Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/34352e3133322e3231382e302f32342d3234203d3e2037303138.roa
File: 34352e3133322e3231382e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: YV1nkcJ3EVpWmtTKNmZT+mvo/ETS9Vh3d2mqf14vS6k=
Subject key identifier: 45:45:8A:E8:02:0D:AA:91:2F:FF:C0:6C:DB:B6:4E:56:9B:EA:78:FB
Certificate issuer: /CN=35e3043c2ede0281f573512069c8cfab837d4dcd
Certificate serial: 06B5D8F4B1FCA137D4DC29E36A2EEC9678782697
Authority key identifier: 35:E3:04:3C:2E:DE:02:81:F5:73:51:20:69:C8:CF:AB:83:7D:4D:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeMEPC7eAoH1c1EgacjPq4N9Tc0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/34352e3133322e3231382e302f32342d3234203d3e2037303138.roa
Signing time: Mon 03 Apr 2023 17:32:58 +0000
ROA not before: Mon 03 Apr 2023 17:27:58 +0000
ROA not after: Mon 01 Apr 2024 17:32:58 +0000
asID: 7018
IP address blocks: 45.132.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:b5:d8:f4:b1:fc:a1:37:d4:dc:29:e3:6a:2e:ec:96:78:78:26:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3043c2ede0281f573512069c8cfab837d4dcd
Validity
Not Before: Apr 3 17:27:58 2023 GMT
Not After : Apr 1 17:32:58 2024 GMT
Subject: CN=45458AE8020DAA912FFFC06CDBB64E569BEA78FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:a5:7c:c0:28:08:b2:45:a3:93:c0:2d:79:
78:80:8f:af:1d:78:82:b8:0e:0f:44:f0:8b:7a:1d:
64:28:bd:ca:af:1c:a3:54:b5:9c:10:2e:15:fa:fa:
19:07:5c:c3:33:3f:d4:3e:b2:c4:74:2c:0d:75:5c:
d2:bc:38:b9:68:f1:38:ca:47:fb:84:11:1f:7d:78:
e2:55:55:90:f8:6e:f1:ec:2b:ea:6c:25:39:63:7e:
4a:17:ef:89:23:e9:f6:fe:0f:35:8f:2e:6c:2c:b0:
66:ad:11:d9:91:50:99:61:a1:a0:3c:48:3c:33:a1:
3f:bf:cb:97:1f:2d:40:36:91:47:03:1e:2e:cb:56:
b9:81:97:1e:ef:e9:7a:42:0d:dd:4b:82:92:67:3f:
4b:d4:1d:6d:4c:16:39:fe:d6:c7:25:1d:a5:b3:0d:
36:d6:90:4b:18:43:66:3f:fa:a5:2f:b5:e0:ca:2a:
19:cd:ea:e1:5b:58:da:34:94:22:8b:8f:31:bc:61:
e0:60:45:80:9f:f0:40:a7:d8:9a:a9:5b:bd:ef:c2:
80:c7:d2:66:ef:78:0f:56:4f:7f:4b:07:ed:40:f0:
70:4c:e9:86:ec:2d:ba:96:9a:ff:25:d1:69:e7:c8:
25:10:35:36:1c:a6:2b:cf:51:44:59:30:ba:09:98:
74:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:45:8A:E8:02:0D:AA:91:2F:FF:C0:6C:DB:B6:4E:56:9B:EA:78:FB
X509v3 Authority Key Identifier:
keyid:35:E3:04:3C:2E:DE:02:81:F5:73:51:20:69:C8:CF:AB:83:7D:4D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/35E3043C2EDE0281F573512069C8CFAB837D4DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeMEPC7eAoH1c1EgacjPq4N9Tc0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/34352e3133322e3231382e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.218.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:8e:e4:01:e5:a2:c0:7b:4c:a9:7b:ae:17:d0:2c:d9:ff:ee:
90:62:ee:05:41:5d:4f:08:a4:5b:f8:70:55:f4:8b:2e:82:fa:
15:ef:01:33:df:c2:1a:57:73:e7:0d:7c:87:b6:ad:d5:c3:4f:
29:92:0c:89:1b:c1:2a:44:81:5e:65:75:01:95:5d:96:21:51:
ab:19:7c:8e:bf:87:2b:6c:d3:35:23:df:79:50:15:a1:ae:a9:
9d:56:81:d3:7d:b9:d2:b1:00:c8:c7:5f:1d:d4:f3:4e:62:e6:
4a:99:d9:7f:be:5e:65:ed:77:85:59:9d:6a:74:8a:3d:60:72:
f0:f1:da:fb:61:e2:f1:77:f5:95:03:75:ca:c1:8d:0a:8d:70:
5f:30:2d:ff:b3:0a:7c:88:ec:0a:bc:c3:c6:1e:28:32:00:ef:
16:3d:1a:4b:c6:84:4b:79:10:fc:b0:8b:ff:64:0f:96:fe:ab:
bf:8a:db:f0:c3:60:a3:b8:b6:af:60:9c:ea:6e:27:50:61:03:
6b:1e:f9:2b:16:40:dc:8d:fb:de:d3:75:1c:5b:84:a8:a2:a7:
17:1b:ac:6f:c0:1c:e0:05:55:62:1b:c2:54:05:9d:6e:cc:78:
28:36:44:af:72:88:3b:8c:20:cc:7d:e8:43:19:af:8c:3c:89:
2d:06:6f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org