Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130372e302f32342d3234203d3e203232373733.roa
File: 34352e3134362e3130372e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier: CVwVIiC7SOfn78x0gAzE/mOxXWTarbeIBs2qNSdyCeI=
Subject key identifier: 16:BB:4F:62:6A:BF:BB:73:7E:35:45:F7:23:74:0A:A1:39:8E:43:68
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 7E6A6176B0065266C768CB608B52A1C40C6E9296
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130372e302f32342d3234203d3e203232373733.roa
Signing time: Sat 29 Apr 2023 09:29:06 +0000
ROA not before: Sat 29 Apr 2023 09:24:06 +0000
ROA not after: Sat 27 Apr 2024 09:29:06 +0000
asID: 22773
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:6a:61:76:b0:06:52:66:c7:68:cb:60:8b:52:a1:c4:0c:6e:92:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:24:06 2023 GMT
Not After : Apr 27 09:29:06 2024 GMT
Subject: CN=16BB4F626ABFBB737E3545F723740AA1398E4368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:44:7e:be:63:48:f3:e7:41:80:d3:a0:14:
d4:e0:91:9f:7a:89:7b:00:be:ef:96:49:ae:4f:ba:
86:37:0e:49:08:5d:d1:a2:06:a2:e3:ad:97:7d:4b:
2e:42:59:fa:3d:64:0c:af:33:e2:84:a7:5b:57:83:
74:e7:f3:53:7b:47:bd:ed:68:4a:2d:c8:7d:9f:c4:
7a:00:96:02:cd:64:84:1a:f2:41:f4:a1:91:8b:47:
e0:ba:04:59:0a:3e:36:f0:b2:d8:6c:61:19:9f:1d:
05:61:28:a6:46:06:a5:08:97:da:48:f6:df:96:59:
ca:1c:29:f2:5c:78:93:29:fd:dc:22:5c:78:74:d7:
35:e5:fd:f4:31:7e:04:82:e2:da:38:19:8b:c9:40:
ba:da:6d:c8:f7:f5:77:73:b0:95:e4:23:ca:06:b5:
0f:21:03:53:76:f6:42:d3:0a:21:6e:8d:5a:83:94:
39:2c:d1:ca:6d:43:fd:d3:9f:46:03:37:02:54:9b:
a8:32:2e:13:70:1f:a7:9a:ae:91:19:e4:2a:ed:d5:
ed:f3:7f:f3:7d:1b:84:54:1e:3b:03:6a:cf:e1:77:
12:a5:b5:46:aa:0b:20:33:e9:06:1a:e9:11:15:6b:
a7:7a:66:1d:e6:a2:39:25:a8:81:f1:4e:e3:fa:95:
61:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BB:4F:62:6A:BF:BB:73:7E:35:45:F7:23:74:0A:A1:39:8E:43:68
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130372e302f32342d3234203d3e203232373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
67:6c:a0:4d:89:c9:c9:3b:96:37:62:12:c1:2a:84:6a:4f:80:
21:23:38:91:1b:53:12:04:4a:93:61:c5:14:5e:72:5f:4c:9d:
4d:12:b5:54:ce:5f:c5:b2:e9:be:8c:e4:c3:74:c9:22:49:81:
2d:06:22:d3:02:e9:70:05:09:c9:7e:f2:2a:fd:ea:97:a4:67:
3c:08:5a:08:e8:06:51:89:c3:ed:ce:2f:b2:cd:2f:09:d1:81:
86:de:8c:b3:6c:23:84:ac:11:db:fc:ac:1f:33:c1:c6:80:c7:
62:fe:59:c2:cd:c2:d4:12:7b:f4:1d:d7:c6:5d:d2:ee:30:97:
06:de:d6:ce:5b:ee:65:48:2a:85:84:79:03:6a:d2:b5:4b:0b:
67:0e:30:57:f9:2a:68:8a:88:6a:8e:70:b1:4c:b7:9a:0c:a4:
11:c8:83:2f:1a:29:f3:da:eb:4c:84:36:ab:8e:9b:dc:74:45:
dd:be:2a:43:b3:70:e9:bf:3d:71:c9:4f:a0:d0:13:06:99:3c:
3f:ab:06:31:85:30:5b:21:f9:ca:93:6e:c1:a3:91:42:50:3f:
2c:46:6c:1d:39:bd:9d:73:28:c0:fb:48:85:05:9c:90:69:d5:
d0:28:b6:a0:97:9f:7f:3b:b2:3e:80:21:16:f7:5b:c3:9f:ce:
9e:eb:a1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org