Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131392e302f32342d3234203d3e20383334.roa
File: 34352e36352e3131392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: jCPcT4lUaL19EMiKLhLiZ5sljfntr5HZAPN5ns8PjaE=
Subject key identifier: 57:A9:02:E7:54:D2:F0:1D:22:23:78:04:E2:16:53:A9:4C:17:0F:17
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 4FD077B59AB7DE81F07ED071D085D49BFA0FD571
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131392e302f32342d3234203d3e20383334.roa
Signing time: Sat 30 Sep 2023 00:00:10 +0000
ROA not before: Fri 29 Sep 2023 23:55:10 +0000
ROA not after: Sat 28 Sep 2024 00:00:10 +0000
asID: 834
IP address blocks: 45.65.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:d0:77:b5:9a:b7:de:81:f0:7e:d0:71:d0:85:d4:9b:fa:0f:d5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Sep 29 23:55:10 2023 GMT
Not After : Sep 28 00:00:10 2024 GMT
Subject: CN=57A902E754D2F01D22237804E21653A94C170F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:13:cd:52:53:17:c1:c1:a7:09:5a:9e:33:
b6:c4:04:f8:bb:66:e0:ba:04:b8:47:40:ae:d4:b3:
68:6c:ca:38:6d:19:62:1e:90:23:b6:17:e5:25:ab:
78:31:00:c9:de:cb:55:f2:08:07:0b:c0:99:a6:f7:
11:27:b1:a6:4a:4d:6c:54:37:35:04:d3:eb:8c:da:
dd:49:0e:22:32:4d:47:e5:da:39:31:44:53:ec:61:
2e:40:b5:e1:94:4a:4d:c8:b2:ca:03:2e:d8:0a:0f:
af:7d:c4:91:64:34:26:12:a5:fa:0b:0e:8a:14:6d:
c7:75:6f:33:99:6f:49:77:11:a6:b0:13:73:48:a5:
54:34:b1:d6:34:19:69:b8:77:c2:fd:72:2f:1f:c9:
c9:5e:64:9b:f6:c0:13:7d:5a:44:6e:5b:73:c3:87:
e1:f5:7f:49:16:43:86:bb:c7:4a:6d:ad:75:1e:23:
fd:55:b5:2f:eb:d2:03:e1:d7:29:bf:7e:85:71:8e:
40:cd:a7:ec:c8:d8:1a:e6:81:1a:e4:07:ec:f0:df:
61:1a:35:64:73:27:db:bd:e2:80:c4:95:b6:f6:1b:
49:62:28:54:4e:e7:fe:b5:93:27:4f:5b:3f:1d:bc:
e1:93:59:a6:42:cc:5d:2c:c8:8f:9a:f0:18:3a:db:
9e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A9:02:E7:54:D2:F0:1D:22:23:78:04:E2:16:53:A9:4C:17:0F:17
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.119.0/24
Signature Algorithm: sha256WithRSAEncryption
23:91:c4:68:e7:d0:b9:3a:cf:0f:ad:49:a5:f6:6b:3c:69:24:
5a:06:5d:89:cd:44:01:c8:24:67:1f:91:a9:c5:08:30:5c:ff:
ce:20:18:98:8f:fd:d0:3b:be:67:80:33:fe:80:82:6c:7c:3d:
0b:c1:76:d3:b9:bd:71:63:7f:fb:94:3e:ce:f6:d8:f1:f3:7e:
81:76:94:04:8a:f2:f9:5f:d5:3f:4e:5d:fd:e8:91:55:81:f2:
ac:bf:bb:d3:6e:e2:82:77:60:f4:82:44:70:12:4d:5e:05:3a:
ab:6c:76:fa:63:aa:4f:65:d1:f9:28:d3:2d:14:37:a6:be:70:
55:3f:0b:d2:9f:d1:d0:39:e7:ab:8b:94:d3:0e:c0:60:34:3d:
d9:a1:77:2f:0d:dd:56:59:f0:41:2a:5a:33:bc:bc:98:d2:89:
76:74:d9:27:b7:82:65:49:5c:9b:49:b3:85:0b:a0:df:bf:29:
2d:60:7c:24:2d:52:db:bb:07:46:c3:94:40:71:0a:c4:85:2c:
e2:b8:bd:18:3a:10:91:a0:fa:32:40:f6:4a:a5:fd:b2:60:97:
91:9f:29:43:e5:e1:a6:21:12:46:f4:27:a5:ce:6a:61:64:d3:
d2:86:60:04:ab:fb:84:71:79:00:e5:ba:cb:9d:04:bb:aa:43:
ef:78:aa:fa
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUT9B3tZq33oHwftBx0IXUm/oP1XEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGE4ZDM2MGNlZTY1MTY1MjdmZDU0OTJjMzdjYWM0NDQx
ZTExOWMwMDAeFw0yMzA5MjkyMzU1MTBaFw0yNDA5MjgwMDAwMTBaMDMxMTAvBgNV
BAMTKDU3QTkwMkU3NTREMkYwMUQyMjIzNzgwNEUyMTY1M0E5NEMxNzBGMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3WBPNUlMXwcGnCVqeM7bEBPi7
ZuC6BLhHQK7Us2hsyjhtGWIekCO2F+Ulq3gxAMney1XyCAcLwJmm9xEnsaZKTWxU
NzUE0+uM2t1JDiIyTUfl2jkxRFPsYS5AteGUSk3IssoDLtgKD699xJFkNCYSpfoL
DooUbcd1bzOZb0l3EaawE3NIpVQ0sdY0GWm4d8L9ci8fycleZJv2wBN9WkRuW3PD
h+H1f0kWQ4a7x0ptrXUeI/1VtS/r0gPh1ym/foVxjkDNp+zI2BrmgRrkB+zw32Ea
NWRzJ9u94oDElbb2G0liKFRO5/61kydPWz8dvOGTWaZCzF0syI+a8Bg6256dAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUV6kC51TS8B0iI3gE4hZTqUwXDxcwHwYDVR0j
BBgwFoAUSo02DO5lFlJ/1UksN8rERB4RnAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUtODgwYy00MmIyLTgyMTMtZjIwYTUwNWVi
OTdlLzEvNEE4RDM2MENFRTY1MTY1MjdGRDU0OTJDMzdDQUM0NDQxRTExOUMwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1NvMDJETzVsRmxKXzFVa3NOOHJFUkI0
Um5BQS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUt
ODgwYy00MmIyLTgyMTMtZjIwYTUwNWViOTdlLzEvMzQzNTJlMzYzNTJlMzEzMTM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUF3MA0G
CSqGSIb3DQEBCwUAA4IBAQAjkcRo59C5Os8PrUml9ms8aSRaBl2JzUQByCRnH5Gp
xQgwXP/OIBiYj/3QO75ngDP+gIJsfD0LwXbTub1xY3/7lD7O9tjx836BdpQEivL5
X9U/Tl396JFVgfKsv7vTbuKCd2D0gkRwEk1eBTqrbHb6Y6pPZdH5KNMtFDemvnBV
PwvSn9HQOeeri5TTDsBgND3ZoXcvDd1WWfBBKlozvLyY0ol2dNknt4JlSVybSbOF
C6DfvyktYHwkLVLbuwdGw5RAcQrEhSziuL0YOhCRoPoyQPZKpf2yYJeRnylD5eGm
IRJG9CelzmphZNPShmAEq/uEcXkA5brLnQS7qkPveKr6
-----END CERTIFICATE-----
Generated at Mon Oct 23 10:29:13 2023 by rpki-client on console-fra.rpki-client.org