Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131362e302f32332d3234203d3e20383334.roa
File: 34352e36352e3131362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: aYzHWlB9xEeI0Ha8HrxprgRIDwgJC4uVEp26QQZ/pOs=
Subject key identifier: 64:EA:89:92:75:8A:55:84:A0:82:6B:BA:E4:CA:3A:65:DB:B3:FF:9F
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 283D97F78690D3B9A52FCEA589427A04FA913B22
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131362e302f32332d3234203d3e20383334.roa
Signing time: Thu 12 Oct 2023 00:00:10 +0000
ROA not before: Wed 11 Oct 2023 23:55:10 +0000
ROA not after: Thu 10 Oct 2024 00:00:10 +0000
asID: 834
IP address blocks: 45.65.116.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:3d:97:f7:86:90:d3:b9:a5:2f:ce:a5:89:42:7a:04:fa:91:3b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Oct 11 23:55:10 2023 GMT
Not After : Oct 10 00:00:10 2024 GMT
Subject: CN=64EA8992758A5584A0826BBAE4CA3A65DBB3FF9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:de:54:e8:db:2d:91:ee:73:d8:88:a4:63:
22:ac:67:9f:ca:7e:ff:d7:e0:6d:82:75:8c:4c:b4:
4e:ba:51:cc:05:c1:35:b5:18:12:29:d3:46:16:ef:
8e:4c:76:84:1f:ec:a2:a3:67:6a:ab:4d:d6:a8:0b:
91:79:98:33:3c:58:8b:e5:a0:b2:96:22:7a:31:e6:
e5:5f:93:a1:73:c0:cb:8d:5f:ea:9c:6a:08:54:ef:
1d:b5:86:4a:df:af:7f:3a:b0:2b:b3:24:24:6b:bc:
e9:60:d9:f7:24:68:d0:cd:19:fa:38:17:eb:45:d8:
2c:e3:cc:e1:dd:c8:09:c6:5d:77:6a:05:65:69:49:
ca:9a:f9:e4:8c:8b:13:10:5a:9c:c4:b1:ea:58:ba:
c5:2a:45:cc:03:bb:10:26:10:be:30:6e:db:45:f1:
78:8a:aa:5a:f9:84:01:3c:e9:35:7e:0c:f4:37:e4:
e0:7d:87:42:61:f1:64:81:a7:59:ed:24:18:60:cc:
7a:af:9d:7d:a2:37:38:b0:9d:38:69:a4:0c:90:9c:
56:be:d7:da:cb:2c:24:96:c4:f2:0d:c1:12:ef:50:
9f:61:2a:dd:85:cb:3d:a7:5b:dc:d1:f8:67:7b:c2:
64:32:4b:16:63:7e:86:09:d6:d1:d6:fb:51:3d:79:
03:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EA:89:92:75:8A:55:84:A0:82:6B:BA:E4:CA:3A:65:DB:B3:FF:9F
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:6c:2d:55:eb:5a:87:09:37:5a:45:e3:8b:ed:40:f3:e0:5e:
09:51:33:2f:c6:1d:be:4b:6d:db:e4:f0:6d:48:98:41:b6:b4:
a7:51:b5:61:52:29:68:ca:e2:6e:0c:f6:3a:4c:db:c9:43:50:
71:a9:36:b3:ca:6e:de:fb:ad:f8:84:1d:27:f8:23:4a:82:b1:
9c:aa:b8:47:b5:60:c1:1e:06:2e:4d:26:9c:ed:5c:a3:16:72:
42:95:90:58:6a:32:ae:6d:55:dc:e7:3b:61:d2:d1:a4:1f:5d:
c0:a3:2b:f0:06:d0:7d:d9:7e:97:35:d0:5d:c8:94:a0:b6:ea:
4a:76:af:ea:1e:54:c7:6a:ae:1c:b1:07:dd:ee:f6:04:21:5f:
5d:9f:c8:35:4c:49:8f:41:c5:3d:bf:45:40:c5:b5:b5:12:fe:
46:a3:9e:e5:5c:40:36:43:09:63:4c:01:b3:07:61:45:1a:6b:
cc:d1:56:26:c7:22:94:21:fe:31:d2:3f:e8:f9:08:ac:1e:ab:
80:51:74:b0:57:ad:fa:52:23:7b:40:f7:ee:49:cd:d5:0f:93:
7a:ff:45:83:d9:99:05:5c:84:a0:46:c6:12:27:e9:e2:6c:a2:
a3:08:e7:97:5f:29:f7:ad:9d:28:79:cc:9a:ec:99:06:0e:80:
87:6e:b6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 10:29:13 2023 by rpki-client on console-fra.rpki-client.org