Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e38302e342e302f32342d3234203d3e20323132323338.roa
File: 34352e38302e342e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: Jm+PGjKAYyOzbIfy6d2gzRQTScXqC3bQpL8rQxwbEk4=
Subject key identifier: 4A:B0:48:EE:94:2A:09:37:2A:5E:2B:DC:B3:D4:62:AD:FD:E2:BB:B1
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 5892E7172F8BE55239601238B0A469A445FC9CBF
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e38302e342e302f32342d3234203d3e20323132323338.roa
Signing time: Sat 29 Apr 2023 09:29:41 +0000
ROA not before: Sat 29 Apr 2023 09:24:41 +0000
ROA not after: Sat 27 Apr 2024 09:29:41 +0000
asID: 212238
IP address blocks: 45.80.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:92:e7:17:2f:8b:e5:52:39:60:12:38:b0:a4:69:a4:45:fc:9c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:24:41 2023 GMT
Not After : Apr 27 09:29:41 2024 GMT
Subject: CN=4AB048EE942A09372A5E2BDCB3D462ADFDE2BBB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:9a:74:bc:b5:2f:0a:78:cb:31:0a:69:9e:
61:e7:8d:9c:d3:bf:0f:e7:0a:3a:79:b3:b8:5e:08:
6f:b6:df:28:77:1c:78:a5:d5:50:6a:5a:a0:69:f0:
e4:24:8f:cc:c0:0f:24:8d:91:5b:11:67:cd:c0:dd:
c8:c1:6a:48:90:cc:00:03:0e:e2:ab:62:13:52:8f:
9c:b6:23:09:65:00:1f:71:44:f4:d8:e3:f2:e4:6f:
c3:8f:18:66:7c:c2:a9:9d:1e:fc:ff:2d:af:0a:4c:
9f:4f:60:4e:d9:23:bd:46:35:a0:49:54:75:12:85:
ee:f7:9f:19:01:a1:f8:97:27:c5:ce:e6:27:d4:ac:
9c:55:65:57:d5:b6:b6:52:e7:a6:35:be:43:54:dd:
eb:08:47:99:7f:92:9b:81:79:e9:b0:bf:be:e8:7e:
ff:ad:66:0e:b1:b1:28:ab:01:c8:e7:cc:7c:66:51:
b5:2d:42:03:38:cb:6f:cb:c0:ff:63:ad:ba:7f:9f:
13:80:90:cd:38:41:70:df:b7:c0:dd:d5:10:98:68:
4b:4e:4d:95:77:cc:57:3f:3d:c5:fc:48:19:bf:e3:
78:5a:85:8c:87:91:05:f3:19:ba:fe:0a:0e:c7:07:
ad:2d:35:60:c7:86:f5:79:58:c6:75:db:e4:cd:2a:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B0:48:EE:94:2A:09:37:2A:5E:2B:DC:B3:D4:62:AD:FD:E2:BB:B1
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e38302e342e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.4.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:5a:72:03:17:87:16:5d:15:5d:cd:da:22:9c:f6:43:38:c4:
9b:d4:41:cd:d1:3d:45:8c:5e:5d:59:90:b5:79:9e:31:66:96:
21:04:72:4a:44:1b:7d:c3:35:e4:7b:9d:97:76:e9:70:f2:7e:
c0:86:8b:47:2c:b3:58:65:9d:53:ac:89:16:9f:6a:f0:45:5e:
9e:35:b7:8d:3f:0c:eb:af:0e:bb:b1:97:48:45:f3:78:01:07:
0c:5a:8d:78:d7:fe:5c:99:ec:f9:1a:c6:f8:ed:73:c3:f4:14:
44:ae:b2:df:8e:4e:e0:91:6d:00:b0:2a:29:53:a5:ba:80:71:
2d:59:17:2c:b3:09:8c:ec:67:19:f3:2d:9b:ac:fa:ab:51:28:
ba:3e:ea:24:6b:8b:95:39:b2:83:06:c1:70:8e:06:0d:84:a6:
83:1b:40:d6:f8:9b:c5:9e:e5:55:7e:fb:71:40:b1:98:6a:9f:
93:9f:cc:e8:7c:b8:7a:69:e2:2b:56:6a:ea:0d:47:d5:dd:d3:
77:f7:68:62:6b:11:57:5d:08:18:54:76:33:66:85:33:71:bf:
44:1f:fa:74:86:5f:5e:af:92:ad:c0:a7:54:c1:3f:d3:8b:3c:
ff:89:5c:fb:6b:1c:25:8d:d9:46:09:0c:68:f4:79:af:70:cd:
e1:d1:45:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org