Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134322e302f32342d3234203d3e20313937303735.roa
File: 34352e3134382e3134322e302f32342d3234203d3e20313937303735.roa (raw, json)
Hash identifier: kLNzP/d1453G3iDoXLD79+IOnbc5p5l32HBcrUS/RuM=
Subject key identifier: A0:0A:6D:CB:66:32:5B:26:68:4D:F1:93:89:50:1A:5E:7B:92:A2:86
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 1BDEE34068E140616CB6105A1B900D61A125D066
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134322e302f32342d3234203d3e20313937303735.roa
Signing time: Fri 24 Mar 2023 00:15:29 +0000
ROA not before: Fri 24 Mar 2023 00:10:29 +0000
ROA not after: Fri 22 Mar 2024 00:15:29 +0000
asID: 197075
IP address blocks: 45.148.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:de:e3:40:68:e1:40:61:6c:b6:10:5a:1b:90:0d:61:a1:25:d0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Mar 24 00:10:29 2023 GMT
Not After : Mar 22 00:15:29 2024 GMT
Subject: CN=A00A6DCB66325B26684DF19389501A5E7B92A286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:81:f9:df:8a:23:f5:e0:27:f6:d4:40:ce:
f5:e4:79:ee:87:c5:82:d1:87:3a:9d:5e:82:58:7c:
58:e5:63:ba:bc:d2:7b:8b:ad:63:36:b1:6d:4b:2d:
bf:36:bf:2c:cc:2a:79:c5:cf:16:d7:27:db:df:0b:
e5:a4:66:0f:e3:8b:cb:2c:40:62:ee:54:38:8e:e6:
d1:61:8d:e1:a5:a1:75:3a:81:8e:aa:fd:c1:b9:50:
af:9a:3e:39:ac:11:3a:b5:b1:65:c0:83:8c:c8:bf:
f5:79:dc:7c:dd:93:d6:e1:83:a0:06:d9:76:b1:28:
c6:02:d8:e3:9e:31:cf:bd:fc:75:03:af:cd:74:14:
cb:a8:94:87:00:c4:1c:b5:a6:95:ef:c1:b1:ff:01:
bd:f0:80:6e:a9:75:9a:0e:73:08:52:77:65:ed:c5:
6d:52:fb:91:16:89:3b:76:cd:8d:15:77:e8:23:dc:
43:6b:28:4a:f5:24:ac:62:ac:a5:7f:30:f2:04:c7:
2a:72:eb:e8:52:a6:48:15:2d:83:05:e7:d8:3d:63:
e6:96:47:b6:e9:ef:0b:e2:07:37:b7:94:b6:68:0f:
c1:a6:09:ed:d2:3e:37:11:e4:d5:25:15:8a:1e:08:
37:29:84:b8:53:70:32:48:22:ee:8a:1b:bf:43:4c:
a5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0A:6D:CB:66:32:5B:26:68:4D:F1:93:89:50:1A:5E:7B:92:A2:86
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134322e302f32342d3234203d3e20313937303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.142.0/24
Signature Algorithm: sha256WithRSAEncryption
80:34:18:89:75:0d:06:4f:a8:70:e9:6f:0b:23:32:26:ca:55:
22:2a:2e:da:36:e2:fb:8d:c1:e3:c9:18:10:8e:a6:6e:5f:12:
aa:87:6f:5f:4a:e9:2f:22:ff:2f:1c:a6:9e:1a:93:fc:80:2f:
cd:92:5d:0d:04:c9:0f:4e:1a:91:b9:50:d0:ef:e9:6a:32:a5:
e9:4d:ca:cf:d7:6b:fc:77:b4:28:8f:90:7d:46:e6:0e:d8:d0:
08:ab:37:d5:68:c8:a4:68:0c:f1:3e:8c:4b:c3:18:50:9b:5b:
7c:86:da:6d:9a:3b:07:d5:64:a9:00:95:74:4e:d3:d4:d6:80:
e4:03:04:bb:9a:ec:50:b4:29:95:88:24:23:97:33:6c:aa:47:
64:84:11:76:42:bc:1d:a9:d4:7f:1b:b0:a8:0c:06:69:c5:f7:
b9:f5:2f:9d:be:fd:7a:9c:28:da:d9:3e:2c:36:3d:c8:e0:5d:
f7:56:60:8e:d3:02:49:d1:f7:be:da:fd:64:40:2c:65:9c:d1:
30:0b:a3:a3:2b:2e:b5:cc:70:d6:e3:b5:ae:ac:6f:62:f1:3f:
db:69:64:fe:f3:65:bf:99:45:98:c4:eb:95:4b:72:58:a9:5c:
14:eb:82:9e:41:72:53:93:cb:e5:e7:59:87:4e:0a:2b:95:ac:
f9:cf:23:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 10:11:28 2023 by rpki-client on console-ams.rpki-client.org