Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e38302e362e302f32342d3234203d3e203336333531.roa
File: 34352e38302e362e302f32342d3234203d3e203336333531.roa (raw, json)
Hash identifier: 9yoD6B3O80uzsUZW+9fwBsOHlg3dzzpkCCCI9nn07r0=
Subject key identifier: 56:C6:DF:26:59:5F:E3:C0:24:F4:48:2A:2C:A8:15:35:D0:ED:59:E9
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 6F327F6F91156F81DE4A2AA07A63E8B2328D5D6B
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e38302e362e302f32342d3234203d3e203336333531.roa
Signing time: Sat 29 Apr 2023 09:30:06 +0000
ROA not before: Sat 29 Apr 2023 09:25:06 +0000
ROA not after: Sat 27 Apr 2024 09:30:06 +0000
asID: 36351
IP address blocks: 45.80.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:32:7f:6f:91:15:6f:81:de:4a:2a:a0:7a:63:e8:b2:32:8d:5d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:25:06 2023 GMT
Not After : Apr 27 09:30:06 2024 GMT
Subject: CN=56C6DF26595FE3C024F4482A2CA81535D0ED59E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:89:99:04:bd:7f:ab:09:6f:76:c4:9c:6f:74:
eb:a4:cc:f8:a2:5a:39:39:7a:dd:80:7a:cb:4d:c0:
29:6c:68:d4:8b:6e:03:24:c4:4b:5e:80:30:29:08:
d8:44:98:8e:3c:41:bb:e4:47:c2:e8:4e:dd:c0:fa:
be:3d:0a:49:66:62:32:98:53:2e:dd:ce:98:8c:cd:
56:81:ae:6c:93:7b:85:a5:69:6e:02:d1:f6:ca:e3:
f7:01:8e:19:97:99:c1:b1:8d:a5:91:c5:4d:2c:8f:
74:a0:da:7a:62:7b:14:69:48:ae:55:51:c4:2a:10:
6e:9a:5c:1c:9a:b6:28:04:0f:ac:6b:32:4b:52:f1:
9b:a6:74:69:8f:06:07:28:8d:48:6c:b9:c0:99:be:
56:11:0e:1a:d6:28:6c:57:e3:3b:06:cc:a6:0d:b7:
99:b3:b0:0a:4a:2d:a0:46:41:30:31:c0:86:d3:02:
18:ca:50:e0:ca:40:e1:76:2d:5a:a1:bc:f2:27:b0:
e7:6d:cb:84:d2:9b:19:d0:89:b8:b7:4a:2c:67:1e:
7b:0a:10:27:1a:70:7c:c5:d0:d4:80:09:6e:0a:62:
3f:de:66:67:bf:bf:53:7b:5b:10:34:fe:02:b1:a8:
e0:38:aa:e7:c4:da:1e:20:5e:c1:58:f8:ed:f7:05:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C6:DF:26:59:5F:E3:C0:24:F4:48:2A:2C:A8:15:35:D0:ED:59:E9
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e38302e362e302f32342d3234203d3e203336333531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.6.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:03:05:c6:35:09:f9:f4:fa:2b:b8:c5:52:50:f3:5c:75:1a:
b6:3e:67:7d:d0:e0:f1:78:dd:47:1c:28:55:6d:90:57:88:67:
58:51:be:80:b6:0d:d0:95:98:3f:fe:41:7c:fb:74:57:20:f3:
10:cc:82:fe:62:16:aa:39:5f:19:bc:af:56:54:a5:ed:b1:4d:
2b:48:10:11:e7:43:a1:27:46:2e:2b:9d:19:4e:63:f1:2f:68:
85:da:ec:ed:c3:d2:44:02:45:ca:ac:d9:05:a3:89:42:66:65:
3b:0c:b1:72:2d:a6:ff:d2:93:2a:d2:a8:ed:96:5c:4c:c1:39:
c9:c3:da:26:06:10:de:ac:fa:7e:46:c7:41:96:7e:67:e1:a1:
cd:43:f5:22:08:0e:e1:10:72:61:b5:6a:b1:b0:0f:cb:0d:6f:
6d:5d:6d:34:cc:ed:d0:db:2d:b6:b6:24:4b:a1:8a:6a:5d:28:
39:c2:8c:03:eb:c4:49:3e:0e:f7:57:4e:3b:86:f5:ed:e8:8d:
1f:ba:6f:5c:5d:1c:82:bf:4f:45:60:10:59:e6:3d:87:ae:69:
ad:67:b7:0c:dc:45:83:ec:36:84:4f:95:5f:f4:b1:fc:fd:14:
c7:22:72:ba:de:a6:53:f2:57:f3:c8:e4:1b:a7:75:c0:b3:82:
2c:5c:f0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org