Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0/34352e3134352e3234322e302f32342d3234203d3e203433323630.roa
File: 34352e3134352e3234322e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier: G4Ux9ND6c67oFPoptZNYk3RRIBDJ6fEnT/Jq3sLNQLM=
Subject key identifier: E5:0C:0E:97:D9:E7:0E:FF:77:21:54:0B:79:D7:DC:80:88:7F:93:64
Certificate issuer: /CN=3fee952bad4efed0ee5b17937a75fbec861dbff7
Certificate serial: 3B0E0FFD1415F28DEAC9267F7D34C615E577911A
Authority key identifier: 3F:EE:95:2B:AD:4E:FE:D0:EE:5B:17:93:7A:75:FB:EC:86:1D:BF:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-6VK61O_tDuWxeTenX77IYdv_c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0/34352e3134352e3234322e302f32342d3234203d3e203433323630.roa
Signing time: Sun 02 Apr 2023 20:31:07 +0000
ROA not before: Sun 02 Apr 2023 20:26:07 +0000
ROA not after: Sun 31 Mar 2024 20:31:07 +0000
asID: 43260
IP address blocks: 45.145.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:0e:0f:fd:14:15:f2:8d:ea:c9:26:7f:7d:34:c6:15:e5:77:91:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fee952bad4efed0ee5b17937a75fbec861dbff7
Validity
Not Before: Apr 2 20:26:07 2023 GMT
Not After : Mar 31 20:31:07 2024 GMT
Subject: CN=E50C0E97D9E70EFF7721540B79D7DC80887F9364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:1f:56:d1:13:8b:7d:90:f5:ef:fd:77:a6:
7b:33:87:72:af:40:b9:33:50:ab:8a:6c:20:ea:e8:
40:c6:0e:95:7a:5c:fc:de:e1:65:2e:67:9d:e8:1f:
f1:45:4e:f7:0a:d2:99:84:60:fd:2e:c5:fc:a4:dd:
39:4a:e8:b7:c8:21:17:f0:08:d0:f6:f1:bc:2f:e4:
6f:88:ed:0f:ee:1e:3d:f2:a0:31:e2:4b:1f:50:74:
03:8b:73:11:84:c7:ce:e3:bf:4d:ad:0d:2f:8e:49:
ae:42:60:4f:98:06:0f:54:ab:2b:ee:87:2d:81:29:
ca:2c:b1:c5:2f:b4:d6:ab:8d:2e:4b:79:5f:89:f5:
d6:99:44:c6:0d:1d:1f:d2:94:36:ae:63:59:01:ba:
68:c3:c5:41:c1:db:0f:0f:8a:56:19:27:9d:07:64:
bf:83:b2:2e:b1:90:9f:d3:8f:d6:d7:3c:94:12:3e:
cb:79:ea:d7:3e:f3:d5:48:d3:24:59:56:7a:47:d6:
53:fe:3e:ba:05:ab:e3:4b:d2:14:a6:b5:d7:59:8b:
11:8f:36:ef:78:e6:6b:11:d8:dc:4e:fc:16:de:0d:
32:a2:cf:2a:45:d7:16:de:26:13:f0:08:b5:29:c4:
e1:31:42:0c:6e:eb:58:92:ec:a2:da:3f:c9:2b:8f:
e6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0C:0E:97:D9:E7:0E:FF:77:21:54:0B:79:D7:DC:80:88:7F:93:64
X509v3 Authority Key Identifier:
keyid:3F:EE:95:2B:AD:4E:FE:D0:EE:5B:17:93:7A:75:FB:EC:86:1D:BF:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0/3FEE952BAD4EFED0EE5B17937A75FBEC861DBFF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-6VK61O_tDuWxeTenX77IYdv_c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0/34352e3134352e3234322e302f32342d3234203d3e203433323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.242.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b0:57:95:6f:51:92:e0:0e:2f:c6:45:7f:e0:71:b4:02:ed:
8d:39:49:bf:7f:45:68:1a:b3:23:45:17:6d:91:e2:c9:57:eb:
e1:25:fa:20:48:b8:87:9e:67:8d:6f:84:f9:39:3b:8c:6b:99:
5b:f2:b6:d7:78:7d:35:eb:21:37:d7:04:57:e7:a4:85:11:f7:
c4:b2:42:97:ee:6d:a8:e4:8b:b3:1f:00:1c:8b:96:33:50:3c:
1d:fa:6d:dc:71:59:03:64:54:2f:3e:da:b1:bd:4b:ad:14:b0:
8d:77:c2:6c:3b:2b:81:dc:b5:ff:8b:62:7b:04:d0:e4:72:2a:
e2:bd:15:cd:86:b2:8c:f1:db:40:ca:fb:56:18:e5:47:f0:2c:
cb:17:82:4f:2c:a3:08:ef:f3:96:25:77:57:52:90:fb:5b:6e:
64:ff:f3:63:68:a7:15:9c:2b:ab:1d:8a:3b:14:36:40:44:f7:
65:02:96:0c:b2:cd:7b:c9:07:be:c7:38:84:12:8d:0d:18:bb:
e8:73:99:88:b3:30:97:c2:4b:9c:45:3f:df:7e:29:bb:3e:2c:
54:70:ca:2c:92:c6:f0:c5:86:91:79:f5:e1:34:cf:0a:22:d0:
2f:57:ed:6b:5d:74:88:f6:6b:5f:20:55:f2:69:7e:e0:57:e1:
15:e8:ee:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:59 2023 by rpki-client on console-fra.rpki-client.org