Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/34352e39342e35362e302f32342d3234203d3e20323132343136.roa
File: 34352e39342e35362e302f32342d3234203d3e20323132343136.roa (raw, json)
Hash identifier: DUucm4/kkDk/5p9FiROjQdI7iX+RHxhwveQQ/dggFKw=
Subject key identifier: C1:65:C4:AF:8E:13:9C:8A:84:A9:36:B3:C1:D1:E9:F7:18:C5:2F:64
Certificate issuer: /CN=2b93b89afbb4d681de3c316382a63f25771434db
Certificate serial: 21BE77A097B86FE8C0FD0EA8C9FEDE9D133E976B
Authority key identifier: 2B:93:B8:9A:FB:B4:D6:81:DE:3C:31:63:82:A6:3F:25:77:14:34:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5O4mvu01oHePDFjgqY_JXcUNNs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/34352e39342e35362e302f32342d3234203d3e20323132343136.roa
Signing time: Mon 27 Mar 2023 08:27:01 +0000
ROA not before: Mon 27 Mar 2023 08:22:01 +0000
ROA not after: Mon 25 Mar 2024 08:27:01 +0000
asID: 212416
IP address blocks: 45.94.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:be:77:a0:97:b8:6f:e8:c0:fd:0e:a8:c9:fe:de:9d:13:3e:97:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b93b89afbb4d681de3c316382a63f25771434db
Validity
Not Before: Mar 27 08:22:01 2023 GMT
Not After : Mar 25 08:27:01 2024 GMT
Subject: CN=C165C4AF8E139C8A84A936B3C1D1E9F718C52F64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:33:e3:66:f0:4f:65:41:73:55:d0:43:01:
ad:30:9c:93:3a:17:4d:bb:b6:d1:ed:9a:88:98:fd:
3f:d9:00:1e:6b:57:8d:95:09:11:35:ca:e6:1d:00:
54:f9:5a:fb:3c:58:a1:6a:e4:3d:39:9b:a7:ea:f4:
07:44:0b:bd:fd:9d:0e:3c:e7:18:af:e5:dd:d4:ea:
9d:0d:7a:f9:12:40:b5:e9:f0:16:e3:78:a1:04:c6:
30:65:36:81:c3:91:d3:24:e8:d3:c8:3a:78:85:1e:
37:e9:9e:6d:28:2e:df:06:e8:02:30:ca:bf:67:e5:
fb:ad:6d:59:68:cc:34:4b:d7:56:fd:17:ff:91:9e:
1f:79:0e:b9:39:59:6f:52:69:c6:ab:cc:b9:7d:cb:
5d:ac:b9:14:29:54:82:5e:22:43:e8:fe:6a:03:c0:
a1:cd:f6:ab:1b:4a:65:a4:7f:36:8d:23:f9:2e:73:
84:ee:a5:13:97:9e:a7:a6:74:05:e8:4c:9a:a5:4c:
d3:a9:12:d1:2d:7e:3d:b8:6b:b4:35:c1:e4:cd:fa:
26:ac:2d:c7:33:55:35:e4:e4:94:36:80:8f:71:d6:
26:c8:7c:73:3d:40:09:21:5e:19:00:b8:25:3a:1d:
5f:64:c7:ec:f1:d1:8f:8f:d7:09:cc:06:5e:a7:be:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:65:C4:AF:8E:13:9C:8A:84:A9:36:B3:C1:D1:E9:F7:18:C5:2F:64
X509v3 Authority Key Identifier:
keyid:2B:93:B8:9A:FB:B4:D6:81:DE:3C:31:63:82:A6:3F:25:77:14:34:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/2B93B89AFBB4D681DE3C316382A63F25771434DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5O4mvu01oHePDFjgqY_JXcUNNs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/34352e39342e35362e302f32342d3234203d3e20323132343136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.56.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:0c:27:59:d3:7f:99:14:a9:65:61:cb:43:ca:be:22:a8:1a:
b7:aa:2c:0e:b5:7d:fd:b1:cf:43:ad:e5:96:53:2e:e2:f4:91:
cb:e8:3b:13:d0:92:04:3f:47:82:ff:6c:d1:52:33:32:1f:46:
03:92:c0:99:74:d5:48:d7:37:30:39:a6:d6:56:86:d9:8b:ff:
f5:34:f2:5b:f1:d0:9d:a0:b4:5a:b8:cb:91:87:a2:dc:26:c7:
cb:be:15:94:92:a8:15:72:58:bb:54:ab:ef:78:cc:df:cb:2f:
75:8a:36:30:a9:e2:25:ad:29:50:63:69:c0:81:da:a9:9e:1c:
d8:cf:19:81:f3:76:be:56:06:77:2f:8a:fe:11:6d:b9:7b:00:
39:d0:3d:3b:56:b3:8e:aa:11:79:c2:08:4f:80:6f:39:16:53:
87:aa:c8:65:16:c3:bc:96:cb:f3:75:4f:67:71:f5:74:7d:7a:
1a:60:60:27:24:ec:bf:26:c0:0a:62:bb:e0:98:c4:47:94:d6:
93:78:b2:3e:bd:fc:f0:e9:9b:94:cf:fe:aa:2d:19:e5:9a:8b:
11:82:56:9f:06:10:14:f6:a1:f3:ce:51:74:c3:76:2c:a4:50:
60:dc:73:9b:85:cd:db:14:eb:62:cb:0d:ad:43:8c:dd:ab:d0:
50:8d:92:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org