Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/34352e39342e35382e302f32342d3332203d3e203531313637.roa
File: 34352e39342e35382e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 6pwJXFvUZnsfidvmLCrOyNOGTRMuEvBTmc2im0g2RLE=
Subject key identifier: 15:10:93:EF:D0:0C:33:4B:60:25:0C:31:A0:03:92:F9:4B:B6:02:B9
Certificate issuer: /CN=2b93b89afbb4d681de3c316382a63f25771434db
Certificate serial: 13B251AF8C80277171A408B4AED22AF345EFF9B1
Authority key identifier: 2B:93:B8:9A:FB:B4:D6:81:DE:3C:31:63:82:A6:3F:25:77:14:34:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5O4mvu01oHePDFjgqY_JXcUNNs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/34352e39342e35382e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:00 +0000
ROA not before: Mon 27 Mar 2023 08:22:00 +0000
ROA not after: Mon 25 Mar 2024 08:27:00 +0000
asID: 51167
IP address blocks: 45.94.58.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b2:51:af:8c:80:27:71:71:a4:08:b4:ae:d2:2a:f3:45:ef:f9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b93b89afbb4d681de3c316382a63f25771434db
Validity
Not Before: Mar 27 08:22:00 2023 GMT
Not After : Mar 25 08:27:00 2024 GMT
Subject: CN=151093EFD00C334B60250C31A00392F94BB602B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:40:66:2c:3b:4e:8a:0a:1b:d7:dc:6e:08:
08:3c:01:e5:29:79:e8:59:78:e0:10:58:4f:8b:04:
b8:1e:dc:4f:19:f9:1c:ef:90:6d:51:5f:c4:ae:78:
0a:da:70:10:61:9b:ae:53:73:9e:5f:de:ab:83:f0:
d3:1b:f6:c0:aa:9f:10:a4:41:6c:7f:f7:1f:14:b4:
0b:ad:ce:ba:20:24:ca:bc:ab:0b:50:10:b7:13:9b:
c6:8a:c1:b7:3f:bb:83:80:73:63:78:90:01:3b:31:
03:93:4e:c7:fe:24:55:3e:70:ee:1c:ec:89:e7:90:
a8:e6:ff:4b:53:99:99:10:7c:fb:d7:2f:75:b8:8d:
d4:49:aa:ce:d8:6d:f6:fe:00:d3:5b:bb:c1:c7:7a:
be:61:aa:0d:54:ff:d3:b2:2d:f5:f8:21:6a:27:6c:
bd:c4:19:bb:d5:e7:af:1b:bc:18:2d:b8:ac:7f:26:
d5:5e:68:be:37:71:4a:05:45:eb:3d:fa:2c:a7:a7:
fd:75:53:8b:ee:fa:49:c7:51:fb:9b:5e:da:22:2c:
2c:c4:9d:8b:85:ac:01:4d:dc:11:e1:16:da:4a:ad:
cd:2c:7c:e4:34:8f:f1:3e:6c:1f:b7:22:c5:8d:87:
2c:98:93:a8:c7:90:ad:b7:07:5a:7f:e5:fa:72:5e:
9f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:10:93:EF:D0:0C:33:4B:60:25:0C:31:A0:03:92:F9:4B:B6:02:B9
X509v3 Authority Key Identifier:
keyid:2B:93:B8:9A:FB:B4:D6:81:DE:3C:31:63:82:A6:3F:25:77:14:34:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/2B93B89AFBB4D681DE3C316382A63F25771434DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5O4mvu01oHePDFjgqY_JXcUNNs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/34352e39342e35382e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.58.0/24
Signature Algorithm: sha256WithRSAEncryption
10:f9:46:36:13:06:a4:11:20:26:cd:ff:c0:3b:e7:ee:cf:93:
7c:83:b2:15:fc:23:6c:e5:06:2c:a7:f4:41:33:49:0e:ca:87:
b5:e9:ad:60:cd:aa:37:11:96:58:4f:06:23:46:75:4b:3f:b2:
8f:b1:12:65:d3:c9:c5:b7:0e:77:17:61:e3:e6:bf:68:00:88:
73:7d:b5:33:d2:23:66:44:26:69:48:90:42:c9:94:dc:d6:2a:
1d:bf:4b:86:b1:9e:3a:00:ac:65:33:fa:53:ff:61:cf:fe:28:
19:27:85:23:ee:bc:17:f6:66:20:2d:04:4a:fa:62:8c:f7:32:
0b:98:b7:fb:9c:8c:e7:61:df:13:84:d8:de:d4:1d:95:8c:d8:
62:38:e2:de:4b:72:e8:84:1a:eb:33:27:dc:f1:93:e1:b3:cf:
c5:bf:12:cf:de:01:0a:89:5f:da:c2:2a:98:37:7c:c8:b6:5f:
a3:73:9f:d7:00:61:45:32:d5:e5:4f:aa:b6:8a:82:9e:50:14:
e0:22:54:af:97:cf:a3:19:17:c7:59:49:b1:6f:0c:86:f2:dc:
7f:bd:c5:8c:07:1d:98:b1:fd:5f:66:4a:c0:26:5f:ad:72:a8:
4d:22:a0:5a:ea:b6:6c:bb:97:fc:28:f2:ec:07:97:0b:d7:38:
d3:cd:8a:ff
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUE7JRr4yAJ3FxpAi0rtIq80Xv+bEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMmI5M2I4OWFmYmI0ZDY4MWRlM2MzMTYzODJhNjNmMjU3
NzE0MzRkYjAeFw0yMzAzMjcwODIyMDBaFw0yNDAzMjUwODI3MDBaMDMxMTAvBgNV
BAMTKDE1MTA5M0VGRDAwQzMzNEI2MDI1MEMzMUEwMDM5MkY5NEJCNjAyQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQykBmLDtOigob19xuCAg8AeUp
eehZeOAQWE+LBLge3E8Z+RzvkG1RX8SueAracBBhm65Tc55f3quD8NMb9sCqnxCk
QWx/9x8UtAutzrogJMq8qwtQELcTm8aKwbc/u4OAc2N4kAE7MQOTTsf+JFU+cO4c
7InnkKjm/0tTmZkQfPvXL3W4jdRJqs7Ybfb+ANNbu8HHer5hqg1U/9OyLfX4IWon
bL3EGbvV568bvBgtuKx/JtVeaL43cUoFRes9+iynp/11U4vu+knHUfubXtoiLCzE
nYuFrAFN3BHhFtpKrc0sfOQ0j/E+bB+3IsWNhyyYk6jHkK23B1p/5fpyXp9bAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUFRCT79AMM0tgJQwxoAOS+Uu2ArkwHwYDVR0j
BBgwFoAUK5O4mvu01oHePDFjgqY/JXcUNNswDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzYvMkI5M0I4OUFGQkI0RDY4MURFM0MzMTYzODJBNjNGMjU3NzE0MzRE
Qi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0s1TzRtdnUwMW9IZVBERmpncVlf
SlhjVU5Ocy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ni8zNDM1MmUzOTM0MmUz
NTM4MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AC1eOjANBgkqhkiG9w0BAQsFAAOCAQEAEPlGNhMGpBEgJs3/wDvn7s+TfIOyFfwj
bOUGLKf0QTNJDsqHtemtYM2qNxGWWE8GI0Z1Sz+yj7ESZdPJxbcOdxdh4+a/aACI
c321M9IjZkQmaUiQQsmU3NYqHb9LhrGeOgCsZTP6U/9hz/4oGSeFI+68F/ZmIC0E
SvpijPcyC5i3+5yM52HfE4TY3tQdlYzYYjji3kty6IQa6zMn3PGT4bPPxb8Sz94B
Colf2sIqmDd8yLZfo3Of1wBhRTLV5U+qtoqCnlAU4CJUr5fPoxkXx1lJsW8MhvLc
f73FjAcdmLH9X2ZKwCZfrXKoTSKgWuq2bLuX/Cjy7AeXC9c4082K/w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org