Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3133322e39392e302f32342d3234203d3e20313437313736.roa
File: 34352e3133322e39392e302f32342d3234203d3e20313437313736.roa (raw, json)
Hash identifier: Gn7NOq/onbcBzgsGulrNQG8mxex7xPO0CcQGkNKh/yY=
Subject key identifier: AE:65:3C:3B:1D:F2:2B:6E:E1:67:CC:5B:49:39:BD:FF:17:E6:03:AF
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 5B5C135167DAD556B5FB9B8BEB3F4A1E6D06269D
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3133322e39392e302f32342d3234203d3e20313437313736.roa
Signing time: Sat 29 Apr 2023 09:30:42 +0000
ROA not before: Sat 29 Apr 2023 09:25:42 +0000
ROA not after: Sat 27 Apr 2024 09:30:42 +0000
asID: 147176
IP address blocks: 45.132.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:5c:13:51:67:da:d5:56:b5:fb:9b:8b:eb:3f:4a:1e:6d:06:26:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:25:42 2023 GMT
Not After : Apr 27 09:30:42 2024 GMT
Subject: CN=AE653C3B1DF22B6EE167CC5B4939BDFF17E603AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:74:a7:74:80:15:f9:a2:02:8d:09:a3:2e:d4:
52:54:d1:1b:e0:ae:50:89:7f:c3:54:d7:bb:a8:c2:
7e:dc:ce:71:b6:0a:a9:48:f4:90:86:95:da:ce:79:
4f:c9:d8:b9:66:ca:1e:1a:f4:66:5a:7f:0c:db:9f:
90:3a:a3:4c:3c:e3:40:27:c4:72:fd:58:ee:33:ef:
a7:f2:ff:42:c1:75:3d:34:c8:d3:ff:ef:8d:c4:ad:
0a:6d:2b:b2:f1:fc:f1:9a:b2:03:31:93:b0:13:6e:
ae:14:73:13:bb:fd:7c:a6:2b:a2:35:2a:eb:2c:0c:
ac:1f:1b:fa:bf:88:86:0a:c0:ba:0c:af:19:11:0b:
c2:c0:0f:90:42:56:bf:53:af:da:50:94:07:96:af:
32:50:89:06:5a:06:d0:a4:a8:c7:17:5c:94:97:46:
fd:8d:cd:ff:50:9b:f6:a5:8a:75:6c:04:7d:04:7b:
59:35:a2:b0:5e:a9:ef:4a:88:f4:41:c3:cc:a1:ed:
e1:5f:73:ca:7a:ef:18:1c:f8:ed:54:5a:63:9a:eb:
03:d4:58:37:11:f3:21:41:4d:58:9f:bb:10:46:75:
66:02:03:33:4a:d6:4e:dc:ec:58:9c:be:ea:52:79:
e3:70:7f:07:51:85:68:a8:ae:fe:db:7e:5d:74:c2:
ca:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:65:3C:3B:1D:F2:2B:6E:E1:67:CC:5B:49:39:BD:FF:17:E6:03:AF
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3133322e39392e302f32342d3234203d3e20313437313736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.99.0/24
Signature Algorithm: sha256WithRSAEncryption
52:5a:12:9a:1d:72:a3:b4:d2:5c:1e:c1:28:82:b3:ad:f0:31:
d8:d0:f7:bf:1d:16:4a:0d:e7:56:b1:65:35:f0:b6:77:98:0b:
49:ee:1e:07:bf:d7:f1:7f:20:47:4e:39:ba:27:16:8c:49:77:
6a:b3:e6:b8:3c:86:f2:08:a5:34:e6:8b:ec:21:d9:bc:ff:79:
ba:ec:bf:15:10:4a:f7:ae:78:4c:6b:8b:51:2d:16:bc:0d:bb:
1a:ef:28:6d:c3:22:ac:05:c1:8b:46:dd:99:82:41:f9:06:6d:
01:6f:b4:0f:b5:fe:f7:4e:18:4b:28:72:0b:cd:b6:7e:83:0c:
65:be:d1:d5:a6:b1:5b:db:d4:75:f1:07:8e:ce:30:88:82:6e:
69:7c:39:f6:e8:4d:25:43:27:51:74:17:30:b0:ea:7b:16:49:
26:f0:33:00:96:67:d5:f1:a0:ad:7d:d0:97:2c:e5:38:72:63:
a1:81:4c:34:38:25:48:59:0a:27:45:b2:41:77:11:09:e1:57:
8f:2f:1d:ec:f3:a3:1e:88:4d:c1:d0:29:75:b7:3b:c9:e8:a2:
b2:40:22:bb:9b:12:64:e8:80:f1:6d:81:e5:91:b6:ce:d6:f1:
7d:88:87:aa:ff:36:29:63:05:25:ba:05:5f:d3:f9:bf:42:4a:
d5:3a:f3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org