Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134312e302f32342d3234203d3e203530363733.roa
File: 34352e3134382e3134312e302f32342d3234203d3e203530363733.roa (raw, json)
Hash identifier: F+jZ5x606S5PACa8gAY9MOVnTcwQ6lmHJ021CC2y6TI=
Subject key identifier: 15:31:73:AD:19:56:25:3B:9F:F9:EC:CF:B0:3B:F2:53:5D:C7:23:9A
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 6123D0A58613C5CEBF23F08BE195DBD68C911241
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134312e302f32342d3234203d3e203530363733.roa
Signing time: Wed 04 Jan 2023 10:43:28 +0000
ROA not before: Wed 04 Jan 2023 10:38:28 +0000
ROA not after: Wed 03 Jan 2024 10:43:28 +0000
asID: 50673
IP address blocks: 45.148.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:23:d0:a5:86:13:c5:ce:bf:23:f0:8b:e1:95:db:d6:8c:91:12:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 4 10:38:28 2023 GMT
Not After : Jan 3 10:43:28 2024 GMT
Subject: CN=153173AD1956253B9FF9ECCFB03BF2535DC7239A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:40:45:a9:80:87:d4:44:5a:03:4d:e6:9b:
24:5d:d1:57:7b:c6:28:a9:06:fd:30:3a:e3:d6:31:
27:53:00:ae:03:20:5f:87:ef:c8:8e:a2:7e:72:79:
fe:39:1d:44:dd:f0:e2:3e:28:c3:ff:30:cd:a6:47:
6c:73:63:4c:72:0f:9b:67:8e:c6:7c:d9:9c:78:17:
e0:18:36:d9:02:27:65:5f:1d:cf:d3:67:a1:f6:ef:
06:ec:3d:5c:c0:b9:15:3a:bd:eb:ff:8e:13:28:0a:
07:d7:29:b2:cb:0a:48:0a:9e:b7:8f:90:d3:0b:97:
c9:d8:90:ec:66:fb:bb:14:16:06:87:91:03:4b:a8:
56:f7:33:33:6d:c2:33:a2:86:fd:e2:0f:3a:4f:47:
2e:83:8a:b9:67:93:eb:f2:04:c9:bf:93:3c:1b:2e:
b1:15:20:d6:96:c4:ef:f6:0b:77:bc:c8:d4:9b:b6:
bc:ad:fd:3b:b2:5f:a9:bf:bc:cc:79:ad:8c:41:b7:
6c:17:d2:83:bb:53:0c:f9:f0:05:5d:27:36:62:a0:
2e:9b:22:6e:ca:50:93:fd:4a:fe:39:e6:f6:25:d4:
dd:26:52:fb:d9:ec:be:9f:f5:6d:19:2e:27:cb:8a:
46:a1:2a:42:7a:ef:a0:4f:f4:3a:fe:0b:88:b0:10:
17:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:31:73:AD:19:56:25:3B:9F:F9:EC:CF:B0:3B:F2:53:5D:C7:23:9A
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134312e302f32342d3234203d3e203530363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.141.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a0:71:df:24:82:c9:0e:04:58:a6:37:5a:35:2f:de:4e:32:
68:c3:ce:8a:46:50:13:c8:33:23:04:0c:54:cb:c5:5c:e8:54:
34:4e:1b:38:bb:71:71:6b:92:12:31:a2:9f:99:42:10:ed:0f:
66:4c:9f:21:a5:d0:11:ca:2c:8c:01:c4:e7:33:6f:4e:fc:a0:
a6:b9:30:b0:2e:39:11:c5:28:73:13:d0:49:0f:78:18:ab:7e:
63:60:15:50:f5:01:90:06:09:75:9c:aa:2c:7b:ab:6a:00:0d:
15:5a:e7:60:b4:59:8a:cd:31:98:ae:cb:7b:ef:2c:90:ef:5d:
cf:8a:de:77:7b:b6:f3:78:5c:2a:8c:aa:d4:2c:4a:52:89:d6:
dc:d2:d3:3c:96:eb:db:39:84:61:56:69:52:df:eb:62:1f:dc:
21:0a:2f:f2:ba:8a:7b:13:e1:06:66:16:13:34:25:e1:e7:1a:
68:9c:fc:3c:f4:c6:d8:36:50:71:10:92:a6:07:18:85:1e:b8:
1f:0e:14:36:91:ad:90:02:b9:3a:0c:b1:a1:f1:ac:49:e2:c6:
47:f9:db:49:db:f1:0d:e5:3d:66:1c:a8:0d:e9:2d:91:83:15:
e4:3b:f9:3a:49:bd:76:fe:f7:e3:9d:0c:19:1c:a8:e0:36:64:
31:f8:ba:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org