Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/34352e3133322e3231392e302f32342d3234203d3e203536393133.roa
File: 34352e3133322e3231392e302f32342d3234203d3e203536393133.roa (raw, json)
Hash identifier: 6vkkwg5ZMpOJJZM6XZN4I3jxYPPDIRj7dT7IrYv8YIs=
Subject key identifier: AF:9A:B5:A2:70:5F:FC:8C:2C:B7:56:F9:B2:39:8C:EC:9A:9F:36:B8
Certificate issuer: /CN=35e3043c2ede0281f573512069c8cfab837d4dcd
Certificate serial: 33E69D29A18C59CBEAE3571EB0535B7C4960FD94
Authority key identifier: 35:E3:04:3C:2E:DE:02:81:F5:73:51:20:69:C8:CF:AB:83:7D:4D:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeMEPC7eAoH1c1EgacjPq4N9Tc0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/34352e3133322e3231392e302f32342d3234203d3e203536393133.roa
Signing time: Mon 03 Apr 2023 17:33:09 +0000
ROA not before: Mon 03 Apr 2023 17:28:09 +0000
ROA not after: Mon 01 Apr 2024 17:33:09 +0000
asID: 56913
IP address blocks: 45.132.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e6:9d:29:a1:8c:59:cb:ea:e3:57:1e:b0:53:5b:7c:49:60:fd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3043c2ede0281f573512069c8cfab837d4dcd
Validity
Not Before: Apr 3 17:28:09 2023 GMT
Not After : Apr 1 17:33:09 2024 GMT
Subject: CN=AF9AB5A2705FFC8C2CB756F9B2398CEC9A9F36B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:f1:bc:d6:ea:cf:bf:ab:4b:d3:bd:78:a4:
75:84:28:81:8a:87:ba:57:f1:69:f3:d6:82:f6:7b:
b6:89:63:d5:10:32:9c:3f:f2:97:7c:4d:f6:7b:12:
ce:e2:0c:e8:90:04:96:f2:d6:52:f9:7b:b9:7a:a0:
d5:7b:a3:2a:65:69:ec:2c:88:81:9a:b6:a6:81:2c:
a9:37:08:89:20:18:68:9f:a0:ec:3f:df:ff:6d:68:
5b:e6:9b:f4:6d:7b:7c:71:e8:67:45:fa:11:c4:3f:
89:6e:28:da:66:73:95:b1:22:ed:dd:7c:6e:62:be:
66:7b:f5:f0:71:8a:c5:d0:cc:0e:1b:ee:5f:8a:f9:
55:da:59:ec:31:43:4c:dd:cd:ab:4f:f6:7d:6f:91:
ef:b6:ff:19:1e:97:6c:55:cb:f9:12:c5:e5:32:84:
46:5c:12:03:9d:a5:97:2b:00:79:1f:19:b3:b6:f5:
37:df:99:54:4c:a4:7d:d6:77:ea:8b:e1:fa:20:9f:
4e:f8:2b:d6:28:39:4f:47:dd:1c:77:03:06:af:06:
bf:60:12:6c:9a:24:36:5e:f9:67:47:76:8a:19:a1:
1f:ae:b9:84:6f:d0:e9:bc:c8:60:9c:8e:41:17:ac:
1e:9a:c4:81:fa:83:c9:08:70:b1:6a:50:bf:68:26:
42:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9A:B5:A2:70:5F:FC:8C:2C:B7:56:F9:B2:39:8C:EC:9A:9F:36:B8
X509v3 Authority Key Identifier:
keyid:35:E3:04:3C:2E:DE:02:81:F5:73:51:20:69:C8:CF:AB:83:7D:4D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/35E3043C2EDE0281F573512069C8CFAB837D4DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeMEPC7eAoH1c1EgacjPq4N9Tc0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/38b23de3-5277-462b-a265-cb8f80ac93ec/0/34352e3133322e3231392e302f32342d3234203d3e203536393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.219.0/24
Signature Algorithm: sha256WithRSAEncryption
95:13:5a:c3:1a:4d:a5:c3:f2:ff:38:4b:ce:5d:7d:cd:b0:5f:
e2:48:f8:b5:74:27:6f:97:78:e5:51:7d:b6:a1:7a:75:00:58:
cb:15:f9:59:75:01:01:51:51:ad:0c:1e:6f:70:93:1d:78:d6:
87:e2:30:10:7e:a8:29:97:2e:6c:38:dd:24:b2:06:3c:c7:90:
d1:15:d0:85:39:87:89:a4:a0:19:61:2e:e4:2f:b3:b6:40:fa:
41:57:3e:9f:53:15:80:85:68:61:17:d7:3e:20:da:26:9e:7b:
ea:32:47:ef:02:78:f0:54:da:10:17:0f:82:6c:f3:21:60:ef:
32:c3:ee:18:51:e7:4e:53:71:67:4a:c8:08:15:2a:b9:ac:80:
43:53:0e:7b:97:fe:80:c1:01:de:b6:47:23:88:f2:36:9f:8f:
1a:dc:08:4c:78:85:d8:eb:b8:78:cf:c2:76:cc:fb:74:5d:d3:
7c:8d:af:44:eb:a3:79:1e:fd:5d:b4:5a:a1:fa:0a:6d:0f:b9:
31:09:fb:2c:52:2e:82:dc:ac:22:07:f2:c9:a1:29:d0:43:47:
40:16:6e:ca:e0:76:db:4c:51:00:1e:b5:a9:b0:8a:e5:95:4f:
b4:a7:38:25:33:61:ba:54:e6:43:8b:7e:65:ab:b0:6f:12:d0:
2c:5e:d2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:59 2024 by rpki-client on console-ams.rpki-client.org