Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130352e302f32342d3234203d3e20323132323338.roa
File: 34352e3134362e3130352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: yYeKPGa1aEGhmxoP0vILzqrBChrXfuFQQWKHtx9HJ7M=
Subject key identifier: 30:82:78:96:44:FD:F2:FF:E0:9E:A3:57:AD:22:40:21:1B:43:03:26
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 2AC9EC143962F958BB3BBA57DE63340620716F62
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130352e302f32342d3234203d3e20323132323338.roa
Signing time: Sat 29 Apr 2023 09:30:55 +0000
ROA not before: Sat 29 Apr 2023 09:25:55 +0000
ROA not after: Sat 27 Apr 2024 09:30:55 +0000
asID: 212238
IP address blocks: 45.146.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c9:ec:14:39:62:f9:58:bb:3b:ba:57:de:63:34:06:20:71:6f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:25:55 2023 GMT
Not After : Apr 27 09:30:55 2024 GMT
Subject: CN=3082789644FDF2FFE09EA357AD2240211B430326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:44:89:2f:fe:06:b6:e4:62:b3:24:bf:d9:50:
e8:cb:42:b3:c8:ed:5c:01:3a:11:42:b5:0a:92:ec:
b4:11:95:17:d8:1c:c7:4c:2c:a6:fe:b3:42:8a:38:
2a:1e:13:01:12:eb:a3:73:6f:5d:1c:21:5a:6e:5c:
d6:5b:d4:f8:3e:47:ab:71:c8:db:4a:11:3a:67:bd:
ca:a7:74:1f:f7:26:f2:aa:3f:27:87:41:aa:0e:d6:
89:4b:a0:98:2e:d7:7c:4f:76:e2:4c:d4:1a:96:42:
16:28:c4:be:cf:18:3e:92:c0:ef:06:37:78:6c:2d:
55:be:f3:f6:18:08:26:0c:a9:f9:3f:24:1e:17:91:
24:6d:51:ad:45:42:4a:f1:61:a9:07:f4:6a:2c:f7:
c3:d5:31:4c:14:f3:29:37:f9:06:62:44:9f:1d:62:
01:3a:87:85:63:b5:9e:bc:13:49:90:34:76:bb:85:
0f:f8:bd:80:24:07:54:d7:c5:80:f2:bc:aa:45:d9:
ea:86:f7:c4:0a:43:7e:51:c0:b3:a6:e4:48:8c:85:
57:0d:98:2d:a6:5b:b4:31:e7:82:1e:3a:e5:40:42:
62:7a:61:cd:9c:9e:f3:23:28:d0:45:fc:c0:55:c1:
04:80:ab:7f:3e:e1:e3:65:fd:74:27:bd:0a:a8:fb:
bb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:82:78:96:44:FD:F2:FF:E0:9E:A3:57:AD:22:40:21:1B:43:03:26
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.105.0/24
Signature Algorithm: sha256WithRSAEncryption
88:48:c7:4f:33:1a:b2:14:bd:7f:51:9f:2b:3b:8d:03:03:6d:
0a:ad:57:af:4d:ca:75:af:a6:35:55:df:f7:37:80:89:2b:cd:
09:fc:49:45:b3:cd:24:91:ba:98:59:ab:ce:d7:c1:87:dd:ad:
f7:04:f0:ed:51:0e:99:30:f9:66:a8:13:e9:cf:b0:17:df:5e:
67:13:ae:1b:01:7d:bc:ba:6d:8a:32:a6:b7:39:32:77:29:1a:
03:71:ae:14:aa:19:0a:7a:9c:e9:4c:33:6a:41:df:60:af:93:
b8:0c:77:1a:b0:1f:d4:f2:2b:a7:66:e3:9a:cb:67:95:4a:71:
b9:1a:07:81:42:2e:1a:d3:da:49:85:f6:be:e9:4e:d6:9a:72:
af:22:b0:f7:0a:9d:e3:da:d0:fb:be:fe:66:60:b8:42:85:10:
02:e4:3d:2b:71:bf:4b:50:49:11:e8:8b:ef:71:73:3d:5a:26:
ad:03:ce:3a:77:8f:55:27:0b:a7:9d:4e:51:d8:c1:aa:b5:85:
e2:32:04:ad:d5:ee:f4:7c:cc:bd:d2:98:72:ec:b8:ea:cd:35:
0e:d4:80:8d:09:49:41:c1:6d:45:7f:67:0d:b0:3a:1c:65:5a:
c5:62:47:52:aa:4b:6d:bd:b4:9a:0b:c6:a8:b4:4d:d1:a5:22:
15:b4:96:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org