Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130372e302f32342d3234203d3e2037303138.roa
File: 34352e3134362e3130372e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: o1gMzb9Y0jwH66CJki7LAn8D9Os1AV5slOu4GkC07JM=
Subject key identifier: 08:61:D6:55:3C:34:B1:4D:2E:7D:FD:CE:CF:DC:7B:0D:1C:85:17:AC
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 20426D567E7457F85E4174B1529DAC1796A9CD31
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130372e302f32342d3234203d3e2037303138.roa
Signing time: Sat 29 Apr 2023 09:27:27 +0000
ROA not before: Sat 29 Apr 2023 09:22:27 +0000
ROA not after: Sat 27 Apr 2024 09:27:27 +0000
asID: 7018
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:42:6d:56:7e:74:57:f8:5e:41:74:b1:52:9d:ac:17:96:a9:cd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:22:27 2023 GMT
Not After : Apr 27 09:27:27 2024 GMT
Subject: CN=0861D6553C34B14D2E7DFDCECFDC7B0D1C8517AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a3:9b:e9:ca:a9:2c:78:89:ed:84:01:3b:cc:
3e:50:b7:53:36:9e:43:8c:7c:54:39:b1:d6:20:25:
2b:48:79:3f:ed:7b:f5:22:fd:a9:35:b9:f3:02:c8:
5c:f0:44:ec:b1:d9:2a:ee:36:c3:32:92:6c:29:ca:
38:ac:a6:46:68:f7:bd:21:7c:68:45:be:41:73:c8:
0d:ae:f6:bc:cc:60:4a:83:e3:36:0c:b4:dc:a4:a5:
6a:0c:ef:8d:78:ce:3b:79:da:df:0a:9b:7b:da:2e:
ac:b2:c8:e3:3a:06:43:f4:6a:7a:36:f0:ac:ab:6f:
36:71:63:c8:af:09:01:64:5c:79:5e:f7:03:83:a9:
3b:ef:b9:ca:9e:9a:52:6a:95:25:27:e7:9f:cb:81:
d4:82:a6:eb:4e:64:b4:b9:d9:cf:c2:7e:5a:c1:95:
46:c6:13:47:41:33:1f:b1:06:c2:cd:7f:f7:f6:8c:
a7:62:0a:3a:3d:25:b4:c1:ff:3d:e1:ab:49:aa:37:
bf:fa:80:cd:22:8a:51:46:13:fd:a2:86:4c:5e:69:
c1:21:df:79:c5:6f:d7:20:76:6e:22:13:c1:7d:ef:
ec:5f:9f:11:f6:71:91:b3:42:7e:7c:5b:52:26:24:
27:40:ce:2b:df:26:65:40:b4:df:f4:6d:6d:cd:92:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:61:D6:55:3C:34:B1:4D:2E:7D:FD:CE:CF:DC:7B:0D:1C:85:17:AC
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3134362e3130372e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:91:b4:8e:2a:22:05:b9:aa:38:f8:bc:8a:23:e1:a1:67:4f:
24:e9:83:c5:d9:83:16:7d:89:60:90:e5:77:c1:7c:56:a6:5b:
de:14:d8:d0:1a:ed:7d:4a:a1:90:ee:b1:f1:1a:38:58:f0:58:
8e:14:1a:28:c7:98:9b:cd:0c:25:bf:bb:9c:7b:61:1b:ff:03:
92:cd:0c:95:5f:be:9b:7a:92:2f:52:b0:d4:39:02:a8:cd:be:
9c:d0:11:58:66:e8:97:09:4c:96:69:ae:32:a0:4a:9f:56:c0:
e2:86:e6:3c:13:9b:c0:ee:01:3c:f4:74:18:f1:14:33:3a:53:
c1:90:9b:37:8f:c6:37:42:17:18:3d:31:c3:f7:31:ed:5c:c3:
5d:d1:85:2a:88:9c:24:b7:2f:e1:52:25:85:30:44:9b:e9:d9:
25:63:87:f5:41:ec:9d:dd:2a:e3:2a:ea:81:7c:a7:38:b8:06:
42:66:b4:c4:1c:ff:15:2a:d9:35:65:42:9d:3f:1d:3c:47:04:
9b:16:89:b1:4a:16:79:a2:a3:2a:9f:6f:3b:74:1a:a5:34:24:
d2:d6:41:d1:56:10:39:f5:d3:e2:92:91:cb:ce:11:9d:e3:97:
75:ef:73:43:4f:92:ac:d2:52:69:86:98:52:4c:f8:e9:e5:31:
2b:9b:f3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org