Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23fd73ed-1860-4eef-bc29-516c705dd2af/0/34352e3132382e31322e302f32332d3234203d3e2033333230.roa
File: 34352e3132382e31322e302f32332d3234203d3e2033333230.roa (raw, json)
Hash identifier: EdGVLVzXnzNZciMgZxgxKlBzYYhBjcxAe6BgVI6JWjQ=
Subject key identifier: 49:6B:4F:FB:D7:71:82:13:32:D8:58:20:87:F1:D8:EE:8B:B7:51:6B
Certificate issuer: /CN=c9d3b7260210834dfac41f1585a1e0a2055065ae
Certificate serial: 1E9A68AEF7B7D6C8569F7001A6FB566ED46A5427
Authority key identifier: C9:D3:B7:26:02:10:83:4D:FA:C4:1F:15:85:A1:E0:A2:05:50:65:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydO3JgIQg036xB8VhaHgogVQZa4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23fd73ed-1860-4eef-bc29-516c705dd2af/0/34352e3132382e31322e302f32332d3234203d3e2033333230.roa
Signing time: Mon 03 Apr 2023 17:28:37 +0000
ROA not before: Mon 03 Apr 2023 17:23:37 +0000
ROA not after: Mon 01 Apr 2024 17:28:37 +0000
asID: 3320
IP address blocks: 45.128.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:9a:68:ae:f7:b7:d6:c8:56:9f:70:01:a6:fb:56:6e:d4:6a:54:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d3b7260210834dfac41f1585a1e0a2055065ae
Validity
Not Before: Apr 3 17:23:37 2023 GMT
Not After : Apr 1 17:28:37 2024 GMT
Subject: CN=496B4FFBD771821332D8582087F1D8EE8BB7516B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:67:c4:0f:be:26:19:81:7d:e2:ac:88:99:
e8:11:fc:a2:9f:18:1f:fc:b7:64:8b:82:36:68:85:
4f:b9:8b:09:04:e9:02:ee:fe:70:98:7a:a4:4c:47:
e6:e0:fa:81:1b:d1:ef:e7:05:92:4f:76:09:db:e9:
d1:0b:06:d4:8b:a0:47:d7:8c:4a:84:f9:0e:0f:8b:
a4:8f:d6:da:fb:45:7c:7e:a5:6a:6b:fc:c1:77:68:
86:eb:2a:c8:58:3f:70:df:0f:84:bf:28:d8:ca:4c:
0f:dd:1a:00:d7:bd:58:2f:d6:38:f7:50:2b:6c:13:
bf:0d:f1:02:43:45:b9:7a:78:3f:30:ad:c7:48:09:
ad:bc:0b:cd:ae:f2:d2:53:78:53:ff:fa:12:5f:f5:
5b:62:8a:9c:45:00:1b:eb:21:b5:54:35:5b:08:7f:
3b:79:72:9a:cd:55:e8:09:b4:8b:58:c6:bd:16:23:
7f:5b:51:eb:d2:77:07:a3:e5:dd:50:e5:13:9d:d3:
12:fc:5e:4d:3b:8b:85:5d:ff:22:51:ea:ca:09:e5:
5c:6e:11:15:8f:92:47:ff:cf:d7:6a:0a:d7:2d:ba:
13:97:92:2f:8a:00:5b:eb:36:ba:1f:e4:67:6f:58:
55:6e:73:80:40:1e:e1:37:44:a0:45:ca:80:3f:9c:
0a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6B:4F:FB:D7:71:82:13:32:D8:58:20:87:F1:D8:EE:8B:B7:51:6B
X509v3 Authority Key Identifier:
keyid:C9:D3:B7:26:02:10:83:4D:FA:C4:1F:15:85:A1:E0:A2:05:50:65:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23fd73ed-1860-4eef-bc29-516c705dd2af/0/C9D3B7260210834DFAC41F1585A1E0A2055065AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydO3JgIQg036xB8VhaHgogVQZa4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23fd73ed-1860-4eef-bc29-516c705dd2af/0/34352e3132382e31322e302f32332d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.12.0/23
Signature Algorithm: sha256WithRSAEncryption
34:34:40:f1:d5:f0:3c:b5:0e:86:f1:46:d7:47:7d:4a:e7:f4:
a5:e3:09:c5:13:aa:be:83:2a:b8:c1:50:f4:23:c6:03:e3:cd:
c8:0a:17:60:c4:69:0e:54:74:fb:91:d5:c1:58:6f:b0:88:ea:
3a:e7:69:dc:44:e2:cb:fa:d5:98:af:3e:a2:12:d0:62:6f:12:
3a:d8:40:83:a9:b0:8f:cb:c6:66:f9:76:60:38:c8:b8:67:ab:
cc:a1:b2:25:75:76:cf:10:22:69:d4:70:a6:35:1e:f4:d4:ae:
04:22:35:28:dc:20:91:bc:9f:55:2a:57:75:74:ae:0c:17:d0:
0f:f5:fc:e6:e6:c2:f3:81:23:06:8b:35:a2:9b:d0:f0:b3:1b:
ed:86:9b:87:89:88:cf:a8:56:6b:45:1a:74:9d:19:d7:f3:39:
10:31:ff:69:48:81:a3:45:d2:a4:06:20:8d:76:dd:eb:ae:7e:
5d:1b:81:37:9a:cd:65:f6:d9:21:bc:d8:a7:49:72:0a:60:5b:
8e:b7:29:e0:13:2f:34:14:cc:16:70:ec:45:43:62:55:20:45:
b4:ba:b8:b0:ff:63:2c:9e:14:f5:b2:eb:e9:00:14:40:f6:dc:
a0:5b:b4:5e:75:aa:82:c9:89:49:5f:aa:6d:75:9c:cc:8b:3e:
e5:59:28:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:10 2024 by rpki-client on console-fra.rpki-client.org