Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130362e302f32342d3234203d3e20323034313135.roa
File: 34352e3134362e3130362e302f32342d3234203d3e20323034313135.roa (raw, json)
Hash identifier: UnlJDNtdHLFaJmr8ltdApJZFv82e9PRZY8FuobEYBVM=
Subject key identifier: E6:B6:55:44:54:D2:25:50:59:18:45:C6:41:96:E5:8C:35:BD:CA:7F
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 0EEBAF63720838C853F291502242CB9C8C1D9F51
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130362e302f32342d3234203d3e20323034313135.roa
Signing time: Sat 29 Apr 2023 09:31:20 +0000
ROA not before: Sat 29 Apr 2023 09:26:20 +0000
ROA not after: Sat 27 Apr 2024 09:31:20 +0000
asID: 204115
IP address blocks: 45.146.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:eb:af:63:72:08:38:c8:53:f2:91:50:22:42:cb:9c:8c:1d:9f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:26:20 2023 GMT
Not After : Apr 27 09:31:20 2024 GMT
Subject: CN=E6B6554454D22550591845C64196E58C35BDCA7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:80:84:65:d2:d5:5a:82:95:34:82:a1:37:
6e:ef:17:f1:c0:cb:31:31:54:72:47:60:86:40:6d:
78:74:a7:f5:f4:c7:1f:f7:a5:0b:76:80:3e:f5:6f:
c9:22:e5:38:df:60:83:e9:41:7f:0a:a7:da:c4:40:
f8:42:6c:31:87:73:98:04:c9:07:06:cf:a6:7e:8d:
0a:8b:ac:76:1a:4c:d2:ce:32:9c:38:a9:06:f0:f6:
1a:b0:e7:2d:4e:ba:5f:ea:22:38:57:01:b6:23:1f:
ba:6f:d3:e9:9e:f5:57:9e:1b:00:23:91:34:8f:18:
83:67:6a:82:4d:f7:7b:4f:53:e9:0e:8a:14:2a:e5:
80:b5:37:a8:67:56:2a:fc:c9:da:55:f4:ef:fa:3e:
7f:53:13:a1:8d:71:c5:86:f8:c0:bf:cf:69:29:34:
b9:ff:e4:38:72:b8:00:4d:94:18:1b:12:9b:3c:8e:
22:fb:d4:c8:4f:da:0c:84:6d:a7:d4:4f:98:fb:59:
31:54:7c:70:e7:3a:73:b8:04:00:53:20:35:4e:3b:
81:dd:4c:0d:98:83:eb:81:ae:da:16:72:83:6f:83:
67:49:a1:9f:4d:71:47:d6:a5:3d:9b:0e:a4:a1:6e:
48:a2:d2:51:d1:25:4f:d7:8b:57:f9:0c:20:b0:77:
d3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B6:55:44:54:D2:25:50:59:18:45:C6:41:96:E5:8C:35:BD:CA:7F
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130362e302f32342d3234203d3e20323034313135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.106.0/24
Signature Algorithm: sha256WithRSAEncryption
76:21:e6:b3:fa:91:5a:72:e9:40:10:a1:31:bd:39:62:47:f4:
26:03:de:23:21:a6:ec:ba:c4:c7:72:cc:9c:56:71:79:a5:ba:
19:9a:4d:29:28:0a:10:d5:b8:fb:18:86:8a:1e:f4:72:15:86:
38:32:e9:3d:34:8d:44:53:ee:a6:8a:80:38:1b:80:e4:30:a9:
87:9b:4c:ad:f9:a1:9b:fd:ed:ef:c2:d3:82:68:0f:a3:e9:20:
fd:a0:2c:e1:0d:6b:3a:90:8a:c3:8c:97:a7:97:1e:0e:89:5a:
bf:07:8e:30:86:e9:0e:fa:3f:58:b9:f3:93:a9:eb:0b:37:5e:
3f:65:69:79:fa:9d:6c:54:b3:e4:7d:b4:d5:39:7d:38:1b:a1:
0e:c4:75:14:82:0f:23:8e:3b:16:43:a5:71:31:fd:95:54:94:
2d:4c:17:4f:c3:f9:91:5b:9b:f8:19:df:2b:f1:f7:3d:1d:32:
3a:62:6c:2b:92:81:6d:0e:25:43:cc:61:3e:84:96:92:8a:65:
90:42:20:04:c8:54:e7:6d:f7:4d:9b:8f:d8:b1:53:5c:01:8b:
8b:9f:57:0b:69:ab:39:92:18:50:ba:14:90:31:94:2f:1d:bb:
d4:51:8e:77:70:f8:df:db:5d:de:b4:fa:ea:f8:4a:16:d9:20:
8b:fb:c8:c3
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUDuuvY3IIOMhT8pFQIkLLnIwdn1EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY2ZjFhZjllOTE5YTk2NTMyNjgzMjdiOTg4MTRjYWZl
YjVjMGExMzAeFw0yMzA0MjkwOTI2MjBaFw0yNDA0MjcwOTMxMjBaMDMxMTAvBgNV
BAMTKEU2QjY1NTQ0NTREMjI1NTA1OTE4NDVDNjQxOTZFNThDMzVCRENBN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uYCEZdLVWoKVNIKhN27vF/HA
yzExVHJHYIZAbXh0p/X0xx/3pQt2gD71b8ki5TjfYIPpQX8Kp9rEQPhCbDGHc5gE
yQcGz6Z+jQqLrHYaTNLOMpw4qQbw9hqw5y1Oul/qIjhXAbYjH7pv0+me9VeeGwAj
kTSPGINnaoJN93tPU+kOihQq5YC1N6hnVir8ydpV9O/6Pn9TE6GNccWG+MC/z2kp
NLn/5DhyuABNlBgbEps8jiL71MhP2gyEbafUT5j7WTFUfHDnOnO4BABTIDVOO4Hd
TA2Yg+uBrtoWcoNvg2dJoZ9NcUfWpT2bDqShbkii0lHRJU/Xi1f5DCCwd9PjAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU5rZVRFTSJVBZGEXGQZbljDW9yn8wHwYDVR0j
BBgwFoAU328a+ekZqWUyaDJ7mIFMr+tcChMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzAvREY2RjFBRjlFOTE5QTk2NTMyNjgzMjdCOTg4MTRDQUZFQjVDMEExMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyOGEtZWtacVdVeWFESjdtSUZNci10
Y0NoTS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzAvMzQzNTJlMzEzNDM2MmUzMTMw
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzMTMxMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtkmowDQYJKoZIhvcNAQELBQADggEBAHYh5rP6kVpy6UAQoTG9OWJH9CYD3iMh
puy6xMdyzJxWcXmluhmaTSkoChDVuPsYhooe9HIVhjgy6T00jURT7qaKgDgbgOQw
qYebTK35oZv97e/C04JoD6PpIP2gLOENazqQisOMl6eXHg6JWr8HjjCG6Q76P1i5
85Op6ws3Xj9laXn6nWxUs+R9tNU5fTgboQ7EdRSCDyOOOxZDpXEx/ZVUlC1MF0/D
+ZFbm/gZ3yvx9z0dMjpibCuSgW0OJUPMYT6ElpKKZZBCIATIVOdt902bj9ixU1wB
i4ufVwtpqzmSGFC6FJAxlC8du9RRjndw+N/bXd60+ur4ShbZIIv7yMM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org