Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e38302e352e302f32342d3234203d3e20323039303433.roa
File: 34352e38302e352e302f32342d3234203d3e20323039303433.roa (raw, json)
Hash identifier: 6TDyeFjxdMfgw8giBbbzDYQ3ogvq6jL6g7TPTta99PM=
Subject key identifier: 6B:2D:9C:FA:38:42:6C:5D:3A:7E:D8:CA:04:B0:CB:46:61:E5:67:8A
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 5D7ABD0E6CA299C28CB84150C55D639FB7F39781
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e38302e352e302f32342d3234203d3e20323039303433.roa
Signing time: Sat 29 Apr 2023 09:29:54 +0000
ROA not before: Sat 29 Apr 2023 09:24:54 +0000
ROA not after: Sat 27 Apr 2024 09:29:54 +0000
asID: 209043
IP address blocks: 45.80.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:7a:bd:0e:6c:a2:99:c2:8c:b8:41:50:c5:5d:63:9f:b7:f3:97:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:24:54 2023 GMT
Not After : Apr 27 09:29:54 2024 GMT
Subject: CN=6B2D9CFA38426C5D3A7ED8CA04B0CB4661E5678A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:4e:98:ea:c5:11:6d:d4:93:28:23:d1:85:
5e:50:ec:02:f6:7a:3d:0d:0b:66:7b:e8:35:a8:c1:
fb:72:c3:42:c1:b8:18:a5:7a:95:ba:e8:24:5d:31:
1c:3e:a1:6c:23:fc:1a:9c:d1:3f:e7:91:e3:94:68:
10:af:5f:f0:ac:2b:b9:35:1c:b8:ef:06:b1:9d:3e:
45:c8:03:dd:09:59:26:6c:fa:8c:ce:ed:3b:3c:c4:
61:13:e6:2d:7d:d1:d3:78:21:9e:a8:cf:26:06:0c:
b2:35:e2:e0:3a:0d:3c:41:0a:72:5f:96:10:9f:15:
77:aa:56:03:a5:ad:2a:e0:0f:fb:75:03:d1:0d:52:
c2:23:9d:c6:33:14:be:a6:1f:01:d5:4c:1c:b9:03:
2c:64:d7:7a:a7:31:a0:82:bf:60:e8:f0:3c:1e:d7:
cf:06:19:a8:6a:25:96:47:01:18:f3:d2:31:d3:4f:
a9:b3:70:fe:1c:bb:84:ec:7e:74:78:9c:22:10:09:
be:59:ab:71:50:cb:e9:99:04:03:70:7a:5b:a8:c3:
ec:2f:a1:35:b8:61:20:cc:10:2b:3f:e9:ec:b2:0e:
44:57:a6:7b:6e:28:ab:9f:38:bf:b1:78:54:59:9c:
60:6f:02:19:a1:e1:88:df:42:22:99:b8:59:ff:a5:
8e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2D:9C:FA:38:42:6C:5D:3A:7E:D8:CA:04:B0:CB:46:61:E5:67:8A
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e38302e352e302f32342d3234203d3e20323039303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.5.0/24
Signature Algorithm: sha256WithRSAEncryption
68:9d:de:3f:69:af:ec:52:ac:5c:dc:16:68:0c:32:c5:d8:09:
09:8b:41:93:a2:c6:7d:35:d8:0d:e1:ab:57:91:25:6a:a6:69:
33:2f:d6:60:03:d7:9c:68:45:cc:8f:38:68:33:d9:5d:47:1d:
56:5c:9e:02:d4:34:ec:52:e7:f1:69:e9:bc:af:5b:cd:cd:a2:
a0:c3:ca:f4:cb:23:93:f5:2e:fd:76:12:67:eb:e9:10:68:30:
fa:e0:cf:4f:43:10:75:a7:29:b2:6b:19:65:af:69:64:a8:a2:
df:62:02:51:b5:c0:13:e6:ad:9f:ae:45:d2:8e:a1:bd:a4:46:
58:1a:ed:57:8c:83:b3:19:4f:17:43:8e:83:4e:90:e2:db:42:
ea:6d:98:83:d1:f0:03:09:a0:f5:60:59:db:43:8b:e6:3a:f9:
0c:d3:54:8b:15:b2:28:6d:90:67:d8:56:f1:60:81:ba:49:f3:
42:c6:03:ab:4e:bf:a8:e0:97:2c:94:ca:30:ee:06:8c:19:d1:
66:00:c6:55:48:40:19:8c:17:49:61:30:de:92:f0:9e:d2:bd:
ca:51:dc:e4:36:56:54:26:a6:8b:f1:2f:10:55:58:ce:48:dc:
07:a4:46:c9:19:34:6a:a3:91:17:f6:54:14:5c:50:ca:ff:8d:
bb:4f:92:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org