Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130352e302f32342d3234203d3e203631333137.roa
File: 34352e3134362e3130352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: a1LodH1P1XsdT6fiQc10A6y05Ett6y807OShd4aMxsk=
Subject key identifier: CF:54:63:20:5B:34:0A:24:C2:E0:B3:76:DA:E2:F3:30:B2:63:76:43
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 4CE345A41E8572D24B0B4953FB256F941C7BB62D
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130352e302f32342d3234203d3e203631333137.roa
Signing time: Sat 29 Apr 2023 09:31:06 +0000
ROA not before: Sat 29 Apr 2023 09:26:06 +0000
ROA not after: Sat 27 Apr 2024 09:31:06 +0000
asID: 61317
IP address blocks: 45.146.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e3:45:a4:1e:85:72:d2:4b:0b:49:53:fb:25:6f:94:1c:7b:b6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:26:06 2023 GMT
Not After : Apr 27 09:31:06 2024 GMT
Subject: CN=CF5463205B340A24C2E0B376DAE2F330B2637643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:58:c6:58:e4:20:e1:9f:67:f8:06:8a:b9:00:
66:0f:04:0a:fd:b5:b1:5f:4e:05:a8:5f:7b:16:0b:
3c:01:da:42:37:23:84:a3:2b:a9:73:51:b4:0b:63:
3f:8e:eb:87:6b:b8:24:67:b2:c8:20:03:74:df:a2:
b3:a9:38:95:f5:77:21:48:3c:e0:12:24:2f:25:24:
a9:e2:cb:be:b2:bf:9d:27:83:76:32:56:4a:51:21:
47:11:5f:0d:f9:92:1f:c3:90:ae:c6:72:e1:56:f9:
6e:05:68:3d:d2:52:b5:05:2a:0a:cc:89:a7:45:0d:
c9:a5:11:13:11:3c:d2:47:e4:34:67:83:5f:5e:dc:
f1:e6:8d:1d:56:a9:42:ef:7e:ce:fe:f1:7b:ef:38:
bf:9d:ae:ca:8b:96:20:6d:41:a5:67:24:2f:74:d8:
d8:84:43:cf:5a:67:d2:38:f3:31:ec:3f:e5:e9:9b:
07:80:51:96:d7:17:77:f8:04:3d:c3:db:e0:a3:ae:
cb:35:54:4f:8a:f9:32:62:cc:d4:2a:07:f7:46:91:
3e:de:a9:2b:09:a4:66:cd:a0:54:a0:17:07:25:e1:
2a:c3:13:16:72:f9:85:8a:ed:bf:72:f0:9a:74:35:
65:34:97:f3:ab:0c:38:fe:a5:a2:3d:96:6b:2a:d4:
aa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:54:63:20:5B:34:0A:24:C2:E0:B3:76:DA:E2:F3:30:B2:63:76:43
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130352e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.105.0/24
Signature Algorithm: sha256WithRSAEncryption
51:3a:97:68:ee:98:a5:55:61:0a:fa:b6:b4:1d:50:60:62:57:
74:c6:ca:bb:e7:46:fc:ee:57:87:18:ef:23:d8:3e:39:10:41:
59:12:ff:9c:f6:0a:b6:60:d7:e2:fc:13:fa:3d:b3:ea:9f:14:
6f:20:93:4a:19:e4:9f:38:73:bf:60:7b:fe:5f:a8:8e:ba:5d:
eb:bc:00:6f:4d:38:ab:f8:b8:d4:c7:94:1b:75:c4:9f:37:2e:
2c:e1:a3:39:d3:2b:18:7d:de:81:b1:b3:3d:fc:8a:d7:ab:09:
1a:03:59:85:c8:03:4a:77:38:ab:66:52:ce:0e:75:63:10:4d:
b0:ba:d1:01:8b:1a:ed:8b:a7:97:28:fd:2c:15:16:61:81:c6:
ba:28:91:9c:b1:c9:60:71:72:b1:e2:a3:6a:04:0f:15:a9:32:
02:6a:76:e8:18:20:a1:c4:04:d4:1d:63:11:03:60:07:e0:9e:
6c:23:1d:5a:c2:e1:23:4b:98:b3:b4:d4:48:b5:51:09:52:c4:
7a:a7:dd:c3:f2:01:d4:17:22:37:85:49:68:46:bf:70:93:fd:
09:8a:f2:68:29:66:00:1b:72:b3:68:d6:a8:e1:b0:04:51:12:
09:e9:a4:9c:47:e4:49:17:b8:57:a9:7b:20:8b:66:c0:13:10:
f1:f7:0d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org