Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130372e302f32342d3234203d3e20333938343635.roa
File: 34352e3134362e3130372e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier: Pdz53Ia+w3WWxIddfnzVSNEf3nKDTG4zLUf9aBDeMEI=
Subject key identifier: F5:29:7A:F6:EE:F4:4B:D7:39:F7:B8:B1:EA:E9:6F:5D:5F:95:B3:D1
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 188F7189B029D0753B13AA9D41D73AFC42479F2E
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130372e302f32342d3234203d3e20333938343635.roa
Signing time: Sat 29 Apr 2023 09:29:14 +0000
ROA not before: Sat 29 Apr 2023 09:24:14 +0000
ROA not after: Sat 27 Apr 2024 09:29:14 +0000
asID: 398465
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:8f:71:89:b0:29:d0:75:3b:13:aa:9d:41:d7:3a:fc:42:47:9f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:24:14 2023 GMT
Not After : Apr 27 09:29:14 2024 GMT
Subject: CN=F5297AF6EEF44BD739F7B8B1EAE96F5D5F95B3D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f2:27:16:c5:8c:d1:a4:32:61:ae:8f:c6:74:
28:56:49:aa:9a:a6:2e:f4:f8:65:6a:2c:11:f2:5d:
8a:fa:82:ba:b5:d4:d3:d2:d0:38:b4:57:d4:2c:cb:
92:8d:7f:c6:c2:c1:e7:eb:1e:50:45:6f:74:e9:82:
82:cd:a9:e4:fa:7e:a5:59:94:70:91:92:1a:c9:f3:
8b:73:e4:53:21:f1:02:09:88:cd:36:f0:1a:9e:23:
77:28:f4:22:6b:8c:d9:88:01:5d:4b:a9:8d:e6:50:
1f:e0:9c:bb:01:45:64:9b:8a:3e:e3:d1:0c:70:e0:
3f:cf:fc:47:bb:a3:a5:52:df:1e:96:4b:b4:9b:7c:
e2:92:dd:45:3e:ea:27:76:f6:3e:35:7c:45:24:bf:
c4:cf:f0:af:2f:d0:12:34:cb:ab:5e:20:36:e6:7d:
ca:47:b5:ea:52:7e:50:77:96:78:a5:0f:26:97:d8:
84:22:58:83:07:6b:f7:5a:2a:68:1f:d6:94:c0:e7:
12:f7:9b:13:b7:1c:68:72:bb:6c:da:ab:b6:f6:f4:
50:81:d3:47:a0:cd:30:a2:d1:7f:4c:64:1d:43:46:
5d:bc:b2:9a:9b:63:53:33:40:b5:42:9a:fb:5e:3e:
b2:3c:7f:0f:af:77:57:0f:34:8c:d0:de:35:ad:1e:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:29:7A:F6:EE:F4:4B:D7:39:F7:B8:B1:EA:E9:6F:5D:5F:95:B3:D1
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130372e302f32342d3234203d3e20333938343635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ec:01:5d:b4:d9:8e:c4:e0:51:7b:6a:f5:82:58:84:a9:2e:
17:e5:f9:80:a8:92:e0:28:f5:44:2e:14:0f:50:0e:77:9c:69:
fa:2a:60:28:4b:66:c3:fe:65:48:87:24:5f:dc:08:1e:5b:67:
cb:28:b8:7e:d7:d1:79:4e:99:ba:3a:e6:d5:a1:c3:20:fd:79:
44:db:6d:ad:62:f2:c2:4b:91:80:31:0a:7e:eb:b4:54:97:a6:
9d:28:97:ec:7f:83:95:8c:6d:68:7c:a2:59:56:e7:33:71:11:
ce:83:f5:08:32:25:b5:54:ab:e3:f8:aa:b9:11:6e:56:8b:32:
7b:0c:7b:24:4a:2a:d9:56:ca:a8:27:03:d9:37:84:b7:f3:12:
07:f5:d2:cc:c4:e7:80:40:b3:d7:55:45:4e:99:e3:44:b9:2c:
35:76:49:ba:11:fe:98:97:9d:29:e3:9f:c8:de:ad:d9:df:10:
3b:4c:f8:65:52:35:1c:d2:e3:1b:2d:87:5e:d1:c8:75:63:dc:
03:e9:9c:19:c1:46:61:84:01:4d:30:c6:c4:b2:eb:21:32:b0:
19:3c:a9:56:89:54:05:58:39:a5:16:c0:49:6f:d7:0f:46:ba:
cf:d0:9a:6e:ff:ac:4d:c5:64:71:ba:83:5c:b8:8e:53:07:11:
ee:fc:1a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:36 2025 by rpki-client