Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3133322e39362e302f32342d3234203d3e20323037393932.roa
File: 34352e3133322e39362e302f32342d3234203d3e20323037393932.roa (raw, json)
Hash identifier: rLVfnTWt76LuuGlJvtXteUX7kaBh/O2Afd70itvcDHc=
Subject key identifier: 85:75:7B:FD:C5:EA:17:4D:57:6F:4D:A1:84:33:B0:29:36:E9:F9:7B
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 08C6D6028028E74BAAD544A79B3EE004F5CF2418
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3133322e39362e302f32342d3234203d3e20323037393932.roa
Signing time: Sat 29 Apr 2023 14:13:42 +0000
ROA not before: Sat 29 Apr 2023 14:08:42 +0000
ROA not after: Sat 27 Apr 2024 14:13:42 +0000
asID: 207992
IP address blocks: 45.132.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c6:d6:02:80:28:e7:4b:aa:d5:44:a7:9b:3e:e0:04:f5:cf:24:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 14:08:42 2023 GMT
Not After : Apr 27 14:13:42 2024 GMT
Subject: CN=85757BFDC5EA174D576F4DA18433B02936E9F97B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:57:eb:35:57:88:59:48:31:7d:a4:d8:2e:
ec:e5:4e:c7:bc:8b:90:ea:d3:a8:76:b4:95:8f:ba:
5b:49:12:aa:61:a6:96:29:70:fc:71:fa:60:08:14:
ba:5c:3a:9e:30:3a:38:04:aa:df:64:f2:33:c6:6f:
f6:1e:7b:2a:de:09:8a:d2:02:aa:c0:f9:1e:5e:09:
ac:e3:00:e5:83:80:32:73:85:68:e4:79:a1:69:74:
01:06:8e:39:ad:c0:6b:c9:01:22:75:84:da:05:e9:
50:47:20:72:8d:11:8c:43:51:14:f6:a9:de:3b:f4:
a3:df:88:b6:5e:1d:b7:27:3c:90:5b:99:da:f8:19:
a1:30:5a:e1:be:fe:d6:8e:ba:66:05:bd:10:30:db:
96:08:9f:fa:92:53:f0:bc:69:82:07:04:4e:4f:b2:
54:3c:78:aa:d6:8c:d9:82:ed:75:72:33:a0:2d:c0:
59:a0:dd:90:1c:e6:2d:af:a8:99:69:f1:1a:68:35:
18:75:0d:a2:15:da:2f:e8:0f:1b:3a:b6:02:84:f7:
4d:35:2c:c9:77:ba:11:33:79:5d:6e:b0:c1:c2:51:
9a:9c:44:6c:e2:4f:c6:72:32:cb:1b:f8:33:45:5a:
7a:71:8f:22:9a:1d:19:f2:7f:7d:df:b7:03:a1:14:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:75:7B:FD:C5:EA:17:4D:57:6F:4D:A1:84:33:B0:29:36:E9:F9:7B
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3133322e39362e302f32342d3234203d3e20323037393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.96.0/24
Signature Algorithm: sha256WithRSAEncryption
67:97:0f:18:2c:fe:9c:30:f1:09:fb:49:fc:b1:a0:d8:e1:58:
f6:bd:f2:13:37:41:6d:88:58:bb:00:78:dd:91:5e:fa:94:65:
7f:ae:9d:56:ca:cd:a6:fa:bd:0b:70:e0:e3:c1:93:6e:6f:7a:
f7:50:1e:d7:fd:d0:a9:23:e9:0c:91:64:76:e3:da:cd:e7:30:
49:05:0f:c5:87:2e:70:f4:57:50:93:0a:c4:85:9f:c3:7d:5a:
bb:2e:87:d0:3c:8b:8e:47:d4:ef:aa:01:27:e7:68:54:85:6c:
c0:8e:02:8b:b3:c8:4b:9f:80:f0:d8:e3:f6:72:7c:0c:93:71:
ec:33:61:85:6d:4b:13:f9:bc:f5:95:f4:42:36:81:2c:2a:bd:
1b:4a:2c:9c:00:d1:0b:97:fd:19:d1:ae:f8:16:09:78:77:48:
49:ce:4c:7d:df:16:83:65:bb:07:3c:b3:83:7e:26:5d:99:cc:
e7:e2:a0:73:c8:39:3c:65:66:43:a6:6b:f1:5d:c0:b0:f5:6e:
8d:bd:12:37:d3:60:a0:e5:55:6b:d2:06:bf:1a:50:ef:c1:69:
56:94:a3:c8:1c:01:4a:b3:e6:92:e6:a7:4f:4b:2c:bf:7c:4d:
68:ab:be:0b:73:1f:33:2d:85:39:a6:c3:6a:91:c9:e9:29:4a:
c1:17:5e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org