Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130372e302f32342d3234203d3e203430363736.roa
File: 34352e3134362e3130372e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier: VQgzWoDNX0CbrNMttuWeLxCS1UhiW5kxzERMfVl0oBg=
Subject key identifier: 82:12:28:70:F4:B5:8A:A5:00:67:36:7F:94:24:41:82:4D:10:DF:6E
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 5638519E169E5C3A6369C5E8586950469A1A23A6
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130372e302f32342d3234203d3e203430363736.roa
Signing time: Sat 29 Apr 2023 09:29:23 +0000
ROA not before: Sat 29 Apr 2023 09:24:23 +0000
ROA not after: Sat 27 Apr 2024 09:29:23 +0000
asID: 40676
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:38:51:9e:16:9e:5c:3a:63:69:c5:e8:58:69:50:46:9a:1a:23:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:24:23 2023 GMT
Not After : Apr 27 09:29:23 2024 GMT
Subject: CN=82122870F4B58AA50067367F942441824D10DF6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:a6:27:ee:22:b9:55:c0:7b:c0:54:8c:fd:
3d:ec:91:fc:6d:bb:b0:90:bc:55:9d:ff:9e:a3:e4:
a5:3a:42:18:7a:47:da:c4:89:62:d1:f5:83:ea:6d:
23:e7:3e:9e:91:ea:06:36:b6:a5:51:12:a2:87:5d:
05:7a:97:9e:4d:cb:eb:12:eb:42:02:96:fc:3c:fd:
03:78:ec:ae:78:70:95:a9:15:fc:25:80:07:ad:c7:
48:ee:bf:cd:de:80:42:2b:32:c7:42:76:1e:df:2a:
ad:53:25:e0:c6:c9:bb:d1:5f:ae:b8:1e:ec:ff:8a:
53:3d:68:1e:f0:7a:33:27:8a:62:e8:54:94:35:f1:
94:c4:82:76:71:9d:25:26:7a:3b:04:21:6c:0a:13:
d7:d9:82:9a:52:d2:8b:b8:e3:e8:f0:77:f0:3c:2a:
67:a1:ee:ce:be:ff:ef:22:ef:d9:f4:29:87:0e:10:
6e:25:e0:bf:73:a6:22:db:f8:3f:cc:3d:3e:37:c0:
74:00:12:0b:77:81:be:05:79:1a:4e:ee:3c:d9:ce:
d4:4e:d2:4c:ae:ec:f2:b0:c6:6b:8c:78:54:ea:5c:
ea:a5:d1:dc:5f:70:86:6b:2a:21:f3:94:30:85:ee:
19:01:af:8d:c8:55:95:71:4c:8f:86:d9:ed:28:5b:
9e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:12:28:70:F4:B5:8A:A5:00:67:36:7F:94:24:41:82:4D:10:DF:6E
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130372e302f32342d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:f0:d8:e2:67:2d:8e:4e:61:97:af:bb:17:0a:8f:61:fb:13:
3f:2d:9c:06:00:a5:fa:d7:7f:01:a0:8d:1a:9a:eb:96:30:7a:
61:3a:ce:48:bf:3a:d2:9a:9f:41:d7:f0:54:2a:67:bd:47:63:
90:ad:df:6d:37:4b:0c:48:24:04:9f:01:49:c3:97:24:6f:99:
c9:8a:1c:d0:ec:ca:93:c3:64:32:03:27:13:51:b1:b5:45:2f:
f8:1b:ad:a0:f1:c0:eb:cc:72:ee:d3:bf:cd:36:9a:0f:ab:b1:
74:59:11:93:95:76:b0:c4:1e:15:30:24:17:bf:c7:02:df:20:
ce:e1:22:cc:f4:a7:c2:de:37:9d:b6:45:42:68:2a:99:62:92:
ed:8f:1f:d7:dd:bb:08:e0:89:28:13:e5:4d:92:fc:d5:6d:dd:
6a:d8:7e:1e:e4:1f:7d:f5:b2:a4:21:d4:f6:1e:be:0d:c1:73:
2c:3d:f8:5a:26:f5:ab:f1:2f:31:8a:bf:7d:39:90:b6:69:5b:
64:43:b4:67:3b:f6:67:7a:02:9c:04:84:ee:18:67:3b:86:fa:
f8:32:6a:0b:bd:bc:2f:83:30:33:71:dc:61:12:5a:3e:58:81:
fb:15:70:39:07:d4:d8:4f:65:8e:cd:de:8e:4d:be:c1:da:81:
d2:54:52:4f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUVjhRnhaeXDpjacXoWGlQRpoaI6YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY2ZjFhZjllOTE5YTk2NTMyNjgzMjdiOTg4MTRjYWZl
YjVjMGExMzAeFw0yMzA0MjkwOTI0MjNaFw0yNDA0MjcwOTI5MjNaMDMxMTAvBgNV
BAMTKDgyMTIyODcwRjRCNThBQTUwMDY3MzY3Rjk0MjQ0MTgyNEQxMERGNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLUaYn7iK5VcB7wFSM/T3skfxt
u7CQvFWd/56j5KU6Qhh6R9rEiWLR9YPqbSPnPp6R6gY2tqVREqKHXQV6l55Ny+sS
60IClvw8/QN47K54cJWpFfwlgAetx0juv83egEIrMsdCdh7fKq1TJeDGybvRX664
Huz/ilM9aB7wejMnimLoVJQ18ZTEgnZxnSUmejsEIWwKE9fZgppS0ou44+jwd/A8
Kmeh7s6+/+8i79n0KYcOEG4l4L9zpiLb+D/MPT43wHQAEgt3gb4FeRpO7jzZztRO
0kyu7PKwxmuMeFTqXOql0dxfcIZrKiHzlDCF7hkBr43IVZVxTI+G2e0oW57zAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUghIocPS1iqUAZzZ/lCRBgk0Q324wHwYDVR0j
BBgwFoAU328a+ekZqWUyaDJ7mIFMr+tcChMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzAvREY2RjFBRjlFOTE5QTk2NTMyNjgzMjdCOTg4MTRDQUZFQjVDMEExMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyOGEtZWtacVdVeWFESjdtSUZNci10
Y0NoTS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzAvMzQzNTJlMzEzNDM2MmUzMTMw
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzYzNzM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LZJrMA0GCSqGSIb3DQEBCwUAA4IBAQBv8NjiZy2OTmGXr7sXCo9h+xM/LZwGAKX6
138BoI0amuuWMHphOs5IvzrSmp9B1/BUKme9R2OQrd9tN0sMSCQEnwFJw5ckb5nJ
ihzQ7MqTw2QyAycTUbG1RS/4G62g8cDrzHLu07/NNpoPq7F0WRGTlXawxB4VMCQX
v8cC3yDO4SLM9KfC3jedtkVCaCqZYpLtjx/X3bsI4IkoE+VNkvzVbd1q2H4e5B99
9bKkIdT2Hr4NwXMsPfhaJvWr8S8xir99OZC2aVtkQ7RnO/ZnegKcBITuGGc7hvr4
MmoLvbwvgzAzcdxhElo+WIH7FXA5B9TYT2WOzd6OTb7B2oHSVFJP
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org