Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e38382e31312e302f32342d3234203d3e20323131343135.roa
File: 34352e38382e31312e302f32342d3234203d3e20323131343135.roa (raw, json)
Hash identifier: 2Twtb5Z/FHpzzyRwge6Hkc0OPP83hAtii5BrLLQwmDo=
Subject key identifier: EB:CC:4B:71:EC:F8:81:2A:93:3D:18:CD:B9:85:F1:39:4C:E9:AA:5B
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 396BF21471E2AB614D9961BAB260A6D5DA34BC53
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e38382e31312e302f32342d3234203d3e20323131343135.roa
Signing time: Wed 04 Jan 2023 10:43:12 +0000
ROA not before: Wed 04 Jan 2023 10:38:12 +0000
ROA not after: Wed 03 Jan 2024 10:43:12 +0000
asID: 211415
IP address blocks: 45.88.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:6b:f2:14:71:e2:ab:61:4d:99:61:ba:b2:60:a6:d5:da:34:bc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 4 10:38:12 2023 GMT
Not After : Jan 3 10:43:12 2024 GMT
Subject: CN=EBCC4B71ECF8812A933D18CDB985F1394CE9AA5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:53:90:64:8f:de:85:04:df:db:6f:89:45:b4:
9f:b1:de:91:a9:2f:1a:39:99:7c:53:88:33:49:76:
cb:ed:c1:3c:ee:d9:57:21:e7:be:84:26:c4:07:d0:
14:65:d2:90:9f:37:8e:61:cf:38:11:1a:f1:6a:36:
6b:9d:bb:7e:25:bd:57:2d:50:49:2e:13:82:c9:c3:
17:e6:87:52:11:d0:c5:70:67:92:8c:bc:45:3f:d4:
39:a6:ca:ac:05:d6:04:be:ea:6c:f7:8c:96:2d:3a:
ee:07:32:b7:44:09:f4:c2:ea:4f:19:12:80:ac:e6:
b5:77:e8:2c:76:e6:6f:bd:89:ae:87:9d:e7:72:b2:
e6:3a:1f:92:a7:2e:a6:6c:b2:7f:ae:04:8b:d1:42:
ce:5a:56:95:1f:bc:4a:8f:47:7d:01:77:f6:31:f8:
4a:d3:d3:7f:9f:1e:75:e1:93:fc:c9:b7:ee:49:f1:
3a:ca:df:2e:c6:81:dd:ee:48:f4:d0:0c:3a:60:5e:
3d:c0:e6:d4:ba:c1:89:71:23:d5:a4:67:5b:a6:61:
81:40:f9:02:ea:0e:2a:b3:a0:19:3c:cf:7c:3b:0a:
34:23:e6:9d:53:6b:17:fd:48:4c:60:1b:a8:1d:bc:
a4:7a:f0:77:62:06:89:4f:97:ce:dd:5a:0c:89:66:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CC:4B:71:EC:F8:81:2A:93:3D:18:CD:B9:85:F1:39:4C:E9:AA:5B
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e38382e31312e302f32342d3234203d3e20323131343135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:46:1c:9e:c2:9c:07:6a:56:8f:ee:d2:52:b0:5f:4f:5c:34:
9d:f1:34:6a:37:75:f9:9d:b6:52:3c:70:80:8b:2f:af:e4:ed:
80:bf:8d:ff:6b:4e:ff:c8:05:e0:22:e0:eb:f0:23:b8:ed:5e:
0c:ef:36:86:69:d5:93:cd:73:73:aa:f2:3a:24:55:f3:69:a9:
c5:68:d7:00:db:0e:0a:50:88:2b:31:da:f9:da:b8:6c:96:5e:
ca:11:15:d7:d1:1c:1a:6b:ab:18:e2:8f:f5:5a:ce:9b:b3:77:
46:f2:e5:f7:8b:ae:65:3d:a0:7b:a9:35:5e:67:ac:f1:f5:0a:
c9:a5:92:56:7c:7f:83:49:bf:6a:70:3c:f6:32:72:d3:77:01:
88:ff:83:dc:33:d6:08:85:2d:1e:2c:35:a2:8b:15:4d:57:9b:
de:7b:a0:23:f8:3f:85:20:74:9c:3b:9a:c2:4c:94:1e:c0:ae:
fd:4f:d0:33:ad:a6:ad:da:6c:b3:e7:c7:42:c4:f2:52:d6:c5:
fa:5e:78:54:80:fd:ba:e6:3c:5e:41:28:59:07:38:af:88:0a:
77:38:48:b1:46:9c:a2:fe:3d:ef:b0:c3:3c:a4:19:29:c0:3a:
9c:96:73:3b:3c:45:1f:c5:79:d6:55:d8:7d:93:b8:28:02:e6:
d4:b2:fc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 10:11:28 2023 by rpki-client on console-ams.rpki-client.org