Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130342e302f32342d3234203d3e20323039303433.roa
File: 34352e3134362e3130342e302f32342d3234203d3e20323039303433.roa (raw, json)
Hash identifier: WKkeWjB2iidMBwmtK4t9kWLB4E51jbPh/id+GXb2KSg=
Subject key identifier: E0:D8:5C:4D:21:E5:80:7E:67:BE:5D:63:D1:1F:8C:39:09:F9:47:6B
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 7E7FBF2ED8321BAA1C07E0B8531DA1C8D2CC604E
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130342e302f32342d3234203d3e20323039303433.roa
Signing time: Sat 29 Apr 2023 09:37:27 +0000
ROA not before: Sat 29 Apr 2023 09:32:27 +0000
ROA not after: Sat 27 Apr 2024 09:37:27 +0000
asID: 209043
IP address blocks: 45.146.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:7f:bf:2e:d8:32:1b:aa:1c:07:e0:b8:53:1d:a1:c8:d2:cc:60:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:32:27 2023 GMT
Not After : Apr 27 09:37:27 2024 GMT
Subject: CN=E0D85C4D21E5807E67BE5D63D11F8C3909F9476B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:c6:69:ce:83:7e:18:5a:98:f7:b7:f3:82:
03:c8:1c:7e:92:79:a0:ae:fc:6d:41:d2:d7:66:9b:
70:ef:87:ca:23:bc:1c:b9:c9:38:89:19:49:52:c7:
67:e5:45:1f:15:75:76:0a:88:a7:ed:50:eb:a3:11:
95:b7:6d:a8:58:27:33:8a:c3:7a:a3:9a:45:4e:a5:
c9:ff:16:18:be:93:6c:19:c8:5e:15:fa:e3:b3:d6:
8a:d3:61:f0:78:0c:f0:59:37:92:66:4d:5a:ed:fd:
e2:df:78:f5:6a:30:6d:7e:14:c8:83:a6:e0:c8:27:
d5:24:01:cf:3c:c6:2c:ba:fc:82:e6:e4:3a:4a:44:
ca:e9:51:92:e5:ad:24:3a:da:66:f2:a8:1d:42:fa:
8d:be:42:db:a2:29:f0:9f:f3:b4:9d:07:70:f0:64:
68:eb:fc:39:fb:5a:17:91:4d:b6:6c:b4:3d:96:17:
97:98:f1:e3:c0:a7:f4:70:a0:8e:28:2b:b6:70:ed:
6a:26:7e:e9:26:d2:73:aa:55:ee:47:ab:5f:bc:c7:
58:01:8e:cc:6a:09:78:33:43:c6:13:49:92:61:9b:
57:e8:79:24:53:11:8c:62:33:a5:45:8f:d2:a7:9f:
64:0d:a9:46:c2:6d:56:91:a7:f9:47:bb:c5:54:0f:
6f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D8:5C:4D:21:E5:80:7E:67:BE:5D:63:D1:1F:8C:39:09:F9:47:6B
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130342e302f32342d3234203d3e20323039303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.104.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:3b:62:e7:0c:5a:e9:48:b7:23:36:b9:7a:4f:af:96:2c:13:
22:60:30:45:62:84:ec:18:16:4d:4b:7d:78:d1:bf:84:1b:20:
17:54:a9:ba:f3:48:10:fa:73:b2:d7:c3:74:e3:88:3e:10:c7:
58:e1:5a:b2:90:5c:e4:fb:4c:82:4f:24:e3:1a:12:1f:35:67:
62:c0:f9:99:5c:59:b6:33:f3:40:f1:b7:ba:e6:86:91:13:6d:
92:08:4b:c0:59:c6:f8:2a:14:69:80:5f:0d:af:b3:42:6f:50:
3c:71:29:67:47:67:0b:25:c3:dc:1f:7a:ed:54:4a:9e:e8:18:
36:cc:de:05:ec:86:61:0c:d0:1c:0b:a2:b3:dc:c7:6d:8a:52:
70:f1:3a:97:b2:be:ff:b9:71:a4:c1:4f:01:e4:de:75:b6:d4:
e2:1b:0d:97:34:95:a1:e1:be:53:22:3d:6c:0e:1e:42:27:f2:
fe:1c:07:88:c2:bf:66:9b:ec:0a:9c:21:f4:a9:b2:93:5d:d1:
31:08:d7:73:22:d8:62:88:74:8f:af:4e:b0:a7:5a:cb:fd:8c:
6e:a3:2b:76:76:05:7f:4a:ca:4b:ea:9f:c6:ad:a3:48:82:75:
19:80:2d:ed:64:c5:eb:1c:63:b0:e2:dd:5e:59:a7:a2:eb:36:
a3:72:7b:09
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUfn+/LtgyG6ocB+C4Ux2hyNLMYE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY2ZjFhZjllOTE5YTk2NTMyNjgzMjdiOTg4MTRjYWZl
YjVjMGExMzAeFw0yMzA0MjkwOTMyMjdaFw0yNDA0MjcwOTM3MjdaMDMxMTAvBgNV
BAMTKEUwRDg1QzREMjFFNTgwN0U2N0JFNUQ2M0QxMUY4QzM5MDlGOTQ3NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvs8ZpzoN+GFqY97fzggPIHH6S
eaCu/G1B0tdmm3Dvh8ojvBy5yTiJGUlSx2flRR8VdXYKiKftUOujEZW3bahYJzOK
w3qjmkVOpcn/Fhi+k2wZyF4V+uOz1orTYfB4DPBZN5JmTVrt/eLfePVqMG1+FMiD
puDIJ9UkAc88xiy6/ILm5DpKRMrpUZLlrSQ62mbyqB1C+o2+QtuiKfCf87SdB3Dw
ZGjr/Dn7WheRTbZstD2WF5eY8ePAp/RwoI4oK7Zw7Womfukm0nOqVe5Hq1+8x1gB
jsxqCXgzQ8YTSZJhm1foeSRTEYxiM6VFj9Knn2QNqUbCbVaRp/lHu8VUD287AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU4NhcTSHlgH5nvl1j0R+MOQn5R2swHwYDVR0j
BBgwFoAU328a+ekZqWUyaDJ7mIFMr+tcChMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzAvREY2RjFBRjlFOTE5QTk2NTMyNjgzMjdCOTg4MTRDQUZFQjVDMEExMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyOGEtZWtacVdVeWFESjdtSUZNci10
Y0NoTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzAvMzQzNTJlMzEzNDM2MmUzMTMw
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzkzMDM0MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtkmgwDQYJKoZIhvcNAQELBQADggEBAH47YucMWulItyM2uXpPr5YsEyJgMEVi
hOwYFk1LfXjRv4QbIBdUqbrzSBD6c7LXw3TjiD4Qx1jhWrKQXOT7TIJPJOMaEh81
Z2LA+ZlcWbYz80Dxt7rmhpETbZIIS8BZxvgqFGmAXw2vs0JvUDxxKWdHZwslw9wf
eu1USp7oGDbM3gXshmEM0BwLorPcx22KUnDxOpeyvv+5caTBTwHk3nW21OIbDZc0
laHhvlMiPWwOHkIn8v4cB4jCv2ab7AqcIfSpspNd0TEI13Mi2GKIdI+vTrCnWsv9
jG6jK3Z2BX9Kykvqn8ato0iCdRmALe1kxescY7Di3V5Zp6LrNqNyewk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org