07:4f:81:c9:cf:d1:78:
6a:08:25:2f:5b:0b:18:b1:e7:67:5e:2a:03:e2:14:88:20:f3:
eb:ff:09:7b:4d:81:8e:ef:b4:1e:87:cf:4c:5f:98:5c:fb:f0:
b3:db:91:6a:3d:58:24:a2:1b:4d:6d:c3:35:0a:06:af:49:ab:
ef:e6:7f:9f:b1:17:ba:35:4d:a1:55:da:db:45:a3:00:3c:8c:
a0:53:be:39:67:c2:6f:47:83:d5:df:71:69:e2:ae:f3:b3:5f:
54:d9:91:74:6e:ae:9a:47:db:86:cd:fa:63:20:4d:6b:c7:bb:
0f:3e:2c:41:c4:eb:54:e3:4d:f0:e9:0c:c8:8b:2e:47:e5:9c:
bb:82:bc:ad:c8:16:8b:df:92:4f:bd:0b:f3:86:a2:a9:c2:d4:
ab:ea:6c:04:9c:2c:1e:b5:70:c6:43:47:d1:6c:e6:32:c2:d7:
85:79:71:c8:6a:ca:31:8a:d0:fc:b7:9c:f1:66:4e:7c:9b:3e:
a7:df:e6:a2:96:cf:65:c4:f2:a5:9b:4b:36:9c:75:76:c6:61:
fb:cb:1c:3b:be:02:83:0f:1d:84:d9:8d:0c:30:3f:5d:83:35:
b8:ed:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org