Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3133322e39382e302f32342d3234203d3e203434323538.roa
File: 34352e3133322e39382e302f32342d3234203d3e203434323538.roa (raw, json)
Hash identifier: VKl8K2oXSiH0o6y1b0hzYlB/Aignd5HfRDp4eMXA4/M=
Subject key identifier: C3:CD:5C:64:26:E4:FD:5D:7B:4C:7B:6B:D3:20:B4:13:C3:3C:14:20
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 1B7AD7D280AF09366451934669E7AA2E315B7E2B
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3133322e39382e302f32342d3234203d3e203434323538.roa
Signing time: Sat 29 Apr 2023 16:12:13 +0000
ROA not before: Sat 29 Apr 2023 16:07:13 +0000
ROA not after: Sat 27 Apr 2024 16:12:13 +0000
asID: 44258
IP address blocks: 45.132.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:7a:d7:d2:80:af:09:36:64:51:93:46:69:e7:aa:2e:31:5b:7e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 16:07:13 2023 GMT
Not After : Apr 27 16:12:13 2024 GMT
Subject: CN=C3CD5C6426E4FD5D7B4C7B6BD320B413C33C1420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:c7:3e:b8:4a:8e:8c:f1:59:5f:7b:59:3a:
12:5e:68:97:92:6d:70:47:39:0b:c5:d2:48:e3:99:
36:5f:45:89:ff:e5:7c:4b:8f:c0:7d:41:0f:a4:29:
bd:da:41:50:57:b0:fb:34:1c:fa:ba:8e:66:94:b8:
53:18:86:f3:9b:9d:de:33:c5:7f:e9:93:e0:23:09:
35:18:cb:53:94:ea:4f:2e:bd:b6:d7:3f:f1:15:72:
3c:5c:9b:7a:35:bb:64:69:e0:2d:40:b6:d1:c7:63:
05:cf:07:d4:7b:a1:f2:f8:5d:3e:32:a9:fa:fe:36:
72:d1:20:53:e3:89:ca:9e:f9:c8:86:69:31:e7:24:
18:38:2b:50:df:68:e0:b2:ed:cb:d8:c1:d3:2b:85:
ce:eb:e2:f9:b0:71:94:eb:4e:98:53:b9:e2:98:60:
34:9a:da:64:d8:d8:f5:39:a4:0e:d5:86:c5:f9:f6:
2f:31:67:17:d5:66:78:f0:44:f0:da:a4:20:f9:44:
fd:1d:ba:17:0f:cc:5a:ae:c0:cd:07:9b:cf:be:14:
24:d1:28:9a:7b:f9:eb:4a:e3:a8:57:4e:9b:72:10:
f2:36:c7:2d:78:7f:cb:e9:f5:57:cd:55:7e:1b:2c:
72:f0:83:9a:71:5e:4d:8f:e1:09:79:53:48:fa:85:
83:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CD:5C:64:26:E4:FD:5D:7B:4C:7B:6B:D3:20:B4:13:C3:3C:14:20
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3133322e39382e302f32342d3234203d3e203434323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a8:54:27:08:c0:9c:2f:cf:ea:5c:1a:10:f4:f8:6e:4b:06:
ce:f5:e4:2b:a9:f1:7a:92:6b:fe:49:ae:ba:7b:a7:8c:f6:4d:
3d:b4:ed:42:3f:2d:62:b8:ee:06:b8:f3:8d:fe:20:03:0f:65:
2d:c5:ec:67:70:2b:0d:36:7e:33:f7:b8:24:26:d9:3b:f7:e5:
b1:4b:b7:b4:35:1a:1c:1b:fb:2b:0e:6a:eb:56:36:ff:48:86:
e7:45:9e:3c:25:04:c4:25:8f:80:1d:3a:37:72:dc:76:77:d4:
f3:81:bc:69:67:74:df:4e:05:0b:be:59:7b:8d:ac:68:e5:31:
cd:a6:77:d2:d9:6d:cf:4c:37:de:33:9c:6f:11:95:76:96:c7:
5a:e0:f2:a4:ac:d6:bb:ac:a8:5f:46:25:d8:f9:e8:c8:21:aa:
d5:64:0c:bc:2f:d3:aa:7b:e1:13:59:7a:e1:ee:30:f7:87:4a:
d5:07:8b:d3:24:93:c3:08:57:96:71:a4:56:7b:c1:cc:85:65:
a0:05:cb:c9:87:0a:5e:17:3f:47:c5:c3:8e:14:ab:d8:42:8d:
d8:f2:20:e4:10:d8:47:8b:46:89:e8:30:4f:52:f3:e4:e3:c5:
f9:a9:c1:7d:ad:4a:a7:e8:f9:80:78:e0:05:72:92:de:7c:a6:
33:f4:74:3f
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUG3rX0oCvCTZkUZNGaeeqLjFbfiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY2ZjFhZjllOTE5YTk2NTMyNjgzMjdiOTg4MTRjYWZl
YjVjMGExMzAeFw0yMzA0MjkxNjA3MTNaFw0yNDA0MjcxNjEyMTNaMDMxMTAvBgNV
BAMTKEMzQ0Q1QzY0MjZFNEZENUQ3QjRDN0I2QkQzMjBCNDEzQzMzQzE0MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqtsc+uEqOjPFZX3tZOhJeaJeS
bXBHOQvF0kjjmTZfRYn/5XxLj8B9QQ+kKb3aQVBXsPs0HPq6jmaUuFMYhvObnd4z
xX/pk+AjCTUYy1OU6k8uvbbXP/EVcjxcm3o1u2Rp4C1AttHHYwXPB9R7ofL4XT4y
qfr+NnLRIFPjicqe+ciGaTHnJBg4K1DfaOCy7cvYwdMrhc7r4vmwcZTrTphTueKY
YDSa2mTY2PU5pA7VhsX59i8xZxfVZnjwRPDapCD5RP0duhcPzFquwM0Hm8++FCTR
KJp7+etK46hXTptyEPI2xy14f8vp9VfNVX4bLHLwg5pxXk2P4Ql5U0j6hYOvAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUw81cZCbk/V17THtr0yC0E8M8FCAwHwYDVR0j
BBgwFoAU328a+ekZqWUyaDJ7mIFMr+tcChMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzAvREY2RjFBRjlFOTE5QTk2NTMyNjgzMjdCOTg4MTRDQUZFQjVDMEExMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyOGEtZWtacVdVeWFESjdtSUZNci10
Y0NoTS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzAvMzQzNTJlMzEzMzMyMmUzOTM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNDMyMzUzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2E
YjANBgkqhkiG9w0BAQsFAAOCAQEAAqhUJwjAnC/P6lwaEPT4bksGzvXkK6nxepJr
/kmuununjPZNPbTtQj8tYrjuBrjzjf4gAw9lLcXsZ3ArDTZ+M/e4JCbZO/flsUu3
tDUaHBv7Kw5q61Y2/0iG50WePCUExCWPgB06N3LcdnfU84G8aWd0304FC75Ze42s
aOUxzaZ30tltz0w33jOcbxGVdpbHWuDypKzWu6yoX0Yl2PnoyCGq1WQMvC/Tqnvh
E1l64e4w94dK1QeL0ySTwwhXlnGkVnvBzIVloAXLyYcKXhc/R8XDjhSr2EKN2PIg
5BDYR4tGiegwT1Lz5OPF+anBfa1Kp+j5gHjgBXKS3nymM/R0Pw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org