Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e38382e31302e302f32342d3234203d3e20333936393832.roa
File: 34352e38382e31302e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier: vqjYEpfonGyNoi1tFI3h6PLd5wuQ7wj9T6ww5HCYzcE=
Subject key identifier: FC:D2:96:5D:8C:55:9D:C1:2E:62:D3:32:77:69:72:1E:02:59:F3:61
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 26E408C8A86CAA9A8068C0BA90BFF9133AF61A78
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e38382e31302e302f32342d3234203d3e20333936393832.roa
Signing time: Mon 06 Feb 2023 14:11:16 +0000
ROA not before: Mon 06 Feb 2023 14:06:16 +0000
ROA not after: Mon 05 Feb 2024 14:11:16 +0000
asID: 396982
IP address blocks: 45.88.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:e4:08:c8:a8:6c:aa:9a:80:68:c0:ba:90:bf:f9:13:3a:f6:1a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Feb 6 14:06:16 2023 GMT
Not After : Feb 5 14:11:16 2024 GMT
Subject: CN=FCD2965D8C559DC12E62D3327769721E0259F361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:21:36:29:a2:57:00:68:9b:f0:1e:6a:b8:
5c:c4:6c:c0:3d:3f:60:1d:f8:fc:76:3d:81:e6:39:
8f:0e:05:8d:af:d3:10:a6:8a:5c:fb:95:b3:a4:7d:
b0:a9:62:37:57:f4:aa:db:ad:52:28:1c:ca:6c:38:
ab:99:05:3f:4e:ea:a9:ea:66:09:dd:b3:57:9e:28:
8d:e4:55:6a:c1:a6:8d:4d:d7:63:ea:fe:61:62:d4:
52:ee:49:08:8a:e2:51:e8:96:c3:65:2d:69:ca:41:
cb:48:18:37:51:6f:7c:53:8e:d7:43:8b:cc:a9:25:
dd:54:36:ef:59:ed:e3:5b:fc:b2:4b:7b:4b:10:9a:
6e:49:dd:15:d8:d2:dc:8c:14:4d:d2:a7:5d:70:23:
1d:f9:f4:44:57:b4:7c:7b:85:9a:42:ac:27:5a:37:
1b:05:6a:45:2b:2b:25:b7:1a:c9:56:5f:f9:91:44:
af:ef:39:ff:46:58:9b:d5:92:4f:ce:05:8d:00:67:
52:0c:40:38:91:ea:07:b1:53:69:2e:d6:a6:bb:c4:
a1:b1:cd:86:6a:01:1f:01:2c:7a:e9:91:65:fd:c5:
d4:6b:a0:ca:1f:0c:3b:59:34:86:45:fa:56:b0:46:
a5:79:2b:bc:55:f3:be:06:e9:18:e9:22:7f:b0:6a:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D2:96:5D:8C:55:9D:C1:2E:62:D3:32:77:69:72:1E:02:59:F3:61
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e38382e31302e302f32342d3234203d3e20333936393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.10.0/24
Signature Algorithm: sha256WithRSAEncryption
36:de:85:2a:cf:08:ee:bb:86:f0:9f:51:a7:78:90:f3:75:f4:
42:7f:a9:11:da:19:6e:6b:91:1e:8f:fb:7b:c8:30:84:10:cc:
fa:1d:93:1f:b6:2e:67:1e:0b:9e:1f:20:04:e1:d6:76:bb:70:
8e:85:95:f2:ff:51:43:45:b1:2a:aa:92:0a:d4:6c:48:b3:e7:
c4:0b:18:5a:8a:92:4c:98:5f:96:5c:2d:6d:30:1b:06:9a:51:
3d:ab:1c:b9:eb:4e:a3:c7:c6:eb:41:26:04:ae:f0:75:e2:e6:
b5:5f:3d:4c:71:f0:37:52:e0:9d:d4:cc:f7:be:29:42:7f:36:
fa:37:82:16:ac:75:ea:8e:02:92:55:ad:1b:06:74:79:d1:41:
3c:ab:d3:d5:4c:58:17:7d:9e:49:01:d7:d5:50:16:ad:f1:2c:
98:db:a2:4b:3b:bc:bd:e7:e8:13:42:47:3f:f9:6e:6b:33:38:
0b:9c:dd:1c:ef:39:94:12:26:19:1c:47:0a:ea:e4:cc:4b:02:
1f:71:e5:65:a9:05:cf:01:fa:e8:77:c4:67:8c:8c:ef:9c:63:
ca:a7:f7:1b:d2:8b:39:2b:84:4a:05:ba:58:a5:e6:10:0e:50:
79:84:eb:eb:ee:ac:22:31:7f:96:d5:ea:6e:5f:2b:16:89:dc:
f3:df:a5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 10:11:28 2023 by rpki-client on console-ams.rpki-client.org