Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134332e302f32342d3234203d3e20383334.roa
File: 34352e3134382e3134332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: VQhZnG0CjsBpoANmzgCUhDzrwScgY/bJDRvWF0MkdcE=
Subject key identifier: 3A:BE:50:77:B3:D0:A9:B2:A6:5A:60:72:0F:16:85:26:CC:4A:7C:D6
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 15205FA8D64C89B8396E3FB5436EE0004DD3AE4D
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134332e302f32342d3234203d3e20383334.roa
Signing time: Wed 27 Sep 2023 12:30:04 +0000
ROA not before: Wed 27 Sep 2023 12:25:04 +0000
ROA not after: Wed 25 Sep 2024 12:30:04 +0000
asID: 834
IP address blocks: 45.148.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:20:5f:a8:d6:4c:89:b8:39:6e:3f:b5:43:6e:e0:00:4d:d3:ae:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Sep 27 12:25:04 2023 GMT
Not After : Sep 25 12:30:04 2024 GMT
Subject: CN=3ABE5077B3D0A9B2A65A60720F168526CC4A7CD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:8d:74:c0:26:46:2d:67:02:5f:c2:81:17:
1e:67:da:2e:12:1f:67:98:06:63:48:91:a2:d4:af:
42:5e:5a:8a:dc:71:a3:ab:2f:fb:f1:a0:1d:c7:4a:
2f:8d:4e:16:bd:09:45:b3:ce:7d:64:1b:c0:25:2d:
51:1c:6e:55:5f:44:d6:ff:17:e0:0e:90:b2:18:44:
d7:17:2e:f0:7f:5d:f6:6b:d7:b6:c9:83:e4:f6:b0:
e4:d7:1a:db:4b:6a:29:af:82:58:41:b8:51:4e:66:
c5:17:f5:73:f3:38:41:0d:22:9f:40:e2:3a:88:8e:
b2:1e:33:4b:e0:30:af:a7:47:d1:6a:a4:5c:4d:32:
1a:c3:74:f5:44:de:7f:89:94:19:04:24:44:46:77:
11:25:c4:24:df:91:cd:b3:3f:9b:98:d9:4f:f0:34:
b8:3b:10:42:3a:b9:46:57:c5:8d:48:34:c1:53:77:
bd:95:8c:39:c5:e1:a6:12:d1:b1:68:45:4b:a4:de:
c7:76:d2:ba:85:96:8b:c4:51:aa:c1:59:61:ef:20:
21:9f:47:f8:72:fc:e8:f9:43:57:cf:a0:d9:06:5a:
d4:25:87:ec:f2:72:17:2f:c6:77:bc:06:0b:d1:17:
6d:72:3d:d9:15:1d:b2:08:30:01:cd:ba:0f:44:a5:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BE:50:77:B3:D0:A9:B2:A6:5A:60:72:0F:16:85:26:CC:4A:7C:D6
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.143.0/24
Signature Algorithm: sha256WithRSAEncryption
37:71:15:6d:cf:6e:0a:a3:93:51:bb:22:23:13:04:77:e7:7d:
42:b4:ad:97:1a:40:ba:15:bf:88:27:1f:1f:b6:1f:04:36:ce:
02:98:da:9a:69:c4:e9:c0:9d:ff:f5:34:a3:eb:6d:4a:ae:82:
b5:1d:48:11:e4:5d:64:23:1e:f5:b5:89:cc:5a:19:5b:95:7e:
56:43:2a:55:90:61:3c:a8:28:af:b4:8d:19:33:1d:be:4d:60:
c6:b6:07:c1:eb:eb:c9:c6:33:76:ad:e6:e9:25:6e:5d:04:33:
34:6a:24:5a:32:2e:4b:ca:4b:c5:f7:7b:4c:30:1d:2c:06:61:
49:6a:40:c6:99:94:b3:3b:9a:0f:e1:15:37:0d:91:0b:91:0c:
20:41:3e:c8:3e:83:1f:eb:eb:22:94:6c:50:86:98:1d:5d:4e:
08:e9:38:a6:88:8b:be:29:ec:96:2d:38:d5:5e:e3:81:02:13:
17:3d:87:38:98:37:f0:86:a9:ef:d5:2c:7e:7a:b7:ed:5c:ee:
96:dd:17:a6:71:6c:c5:7a:eb:98:76:64:e2:c3:84:e2:93:ef:
a9:b3:fd:56:43:47:3c:6c:06:8d:2a:48:09:43:85:1a:28:02:
c1:c4:94:1d:a0:50:c2:1d:4a:b3:63:c8:15:14:a2:97:e4:2e:
4f:e2:01:82
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUFSBfqNZMibg5bj+1Q27gAE3Trk0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGE4ZDM2MGNlZTY1MTY1MjdmZDU0OTJjMzdjYWM0NDQx
ZTExOWMwMDAeFw0yMzA5MjcxMjI1MDRaFw0yNDA5MjUxMjMwMDRaMDMxMTAvBgNV
BAMTKDNBQkU1MDc3QjNEMEE5QjJBNjVBNjA3MjBGMTY4NTI2Q0M0QTdDRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/Y10wCZGLWcCX8KBFx5n2i4S
H2eYBmNIkaLUr0JeWorccaOrL/vxoB3HSi+NTha9CUWzzn1kG8AlLVEcblVfRNb/
F+AOkLIYRNcXLvB/XfZr17bJg+T2sOTXGttLaimvglhBuFFOZsUX9XPzOEENIp9A
4jqIjrIeM0vgMK+nR9FqpFxNMhrDdPVE3n+JlBkEJERGdxElxCTfkc2zP5uY2U/w
NLg7EEI6uUZXxY1INMFTd72VjDnF4aYS0bFoRUuk3sd20rqFlovEUarBWWHvICGf
R/hy/Oj5Q1fPoNkGWtQlh+zychcvxne8BgvRF21yPdkVHbIIMAHNug9EpZzJAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUOr5Qd7PQqbKmWmByDxaFJsxKfNYwHwYDVR0j
BBgwFoAUSo02DO5lFlJ/1UksN8rERB4RnAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUtODgwYy00MmIyLTgyMTMtZjIwYTUwNWVi
OTdlLzEvNEE4RDM2MENFRTY1MTY1MjdGRDU0OTJDMzdDQUM0NDQxRTExOUMwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1NvMDJETzVsRmxKXzFVa3NOOHJFUkI0
Um5BQS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUt
ODgwYy00MmIyLTgyMTMtZjIwYTUwNWViOTdlLzEvMzQzNTJlMzEzNDM4MmUzMTM0
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtlI8w
DQYJKoZIhvcNAQELBQADggEBADdxFW3Pbgqjk1G7IiMTBHfnfUK0rZcaQLoVv4gn
Hx+2HwQ2zgKY2pppxOnAnf/1NKPrbUqugrUdSBHkXWQjHvW1icxaGVuVflZDKlWQ
YTyoKK+0jRkzHb5NYMa2B8Hr68nGM3at5uklbl0EMzRqJFoyLkvKS8X3e0wwHSwG
YUlqQMaZlLM7mg/hFTcNkQuRDCBBPsg+gx/r6yKUbFCGmB1dTgjpOKaIi74p7JYt
ONVe44ECExc9hziYN/CGqe/VLH56t+1c7pbdF6ZxbMV665h2ZOLDhOKT76mz/VZD
RzxsBo0qSAlDhRooAsHElB2gUMIdSrNjyBUUopfkLk/iAYI=
-----END CERTIFICATE-----
Generated at Mon Oct 23 10:11:28 2023 by rpki-client on console-ams.rpki-client.org