Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131382e302f32342d3234203d3e2039303837.roa
File: 34352e36352e3131382e302f32342d3234203d3e2039303837.roa (raw, json)
Hash identifier: ryK7901ZYVRGuAyY3zHOJBXOAR63rQA06MKgGRn4kQs=
Subject key identifier: C6:D9:4E:DF:4F:60:05:4B:85:7C:23:E6:CE:6D:B1:17:61:6D:C8:1D
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 46121F0C4D29E1B00F4B417D1635F8E8A4EB00A7
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131382e302f32342d3234203d3e2039303837.roa
Signing time: Sat 07 Oct 2023 23:55:56 +0000
ROA not before: Sat 07 Oct 2023 23:50:56 +0000
ROA not after: Sat 05 Oct 2024 23:55:56 +0000
asID: 9087
IP address blocks: 45.65.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:12:1f:0c:4d:29:e1:b0:0f:4b:41:7d:16:35:f8:e8:a4:eb:00:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Oct 7 23:50:56 2023 GMT
Not After : Oct 5 23:55:56 2024 GMT
Subject: CN=C6D94EDF4F60054B857C23E6CE6DB117616DC81D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:32:16:4b:f6:50:74:74:82:5c:35:f5:9c:a9:
bc:63:ad:c2:55:cb:3a:9c:ed:24:3f:82:06:80:1c:
ca:a4:0e:0a:21:69:df:99:23:cc:af:41:18:6f:e4:
93:8c:02:6d:dd:d2:85:c4:6a:2f:06:fe:36:95:71:
32:29:e7:98:a6:21:ea:93:e4:17:21:c4:6d:55:03:
83:9f:3e:be:3b:ea:11:42:19:5a:05:23:59:60:68:
9c:f1:e5:45:2e:11:36:43:60:b2:c9:b7:09:7c:5a:
d5:53:78:31:64:bd:ee:d3:ce:f8:f1:8f:57:ea:d6:
f6:39:36:9f:26:4c:42:79:e9:58:46:58:73:d7:f9:
2f:b3:14:4e:b8:5d:7a:57:db:2d:d7:e7:25:9d:f8:
62:05:96:b8:a6:62:ae:ff:2f:de:4e:e8:29:cd:9d:
20:a6:cc:35:be:62:85:dc:4e:24:fa:8c:19:0d:60:
cd:8c:b3:ce:80:d2:5c:2a:bf:06:07:a7:d7:f4:34:
e0:c8:8c:96:9e:37:b0:7f:1a:c9:d4:56:79:d7:b2:
c7:01:42:fe:6c:39:53:16:19:ba:52:3f:4d:2f:75:
08:53:2b:42:15:15:2c:5b:44:40:dc:6b:e7:d4:77:
50:cb:96:fc:a8:ec:70:e8:a5:d6:9b:9a:34:24:20:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D9:4E:DF:4F:60:05:4B:85:7C:23:E6:CE:6D:B1:17:61:6D:C8:1D
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131382e302f32342d3234203d3e2039303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.118.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:00:c2:74:6e:96:88:e1:33:84:96:25:6e:88:a7:dd:1f:63:
d1:07:3f:87:cd:0a:18:77:c4:f3:4c:a0:3f:db:a5:f6:f4:40:
eb:ad:48:cd:77:b0:35:02:b0:ab:4d:b1:ff:9a:da:73:4a:c2:
07:32:2c:64:b6:99:34:84:12:97:3a:c8:3b:a0:8e:08:f4:9d:
65:82:ae:cc:a4:42:4b:65:fb:17:8c:ff:f9:54:09:83:8c:ef:
2b:e0:6c:40:0f:d9:91:b0:be:9f:28:09:4b:1f:fd:b5:53:a7:
d8:b4:ec:91:87:f7:fb:ff:f2:41:8a:12:89:8f:32:d3:71:c1:
6a:eb:9f:e4:45:3e:e0:cb:9b:37:98:10:89:6c:5f:1a:92:fd:
b0:e4:86:33:79:9e:7d:0d:41:8d:3b:64:b8:89:ec:e2:ec:aa:
53:93:7f:f0:6e:87:d5:d8:38:2b:cf:9d:4a:0a:09:ad:a7:60:
0f:82:94:4b:c2:8b:d5:96:05:4f:61:d9:ce:41:22:1d:36:76:
2c:de:0f:ac:9a:75:8c:20:25:da:a8:8d:5f:1b:84:20:f3:f0:
09:96:68:57:73:e1:af:2a:70:7a:3e:9d:0b:9c:9d:97:c0:f2:
8f:f1:e2:45:b3:37:c2:ef:df:2e:55:29:5e:8b:c6:40:f2:d4:
9d:87:af:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 10:11:28 2023 by rpki-client on console-ams.rpki-client.org