Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/34352e3133322e3231372e302f32342d3234203d3e203536393133.roa
File: 34352e3133322e3231372e302f32342d3234203d3e203536393133.roa (raw, json)
Hash identifier: EaWmtTTarJ434gxXLDmitzL03H8VL5A+ttv5KGoplLQ=
Subject key identifier: D5:92:4B:05:56:95:9B:B4:31:37:95:42:38:BD:63:34:19:D5:91:12
Certificate issuer: /CN=35e3043c2ede0281f573512069c8cfab837d4dcd
Certificate serial: 23F7FF003871FB11E0ED69FE12335DFDD18D8011
Authority key identifier: 35:E3:04:3C:2E:DE:02:81:F5:73:51:20:69:C8:CF:AB:83:7D:4D:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeMEPC7eAoH1c1EgacjPq4N9Tc0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/34352e3133322e3231372e302f32342d3234203d3e203536393133.roa
Signing time: Mon 03 Apr 2023 17:32:38 +0000
ROA not before: Mon 03 Apr 2023 17:27:38 +0000
ROA not after: Mon 01 Apr 2024 17:32:38 +0000
asID: 56913
IP address blocks: 45.132.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f7:ff:00:38:71:fb:11:e0:ed:69:fe:12:33:5d:fd:d1:8d:80:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3043c2ede0281f573512069c8cfab837d4dcd
Validity
Not Before: Apr 3 17:27:38 2023 GMT
Not After : Apr 1 17:32:38 2024 GMT
Subject: CN=D5924B0556959BB43137954238BD633419D59112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:ef:5d:05:82:ac:6a:97:8e:2f:45:5c:03:
09:03:82:9c:59:82:6e:9c:21:8f:5e:ef:a8:71:8e:
b5:b8:ac:48:47:a8:58:0a:35:a4:28:16:26:20:2e:
8b:b6:ed:8c:01:ce:86:2b:fd:5b:14:0d:74:a3:bb:
01:d4:70:e9:d0:d3:67:a3:96:54:e7:80:3f:98:5a:
ef:ba:2e:e4:98:8a:67:b1:ac:63:a4:9e:06:d1:54:
6d:9a:84:ea:93:1d:4c:5b:17:15:9b:e1:fe:97:4d:
30:a4:85:e2:fc:88:da:85:16:38:74:27:a5:aa:59:
db:f0:08:70:f1:34:aa:54:7b:8e:51:7c:f1:cd:09:
b7:bb:40:21:31:db:9b:d2:9e:1a:71:98:7c:7a:92:
58:48:06:59:bb:33:30:73:64:1f:2d:04:b7:72:6f:
b3:65:b5:c7:15:48:da:be:a3:0b:1a:7d:10:71:21:
35:d3:30:b9:68:39:75:2e:1b:5c:c0:6e:99:f4:0d:
a1:c2:0d:af:9c:28:ce:d4:3e:fd:3a:4a:ca:6b:eb:
bf:d4:9f:f0:8a:2c:ea:e7:a1:13:3f:01:33:70:0f:
1c:be:48:0e:84:65:62:a7:9d:99:5b:07:0b:75:2a:
1d:84:e5:92:89:6d:3f:9c:45:ec:e4:58:de:e0:b8:
7a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:92:4B:05:56:95:9B:B4:31:37:95:42:38:BD:63:34:19:D5:91:12
X509v3 Authority Key Identifier:
keyid:35:E3:04:3C:2E:DE:02:81:F5:73:51:20:69:C8:CF:AB:83:7D:4D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/35E3043C2EDE0281F573512069C8CFAB837D4DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeMEPC7eAoH1c1EgacjPq4N9Tc0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/34352e3133322e3231372e302f32342d3234203d3e203536393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.217.0/24
Signature Algorithm: sha256WithRSAEncryption
57:0a:ce:57:47:97:16:dd:91:f8:67:e9:31:ee:15:56:c8:14:
1c:c6:62:34:a0:bc:1a:51:9c:5d:a5:4e:09:88:db:4c:f1:3a:
76:6e:55:90:2f:e8:2d:6d:d5:21:3a:e0:2e:ff:a7:a7:a5:1d:
7d:e5:3f:0c:c9:a5:42:db:d5:35:dc:68:9a:8c:fb:66:de:12:
5c:0c:ec:46:0c:2f:41:0c:cf:0a:a3:1b:f5:2f:af:e2:85:62:
79:8e:24:1d:69:35:b4:2d:1a:7b:f9:37:69:01:17:1e:90:b6:
4b:49:57:e1:ce:f2:78:14:78:39:a4:b1:7c:0a:f7:75:73:16:
08:e5:23:b2:1b:a9:d7:d0:05:76:cb:d7:ea:04:af:69:7c:ac:
3c:bc:2f:5d:08:6b:5c:8a:8c:6f:54:eb:5c:2d:d3:cf:9d:be:
9b:ba:72:bf:f9:bb:d0:94:a7:84:b5:69:4e:cb:4c:c2:c7:38:
c8:4c:c9:75:34:83:c9:4a:82:3d:8b:f4:94:6d:c3:37:bb:fa:
9c:28:92:de:ab:d4:a9:39:8d:94:8c:73:55:06:cc:5e:a2:24:
aa:de:4a:b5:40:06:01:1a:b0:bc:43:3d:bf:92:18:2b:8c:32:
fc:c4:79:ce:8c:6b:b1:8b:88:33:af:89:6b:bf:43:72:b9:94:
91:3d:1f:b2
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUI/f/ADhx+xHg7Wn+EjNd/dGNgBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVlMzA0M2MyZWRlMDI4MWY1NzM1MTIwNjljOGNmYWI4
MzdkNGRjZDAeFw0yMzA0MDMxNzI3MzhaFw0yNDA0MDExNzMyMzhaMDMxMTAvBgNV
BAMTKEQ1OTI0QjA1NTY5NTlCQjQzMTM3OTU0MjM4QkQ2MzM0MTlENTkxMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKwe9dBYKsapeOL0VcAwkDgpxZ
gm6cIY9e76hxjrW4rEhHqFgKNaQoFiYgLou27YwBzoYr/VsUDXSjuwHUcOnQ02ej
llTngD+YWu+6LuSYimexrGOkngbRVG2ahOqTHUxbFxWb4f6XTTCkheL8iNqFFjh0
J6WqWdvwCHDxNKpUe45RfPHNCbe7QCEx25vSnhpxmHx6klhIBlm7MzBzZB8tBLdy
b7NltccVSNq+owsafRBxITXTMLloOXUuG1zAbpn0DaHCDa+cKM7UPv06Sspr67/U
n/CKLOrnoRM/ATNwDxy+SA6EZWKnnZlbBwt1Kh2E5ZKJbT+cRezkWN7guHolAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU1ZJLBVaVm7QxN5VCOL1jNBnVkRIwHwYDVR0j
BBgwFoAUNeMEPC7eAoH1c1EgacjPq4N9Tc0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzhiMjNkZTMtNTI3Ny00NjJiLWEyNjUtY2I4ZjgwYWM5
M2VjLzAvMzVFMzA0M0MyRURFMDI4MUY1NzM1MTIwNjlDOENGQUI4MzdENERDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL05lTUVQQzdlQW9IMWMxRWdhY2pQcTRO
OVRjMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzhiMjNkZTMt
NTI3Ny00NjJiLWEyNjUtY2I4ZjgwYWM5M2VjLzAvMzQzNTJlMzEzMzMyMmUzMjMx
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM2MzkzMTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LYTZMA0GCSqGSIb3DQEBCwUAA4IBAQBXCs5XR5cW3ZH4Z+kx7hVWyBQcxmI0oLwa
UZxdpU4JiNtM8Tp2blWQL+gtbdUhOuAu/6enpR195T8MyaVC29U13GiajPtm3hJc
DOxGDC9BDM8Koxv1L6/ihWJ5jiQdaTW0LRp7+TdpARcekLZLSVfhzvJ4FHg5pLF8
Cvd1cxYI5SOyG6nX0AV2y9fqBK9pfKw8vC9dCGtcioxvVOtcLdPPnb6bunK/+bvQ
lKeEtWlOy0zCxzjITMl1NIPJSoI9i/SUbcM3u/qcKJLeq9SpOY2UjHNVBsxeoiSq
3kq1QAYBGrC8Qz2/khgrjDL8xHnOjGuxi4gzr4lrv0NyuZSRPR+y
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:59 2024 by rpki-client on console-ams.rpki-client.org