Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134302e302f32342d3234203d3e20343030383636.roa
File: 34352e3134382e3134302e302f32342d3234203d3e20343030383636.roa (raw, json)
Hash identifier: 0g0KwivFGdIodeYgyos//DuSKVlRzH+i6PA0JK3RPCk=
Subject key identifier: 4B:56:DC:06:82:C4:3C:12:22:B1:DA:51:21:42:CF:01:B6:66:85:EE
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 5C9DC5331A165FE8267318761BCDA579BE20756C
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134302e302f32342d3234203d3e20343030383636.roa
Signing time: Fri 22 Sep 2023 13:28:25 +0000
ROA not before: Fri 22 Sep 2023 13:23:25 +0000
ROA not after: Fri 20 Sep 2024 13:28:25 +0000
asID: 400866
IP address blocks: 45.148.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:9d:c5:33:1a:16:5f:e8:26:73:18:76:1b:cd:a5:79:be:20:75:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Sep 22 13:23:25 2023 GMT
Not After : Sep 20 13:28:25 2024 GMT
Subject: CN=4B56DC0682C43C1222B1DA512142CF01B66685EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a0:c7:3b:ab:7c:67:72:2a:ca:d6:91:87:b5:
47:90:76:70:51:7d:05:b5:1a:9e:d8:59:9c:2a:e8:
ee:5a:93:30:72:62:90:93:33:fd:b0:cd:b8:b0:97:
4c:8a:b0:19:82:be:15:2e:30:90:2b:ce:92:b4:1e:
f2:db:47:c0:35:5c:e6:cb:bc:24:55:cd:83:26:f4:
70:20:ac:5d:eb:c3:d0:14:e9:4e:18:cc:68:86:71:
d2:60:5b:90:fe:95:fa:05:17:12:63:47:ab:ea:0d:
f9:96:6b:6d:95:a4:bf:97:70:67:d9:8f:c2:fe:5f:
b0:39:bf:ab:0a:a9:69:4b:97:36:ed:c7:47:59:cd:
ca:46:74:89:41:40:62:52:26:e2:ba:bc:07:53:1b:
6d:86:b8:52:b7:f7:ec:1b:72:67:39:66:5f:3a:a3:
5b:11:5c:44:94:bb:6f:fa:0b:0e:48:70:e4:4e:e4:
1e:84:b9:13:29:29:02:51:bc:06:7d:7a:a2:b2:bd:
06:82:ce:7f:5c:bc:b8:e1:ed:3a:e3:be:7a:32:02:
37:19:79:48:b9:ee:92:9f:bb:f9:10:c8:3f:a0:b5:
a9:59:5e:99:c6:5b:fa:68:c2:5b:de:3a:5f:c1:e0:
9d:d3:9c:c7:1c:4c:21:ca:92:60:66:17:48:e1:72:
d7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:56:DC:06:82:C4:3C:12:22:B1:DA:51:21:42:CF:01:B6:66:85:EE
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134302e302f32342d3234203d3e20343030383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.140.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4f:44:a7:0c:e4:94:c9:e5:e0:3e:e0:0d:00:3b:11:c9:98:
44:cd:e9:13:17:9f:bf:74:8a:2c:c1:b7:9a:e5:d4:36:d4:20:
f1:8b:61:97:d3:02:9a:4b:5a:74:db:da:a3:bb:a4:74:ea:e0:
02:d3:aa:d9:a3:b2:98:b1:89:82:3f:1d:29:c6:6c:e9:ef:32:
2c:c4:e2:a3:9f:5e:8e:e4:3b:38:43:e8:a5:2a:a1:c5:3c:bc:
00:26:87:cf:f1:c2:a4:7c:fd:3c:16:73:8f:f0:1e:44:43:5d:
3d:4b:af:cb:6a:09:e5:f5:0f:8a:3c:69:89:e6:61:e1:bf:89:
e1:68:84:25:db:b7:54:b8:17:3f:b9:74:e7:dd:38:50:30:fb:
e0:cb:bb:da:bc:33:17:78:85:18:91:96:06:a6:0f:ff:cb:b1:
c1:2f:a9:40:1a:7e:88:0a:8c:f4:78:c0:b8:3c:55:8b:40:f0:
b9:78:3f:93:bb:be:09:1d:12:05:da:b1:64:99:3d:8e:1b:1f:
01:1f:ff:dd:1b:ea:9c:6c:e6:8d:40:d9:fa:5d:37:39:cd:00:
07:6f:69:c7:7b:d2:c0:a8:7e:e6:d9:e6:15:17:7d:0a:fd:30:
66:e4:35:c2:9a:09:75:40:a2:3e:46:8b:0f:32:71:70:d0:27:
f6:ea:e1:13
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUXJ3FMxoWX+gmcxh2G82leb4gdWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGE4ZDM2MGNlZTY1MTY1MjdmZDU0OTJjMzdjYWM0NDQx
ZTExOWMwMDAeFw0yMzA5MjIxMzIzMjVaFw0yNDA5MjAxMzI4MjVaMDMxMTAvBgNV
BAMTKDRCNTZEQzA2ODJDNDNDMTIyMkIxREE1MTIxNDJDRjAxQjY2Njg1RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDroMc7q3xncirK1pGHtUeQdnBR
fQW1Gp7YWZwq6O5akzByYpCTM/2wzbiwl0yKsBmCvhUuMJArzpK0HvLbR8A1XObL
vCRVzYMm9HAgrF3rw9AU6U4YzGiGcdJgW5D+lfoFFxJjR6vqDfmWa22VpL+XcGfZ
j8L+X7A5v6sKqWlLlzbtx0dZzcpGdIlBQGJSJuK6vAdTG22GuFK39+wbcmc5Zl86
o1sRXESUu2/6Cw5IcORO5B6EuRMpKQJRvAZ9eqKyvQaCzn9cvLjh7TrjvnoyAjcZ
eUi57pKfu/kQyD+gtalZXpnGW/powlveOl/B4J3TnMccTCHKkmBmF0jhctdxAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUS1bcBoLEPBIisdpRIULPAbZmhe4wHwYDVR0j
BBgwFoAUSo02DO5lFlJ/1UksN8rERB4RnAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUtODgwYy00MmIyLTgyMTMtZjIwYTUwNWVi
OTdlLzEvNEE4RDM2MENFRTY1MTY1MjdGRDU0OTJDMzdDQUM0NDQxRTExOUMwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1NvMDJETzVsRmxKXzFVa3NOOHJFUkI0
Um5BQS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUt
ODgwYy00MmIyLTgyMTMtZjIwYTUwNWViOTdlLzEvMzQzNTJlMzEzNDM4MmUzMTM0
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzAzODM2MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtlIwwDQYJKoZIhvcNAQELBQADggEBAC1PRKcM5JTJ5eA+4A0AOxHJmETN6RMX
n790iizBt5rl1DbUIPGLYZfTAppLWnTb2qO7pHTq4ALTqtmjspixiYI/HSnGbOnv
MizE4qOfXo7kOzhD6KUqocU8vAAmh8/xwqR8/TwWc4/wHkRDXT1Lr8tqCeX1D4o8
aYnmYeG/ieFohCXbt1S4Fz+5dOfdOFAw++DLu9q8Mxd4hRiRlgamD//LscEvqUAa
fogKjPR4wLg8VYtA8Ll4P5O7vgkdEgXasWSZPY4bHwEf/90b6pxs5o1A2fpdNznN
AAdvacd70sCofubZ5hUXfQr9MGbkNcKaCXVAoj5Giw8ycXDQJ/bq4RM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:59 2024 by rpki-client on console-ams.rpki-client.org