Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23fd73ed-1860-4eef-bc29-516c705dd2af/0/34352e3132382e31342e302f32332d3234203d3e2033333230.roa
File: 34352e3132382e31342e302f32332d3234203d3e2033333230.roa (raw, json)
Hash identifier: TEVzRHxvq30Gemjm5HSCgHA34gfkNz3pxZDlbR1xHN4=
Subject key identifier: 2A:BA:42:C0:71:F9:5C:36:58:2A:04:EC:9F:56:D4:F0:C9:91:66:EB
Certificate issuer: /CN=c9d3b7260210834dfac41f1585a1e0a2055065ae
Certificate serial: 7DF326396F5292268CF862F0A360D556B4DF6FD6
Authority key identifier: C9:D3:B7:26:02:10:83:4D:FA:C4:1F:15:85:A1:E0:A2:05:50:65:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydO3JgIQg036xB8VhaHgogVQZa4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23fd73ed-1860-4eef-bc29-516c705dd2af/0/34352e3132382e31342e302f32332d3234203d3e2033333230.roa
Signing time: Mon 03 Apr 2023 17:28:50 +0000
ROA not before: Mon 03 Apr 2023 17:23:50 +0000
ROA not after: Mon 01 Apr 2024 17:28:50 +0000
asID: 3320
IP address blocks: 45.128.14.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:f3:26:39:6f:52:92:26:8c:f8:62:f0:a3:60:d5:56:b4:df:6f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d3b7260210834dfac41f1585a1e0a2055065ae
Validity
Not Before: Apr 3 17:23:50 2023 GMT
Not After : Apr 1 17:28:50 2024 GMT
Subject: CN=2ABA42C071F95C36582A04EC9F56D4F0C99166EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:aa:32:62:79:a9:08:54:ea:6d:c6:ec:dc:
7c:4b:f8:8a:9a:0b:19:e3:b0:ff:e8:27:64:3e:0a:
af:11:95:a2:50:ff:db:34:c7:85:bd:bc:a5:a4:06:
90:12:f2:7c:01:9a:e1:9e:d4:cb:89:0d:08:19:f8:
ab:10:45:4b:b0:78:aa:10:0c:c7:b6:cb:40:ee:f5:
a3:25:ea:0b:30:2f:dd:62:41:27:65:38:00:c9:cc:
4a:53:0c:99:64:3d:72:81:1f:66:5e:cc:74:c0:63:
ef:4b:94:09:20:28:57:41:6c:e6:48:9c:e2:dd:b6:
f4:d1:1c:00:b9:2b:1f:5b:a6:08:cf:4e:06:4e:5a:
e6:c1:46:0b:73:e1:82:d8:c1:f5:6a:2c:85:8c:3a:
80:65:4a:86:5a:61:2c:c7:85:f4:49:c6:63:7b:48:
6e:64:26:2b:1e:0a:da:24:ea:ab:27:90:55:0f:33:
72:30:41:1c:52:d0:52:4d:e3:60:9e:3d:55:a7:a2:
2c:4e:e3:af:35:5e:6f:cf:ea:16:b8:f8:30:05:f1:
f5:f8:d1:e5:d6:c0:31:ff:6e:37:03:4f:44:97:ae:
fa:a2:a1:c3:bc:6f:ee:ac:04:d0:3c:0c:eb:18:3d:
25:12:53:7b:7d:2f:1c:2c:56:c2:e6:e7:70:ec:bf:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BA:42:C0:71:F9:5C:36:58:2A:04:EC:9F:56:D4:F0:C9:91:66:EB
X509v3 Authority Key Identifier:
keyid:C9:D3:B7:26:02:10:83:4D:FA:C4:1F:15:85:A1:E0:A2:05:50:65:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/23fd73ed-1860-4eef-bc29-516c705dd2af/0/C9D3B7260210834DFAC41F1585A1E0A2055065AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydO3JgIQg036xB8VhaHgogVQZa4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23fd73ed-1860-4eef-bc29-516c705dd2af/0/34352e3132382e31342e302f32332d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.14.0/23
Signature Algorithm: sha256WithRSAEncryption
97:dd:f1:4f:f8:a1:1c:46:c3:a7:dd:b2:c8:51:d6:5c:1d:84:
fb:9c:16:4b:d7:fd:ce:18:e0:c4:eb:b7:9a:60:99:66:e0:ae:
ab:49:fd:e0:58:5d:b5:ac:73:6d:24:3b:b1:df:3f:46:cc:35:
0d:10:89:b5:03:70:ed:7b:b9:dd:6c:d1:e6:30:ee:f2:3a:2c:
57:8d:25:13:01:26:66:53:33:1e:1a:5f:5f:9a:c8:1d:43:d9:
c8:f1:b8:4e:f1:61:ec:08:fe:2a:b9:7b:43:e0:41:fe:b1:20:
6c:a9:57:f6:96:48:fa:a4:1c:65:d0:f0:fc:45:1a:f1:d5:f3:
ad:05:51:c6:70:00:09:bf:d9:0c:a2:f7:7e:ff:2f:96:fd:3e:
d0:10:52:cc:42:a4:40:e2:5d:8a:84:3e:53:09:dc:54:07:04:
6d:e4:77:78:40:a1:18:77:52:07:ff:49:8f:6e:38:55:ae:f3:
2a:8b:17:7b:cb:d6:71:b9:a5:f7:eb:10:67:96:fa:c9:98:52:
dc:cf:35:c8:61:93:29:72:c8:6e:b3:a8:57:aa:e2:19:85:13:
a4:5c:eb:d6:46:db:61:4a:bf:2c:ff:6c:5d:fb:1f:06:20:6b:
bf:33:e5:6a:48:d1:9a:96:76:d7:eb:48:96:6c:fd:57:39:b2:
61:16:ad:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:57 2024 by rpki-client on console-ams.rpki-client.org