Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/34352e3133322e3231372e302f32342d3234203d3e2037303138.roa
File: 34352e3133322e3231372e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: rhRgZg/hT6r7Ljsbj1eSt5u4OnoGJBjBGqzfgPD3FlM=
Subject key identifier: C6:B9:B0:A4:CD:B3:50:89:EF:6D:85:29:43:84:77:20:04:D8:06:FE
Certificate issuer: /CN=35e3043c2ede0281f573512069c8cfab837d4dcd
Certificate serial: 4B2F0D6C0FF5EC99A47AEE8D3954804BB0995081
Authority key identifier: 35:E3:04:3C:2E:DE:02:81:F5:73:51:20:69:C8:CF:AB:83:7D:4D:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeMEPC7eAoH1c1EgacjPq4N9Tc0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/34352e3133322e3231372e302f32342d3234203d3e2037303138.roa
Signing time: Mon 03 Apr 2023 17:32:27 +0000
ROA not before: Mon 03 Apr 2023 17:27:27 +0000
ROA not after: Mon 01 Apr 2024 17:32:27 +0000
asID: 7018
IP address blocks: 45.132.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:2f:0d:6c:0f:f5:ec:99:a4:7a:ee:8d:39:54:80:4b:b0:99:50:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3043c2ede0281f573512069c8cfab837d4dcd
Validity
Not Before: Apr 3 17:27:27 2023 GMT
Not After : Apr 1 17:32:27 2024 GMT
Subject: CN=C6B9B0A4CDB35089EF6D85294384772004D806FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ad:2f:23:c7:d2:78:30:11:22:f4:92:17:95:
e9:c4:c0:5d:ee:df:85:00:84:07:b0:5f:2b:ec:51:
70:80:40:f2:c0:a1:55:a1:46:10:38:cd:17:43:dc:
44:87:1a:dc:49:47:cb:13:93:02:46:83:d7:33:71:
8f:0c:e5:1f:00:0c:5b:69:99:03:aa:18:78:b0:18:
da:f0:19:52:ca:7a:9d:66:46:01:8e:a8:6a:d7:4b:
b3:68:8c:85:07:ae:92:e4:7c:98:0e:e2:3b:52:80:
2f:ab:b1:17:37:7f:42:06:5b:da:94:e3:c1:d4:33:
6c:ce:6f:c9:d0:d6:69:73:75:96:c9:db:a6:e1:10:
8b:db:be:70:3c:67:27:8a:0d:19:4a:e3:e0:6c:f4:
03:e8:53:fd:3b:83:b0:43:32:1c:ca:eb:a3:26:51:
d5:0d:89:e3:e2:01:5a:20:e8:e8:ed:57:92:6f:c0:
d5:46:46:d3:33:4e:b0:b1:c2:59:a0:18:ba:72:8e:
10:33:01:d2:7e:e8:cf:76:6f:f2:9c:29:13:ca:0a:
2b:d1:5f:bf:b3:2c:76:ca:31:ae:93:3e:61:0e:3e:
2c:5a:3e:04:77:87:41:d9:d9:0c:3f:49:47:ad:cc:
30:31:b9:1a:e9:c0:d4:62:b4:3c:d8:d7:26:d2:c7:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B9:B0:A4:CD:B3:50:89:EF:6D:85:29:43:84:77:20:04:D8:06:FE
X509v3 Authority Key Identifier:
keyid:35:E3:04:3C:2E:DE:02:81:F5:73:51:20:69:C8:CF:AB:83:7D:4D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/35E3043C2EDE0281F573512069C8CFAB837D4DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeMEPC7eAoH1c1EgacjPq4N9Tc0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/34352e3133322e3231372e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.217.0/24
Signature Algorithm: sha256WithRSAEncryption
72:74:b7:ca:54:87:4a:94:72:0c:7d:da:94:5e:2e:c1:04:fa:
c9:69:8a:2f:23:9b:a0:73:08:24:42:22:71:a3:fd:42:1b:f2:
40:8c:de:89:79:0c:d1:e4:22:75:38:f7:c2:8e:b7:07:7a:03:
26:3c:78:7e:ea:47:2e:e0:ce:ba:4d:cf:8b:8d:5d:07:e6:9c:
b3:32:3a:9e:1b:f8:bc:02:a8:a0:45:d1:c1:a3:94:9f:73:54:
fc:0b:0c:84:77:20:d2:35:42:03:27:a8:e8:9b:09:7e:42:21:
ad:96:0e:30:71:31:ae:f4:6f:2f:a6:df:6d:25:1b:3d:a3:3c:
30:b5:4f:3f:7f:45:95:5f:60:25:20:30:17:ee:96:45:23:c3:
93:69:c6:8c:7e:60:03:59:66:73:80:82:38:3d:ba:e6:29:68:
84:57:c8:cf:9e:00:f5:a6:7c:8b:04:2f:03:a8:aa:a8:ed:6d:
8f:9f:d7:aa:dd:f0:62:ed:80:cf:8d:6d:4c:c3:09:9f:ff:be:
6c:5a:b3:12:af:38:2f:eb:92:5b:af:41:36:90:2a:d0:37:cc:
d4:d4:6c:ad:06:5b:cf:a0:00:06:b8:29:93:bf:6f:d8:15:a3:
4a:cf:b1:c4:4e:71:b5:e9:3f:b3:eb:68:f9:80:d2:56:28:10:
2a:c6:bb:ee
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUSy8NbA/17Jmkeu6NOVSAS7CZUIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVlMzA0M2MyZWRlMDI4MWY1NzM1MTIwNjljOGNmYWI4
MzdkNGRjZDAeFw0yMzA0MDMxNzI3MjdaFw0yNDA0MDExNzMyMjdaMDMxMTAvBgNV
BAMTKEM2QjlCMEE0Q0RCMzUwODlFRjZEODUyOTQzODQ3NzIwMDREODA2RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjrS8jx9J4MBEi9JIXlenEwF3u
34UAhAewXyvsUXCAQPLAoVWhRhA4zRdD3ESHGtxJR8sTkwJGg9czcY8M5R8ADFtp
mQOqGHiwGNrwGVLKep1mRgGOqGrXS7NojIUHrpLkfJgO4jtSgC+rsRc3f0IGW9qU
48HUM2zOb8nQ1mlzdZbJ26bhEIvbvnA8ZyeKDRlK4+Bs9APoU/07g7BDMhzK66Mm
UdUNiePiAVog6OjtV5JvwNVGRtMzTrCxwlmgGLpyjhAzAdJ+6M92b/KcKRPKCivR
X7+zLHbKMa6TPmEOPixaPgR3h0HZ2Qw/SUetzDAxuRrpwNRitDzY1ybSx5S9AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUxrmwpM2zUInvbYUpQ4R3IATYBv4wHwYDVR0j
BBgwFoAUNeMEPC7eAoH1c1EgacjPq4N9Tc0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzhiMjNkZTMtNTI3Ny00NjJiLWEyNjUtY2I4ZjgwYWM5
M2VjLzAvMzVFMzA0M0MyRURFMDI4MUY1NzM1MTIwNjlDOENGQUI4MzdENERDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL05lTUVQQzdlQW9IMWMxRWdhY2pQcTRO
OVRjMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzhiMjNkZTMt
NTI3Ny00NjJiLWEyNjUtY2I4ZjgwYWM5M2VjLzAvMzQzNTJlMzEzMzMyMmUzMjMx
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNzMwMzEzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2E
2TANBgkqhkiG9w0BAQsFAAOCAQEAcnS3ylSHSpRyDH3alF4uwQT6yWmKLyOboHMI
JEIicaP9QhvyQIzeiXkM0eQidTj3wo63B3oDJjx4fupHLuDOuk3Pi41dB+acszI6
nhv4vAKooEXRwaOUn3NU/AsMhHcg0jVCAyeo6JsJfkIhrZYOMHExrvRvL6bfbSUb
PaM8MLVPP39FlV9gJSAwF+6WRSPDk2nGjH5gA1lmc4CCOD265ilohFfIz54A9aZ8
iwQvA6iqqO1tj5/Xqt3wYu2Az41tTMMJn/++bFqzEq84L+uSW69BNpAq0DfM1NRs
rQZbz6AABrgpk79v2BWjSs+xxE5xtek/s+to+YDSVigQKsa77g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:59 2024 by rpki-client on console-ams.rpki-client.org