Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36352e302f32342d3234203d3e20383334.roa
File: 34352e39352e36352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: V73WTAvJMSveiGN3rxSunPoB6hCijgxtwfyU1tKdCTU=
Subject key identifier: 5F:78:BC:84:41:08:8B:35:7A:36:CD:C0:E5:89:5B:72:54:C7:F1:B7
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 17B5954B4CA6305AE2D6DF8CFC03EF88DC7B1F6C
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36352e302f32342d3234203d3e20383334.roa
Signing time: Tue 22 Aug 2023 11:00:04 +0000
ROA not before: Tue 22 Aug 2023 10:55:04 +0000
ROA not after: Tue 20 Aug 2024 11:00:04 +0000
asID: 834
IP address blocks: 45.95.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:b5:95:4b:4c:a6:30:5a:e2:d6:df:8c:fc:03:ef:88:dc:7b:1f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Aug 22 10:55:04 2023 GMT
Not After : Aug 20 11:00:04 2024 GMT
Subject: CN=5F78BC8441088B357A36CDC0E5895B7254C7F1B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:d2:fa:55:83:e3:7e:ac:dc:bc:6a:f4:99:
c7:17:72:d6:1c:ec:e3:60:d9:6f:aa:cd:71:e0:62:
b3:3e:9a:fe:85:2d:02:e9:2d:1d:6c:28:aa:11:fd:
26:db:a2:16:ae:eb:bf:92:e3:f3:82:ff:9b:59:71:
6f:a4:cb:21:a0:db:3f:0b:c1:3b:f3:82:a1:08:6f:
d0:91:95:6d:20:e2:c3:18:ca:16:bc:f2:ba:a6:71:
60:39:48:c5:07:d9:11:d4:87:92:b3:f9:3a:7a:78:
6e:31:32:2b:58:93:fd:4b:80:27:5e:ed:a7:bf:bd:
75:28:80:f5:77:dc:a7:8f:ea:73:3e:f6:dd:e7:14:
f5:eb:2b:a4:a3:75:b8:4d:63:2b:78:bb:60:57:00:
39:18:da:10:92:0f:e0:bb:5d:ed:c9:f8:82:c8:ed:
79:cd:f6:9b:d8:b3:0c:73:33:0e:c2:60:37:4c:b9:
1b:09:4c:7c:7e:9a:89:86:cc:f0:47:0b:cd:9e:4c:
a9:8f:36:0e:6b:82:1a:35:e8:41:f5:4a:f1:b5:68:
aa:48:b0:af:49:4a:41:12:5d:29:55:60:3d:44:2e:
bb:fe:c1:84:f4:36:71:7c:22:07:08:1f:bf:05:b6:
6b:3d:cb:d0:ef:66:1d:3d:b0:70:46:e6:02:f7:19:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:78:BC:84:41:08:8B:35:7A:36:CD:C0:E5:89:5B:72:54:C7:F1:B7
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.65.0/24
Signature Algorithm: sha256WithRSAEncryption
76:3a:e1:d0:d6:f9:62:a1:e6:e2:52:2e:29:31:d5:fa:66:9c:
c1:68:5e:8a:67:ca:66:66:0f:3f:28:f1:89:b0:36:0c:c2:78:
c3:4a:f7:1e:3c:76:5d:0d:55:34:47:f1:d3:99:e3:c4:9d:c8:
4c:d6:5a:a8:ae:cd:1e:88:9a:2e:79:eb:18:98:18:db:ba:2d:
78:6a:d0:53:77:db:0e:77:00:44:f0:f7:f2:d0:f7:56:f3:92:
08:91:12:81:38:04:4a:eb:91:6b:e7:c1:7f:cd:2d:79:48:4c:
cf:d2:8b:70:ae:18:ae:c0:38:91:b2:90:4d:a5:47:9f:57:23:
ab:fe:09:f4:b6:e2:95:3a:64:31:4b:fa:9b:5e:bc:84:e3:ff:
47:96:34:c3:ec:fb:54:fd:a9:a8:bb:9d:df:ec:d7:14:9d:58:
16:68:40:d2:85:ad:f4:e6:b5:29:a1:ee:fc:87:32:80:68:8f:
a7:d7:1c:39:a4:ec:ab:32:52:69:5a:15:7b:88:46:b3:f7:31:
c8:cb:65:b1:8c:05:68:34:09:62:a7:89:55:1f:98:79:fe:11:
c7:b6:1f:08:2f:1d:1b:8e:b4:1a:25:c8:7c:cd:23:e3:20:5e:
18:49:04:7d:6c:da:8c:a3:3f:df:30:9f:5e:7d:28:ae:cb:9e:
86:70:53:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org