Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/34352e39342e36342e302f32322d3232203d3e20323031333431.roa
File: 34352e39342e36342e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: k+nZEbjPSk4vP02I0ZhFPmlRToLUNyicUgq7G+eAgyE=
Subject key identifier: 2B:FE:C5:97:6B:DB:CD:26:35:E1:12:F1:8B:69:84:69:1B:38:75:57
Certificate issuer: /CN=2b93b89afbb4d681de3c316382a63f25771434db
Certificate serial: 4D79184CEA8031ABAC62EC65627A220F5006251A
Authority key identifier: 2B:93:B8:9A:FB:B4:D6:81:DE:3C:31:63:82:A6:3F:25:77:14:34:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5O4mvu01oHePDFjgqY_JXcUNNs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/34352e39342e36342e302f32322d3232203d3e20323031333431.roa
Signing time: Mon 27 Mar 2023 08:27:01 +0000
ROA not before: Mon 27 Mar 2023 08:22:01 +0000
ROA not after: Mon 25 Mar 2024 08:27:01 +0000
asID: 201341
IP address blocks: 45.94.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:79:18:4c:ea:80:31:ab:ac:62:ec:65:62:7a:22:0f:50:06:25:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b93b89afbb4d681de3c316382a63f25771434db
Validity
Not Before: Mar 27 08:22:01 2023 GMT
Not After : Mar 25 08:27:01 2024 GMT
Subject: CN=2BFEC5976BDBCD2635E112F18B6984691B387557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7e:a6:ff:0e:7a:0b:a5:90:e4:d5:1e:ed:f0:
82:4f:12:57:b0:59:17:20:4a:89:48:da:2b:a1:e1:
71:61:13:d4:e9:c8:50:86:3e:eb:fe:b9:81:41:4a:
77:30:f2:31:59:00:f1:47:8a:5c:b4:3a:2f:56:4b:
80:40:be:66:cf:eb:e8:b8:dc:86:c4:48:b5:9e:db:
07:64:4e:29:ca:f8:45:73:9a:99:d5:c9:70:be:db:
ce:ac:57:a6:3c:46:9e:db:98:09:4d:5d:00:5b:a0:
55:9d:e4:05:68:c5:b1:c5:95:90:c4:ca:6e:3c:7c:
f4:70:b2:01:d9:ec:38:cd:75:d1:ae:0e:2e:c3:1b:
b9:e2:02:80:24:21:b6:71:a9:6c:e2:d8:43:86:4f:
53:71:69:0a:42:6b:9a:c7:de:f1:c6:cd:0b:19:c6:
6b:7c:ff:af:09:4a:6f:85:c6:61:83:74:d2:8f:89:
08:5c:f8:11:f4:95:5e:b0:83:20:4e:7c:49:e5:cd:
ef:47:e6:77:16:0a:e5:60:3b:55:e8:e3:f4:ef:3d:
18:c7:60:19:2f:32:c2:99:e0:cd:59:75:5f:b7:6e:
61:96:d5:7a:f9:dc:d4:dd:9e:96:80:e6:91:15:59:
9e:8d:0c:ba:e7:02:fe:bc:0b:82:10:d9:bb:9a:05:
a6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FE:C5:97:6B:DB:CD:26:35:E1:12:F1:8B:69:84:69:1B:38:75:57
X509v3 Authority Key Identifier:
keyid:2B:93:B8:9A:FB:B4:D6:81:DE:3C:31:63:82:A6:3F:25:77:14:34:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/2B93B89AFBB4D681DE3C316382A63F25771434DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5O4mvu01oHePDFjgqY_JXcUNNs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/176/34352e39342e36342e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.64.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:db:42:c9:77:c8:e5:fe:c4:4d:db:53:1f:b5:97:ee:31:6a:
a8:da:69:53:63:4f:f6:20:46:89:49:9b:fe:95:2f:37:3f:6e:
4a:2b:65:3b:1d:23:88:5f:c0:0d:de:99:f2:1c:97:1c:b5:7e:
08:63:30:60:c6:a0:20:16:f2:0e:61:3a:d3:cb:dc:8e:6f:26:
fb:88:bc:8a:e9:45:ff:d3:2e:14:95:78:f1:d8:5b:a2:50:4d:
af:91:04:3e:93:06:32:86:23:3c:8c:7e:ab:00:10:80:29:f6:
c2:8a:5b:f0:d2:65:4f:2c:57:02:10:82:2f:e4:f8:16:5d:a8:
79:75:3e:1f:04:df:c2:5c:a2:98:61:48:62:2a:84:d9:c6:2a:
df:26:c7:aa:d9:85:25:9f:ef:c9:a0:6a:70:ff:b3:ab:06:2f:
71:95:a0:cf:b4:0f:3e:26:10:d4:75:aa:39:31:85:d1:d3:a4:
2c:f6:ae:c7:80:3c:60:d2:29:21:e7:bf:4b:fd:f8:c8:e8:7a:
b6:02:17:72:22:06:f0:3f:2e:aa:ea:99:c5:27:86:15:d0:2c:
43:c2:c8:66:a0:b9:3a:73:90:2f:b1:fe:18:63:ee:a1:28:d6:
8e:2b:bb:7f:07:62:06:f5:e1:ff:2c:3b:c9:2f:f4:bd:5e:41:
f0:d0:90:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org