Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/34352e3133322e3231362e302f32342d3234203d3e2037303138.roa
File: 34352e3133322e3231362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: j5FL69vfBphlPJ/z5dAMvCXx+PVpfVkaDvJP6U8c5Yg=
Subject key identifier: 3A:ED:86:B4:4A:8C:F6:91:5A:F5:C3:64:FC:4C:8E:76:D6:1B:F5:72
Certificate issuer: /CN=35e3043c2ede0281f573512069c8cfab837d4dcd
Certificate serial: 756DF837B542DBF168177F67A31C724482F4E5A3
Authority key identifier: 35:E3:04:3C:2E:DE:02:81:F5:73:51:20:69:C8:CF:AB:83:7D:4D:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeMEPC7eAoH1c1EgacjPq4N9Tc0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/34352e3133322e3231362e302f32342d3234203d3e2037303138.roa
Signing time: Mon 03 Apr 2023 17:32:18 +0000
ROA not before: Mon 03 Apr 2023 17:27:18 +0000
ROA not after: Mon 01 Apr 2024 17:32:18 +0000
asID: 7018
IP address blocks: 45.132.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:6d:f8:37:b5:42:db:f1:68:17:7f:67:a3:1c:72:44:82:f4:e5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3043c2ede0281f573512069c8cfab837d4dcd
Validity
Not Before: Apr 3 17:27:18 2023 GMT
Not After : Apr 1 17:32:18 2024 GMT
Subject: CN=3AED86B44A8CF6915AF5C364FC4C8E76D61BF572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:95:85:98:df:3d:0e:d1:2b:90:38:c7:01:c0:
af:fc:67:43:cc:bd:fd:4d:8a:f1:71:59:0b:2b:ef:
26:3c:5d:91:df:66:da:d0:ae:3f:3b:08:a9:10:1c:
89:c6:f8:34:f0:f8:b6:46:05:6b:bb:16:43:b8:7f:
1f:5d:fa:b4:81:2e:33:9c:13:75:2c:29:c8:65:49:
ca:d2:91:d1:f9:4e:55:36:e3:1d:c2:18:4a:01:bc:
b5:b8:63:f3:9d:1c:c4:3c:1b:85:e0:30:43:b2:7a:
d5:8c:9f:56:55:fc:93:ff:02:f5:df:df:cd:93:35:
da:ab:ce:b3:14:1e:96:59:b5:b5:7a:34:3a:80:61:
30:fb:a7:9d:4b:dd:50:81:17:35:1a:e5:7c:f3:b4:
b5:7f:4f:bb:74:81:8e:dd:7e:ad:ad:33:b9:22:e5:
b8:f6:8d:d5:8d:05:32:48:8f:c0:c0:b1:98:29:ce:
8d:05:55:09:8e:ed:9d:f9:7b:6d:61:17:1f:bf:6e:
99:61:7a:a2:c8:55:83:e8:a7:77:e0:a9:59:bc:06:
f6:c4:b9:d7:ee:73:8b:e2:02:33:de:cc:a3:a7:c3:
b3:81:9b:0b:51:86:5f:e0:1d:43:c6:98:88:49:55:
bd:cf:8e:7f:ef:83:86:1f:b1:ad:c8:7b:90:c9:77:
96:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:ED:86:B4:4A:8C:F6:91:5A:F5:C3:64:FC:4C:8E:76:D6:1B:F5:72
X509v3 Authority Key Identifier:
keyid:35:E3:04:3C:2E:DE:02:81:F5:73:51:20:69:C8:CF:AB:83:7D:4D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/35E3043C2EDE0281F573512069C8CFAB837D4DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeMEPC7eAoH1c1EgacjPq4N9Tc0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/34352e3133322e3231362e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.216.0/24
Signature Algorithm: sha256WithRSAEncryption
38:04:f3:a6:d0:ea:87:71:52:d0:bb:cc:ca:bd:bc:3c:54:54:
5a:41:13:dd:f9:f7:9c:2c:6a:f7:e6:e1:c3:a0:48:7a:59:d8:
ec:28:dc:77:70:f3:0c:b4:76:f8:c9:b9:eb:2a:cc:ac:00:eb:
02:c6:3f:e2:a6:f1:9e:a6:dd:07:34:22:d3:a6:0d:fe:92:b2:
2b:1a:69:65:1a:d6:75:79:e7:70:f1:b4:3e:81:1e:30:b4:3f:
8e:21:1e:6c:63:9a:4d:df:5d:8e:dd:4e:45:df:88:b6:64:e2:
1d:ef:59:42:d4:04:8c:73:e1:f3:ee:42:69:6a:6b:0b:e5:91:
ec:dc:64:a5:be:49:62:06:e8:dd:bc:4e:6c:f3:19:09:f6:9a:
e3:0e:fa:7e:73:7c:56:fd:8a:b7:72:81:22:51:97:dc:14:af:
99:d4:17:01:c7:97:9d:b3:8a:3e:af:43:90:74:67:0f:dd:07:
20:68:ff:16:fe:94:0b:b3:91:c2:6a:4f:3d:cd:e5:11:0e:17:
b6:94:66:0f:c5:b4:97:9d:2e:1d:e2:43:ce:38:4c:f8:c1:9e:
df:6e:38:23:b8:88:d5:6a:4e:11:ce:69:49:90:2b:67:85:4e:
69:98:cd:d6:1d:16:ae:05:22:2c:58:8c:55:94:51:26:f5:29:
96:63:c4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:59 2024 by rpki-client on console-ams.rpki-client.org