Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e38302e372e302f32342d3234203d3e20323039323630.roa
File: 34352e38302e372e302f32342d3234203d3e20323039323630.roa (raw, json)
Hash identifier: gT2cFd0VU1q6J9QSkoZiOR2LFLcB7mIniuaC9NuTmog=
Subject key identifier: F3:2A:12:F5:80:25:59:73:A5:9C:3C:76:02:86:44:70:98:D9:E1:62
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 7C067DE53808193DBD61DB348AAABE80670ABCB9
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e38302e372e302f32342d3234203d3e20323039323630.roa
Signing time: Sat 29 Apr 2023 09:30:17 +0000
ROA not before: Sat 29 Apr 2023 09:25:17 +0000
ROA not after: Sat 27 Apr 2024 09:30:17 +0000
asID: 209260
IP address blocks: 45.80.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:06:7d:e5:38:08:19:3d:bd:61:db:34:8a:aa:be:80:67:0a:bc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:25:17 2023 GMT
Not After : Apr 27 09:30:17 2024 GMT
Subject: CN=F32A12F580255973A59C3C760286447098D9E162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6c:91:c8:70:17:73:80:54:42:46:ba:c9:36:
80:bb:51:96:c0:16:87:88:2d:d6:8f:ad:99:9a:1f:
cf:f7:c4:fd:71:c5:51:30:d2:37:84:6b:d5:04:34:
1d:53:0b:58:db:da:9e:32:f4:1c:03:c7:86:08:17:
b0:90:fc:5e:3c:5e:b2:22:d6:e5:99:7f:2d:73:28:
2a:07:38:4f:8b:e9:97:90:c3:9d:5b:43:36:1d:a6:
bd:ef:c6:f6:93:a0:43:70:4c:36:3b:63:31:72:c1:
93:04:7d:37:76:8f:a6:dc:0f:57:2f:42:c7:16:32:
7a:92:d3:b8:cd:61:91:1f:2e:5d:cf:fa:10:d0:b6:
3d:2d:b4:ad:30:91:fd:02:b7:dc:5e:c0:6b:02:35:
3b:a5:69:69:2d:ac:8a:df:50:97:74:9a:56:c9:a7:
25:00:f1:a3:43:5c:24:d5:c0:9c:ee:8a:33:50:97:
29:37:db:ba:36:3a:7d:f6:76:6c:fe:ba:6a:eb:b2:
7f:d3:8f:12:d2:34:78:24:c5:17:9b:3e:6a:48:f4:
43:83:75:89:8f:b7:53:2d:85:88:53:f1:c9:37:14:
4b:f5:3d:06:6a:25:43:7a:31:90:85:39:e6:e2:bf:
d2:63:f0:30:4a:cd:5d:ff:5e:fa:09:18:d5:3f:7f:
4a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2A:12:F5:80:25:59:73:A5:9C:3C:76:02:86:44:70:98:D9:E1:62
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e38302e372e302f32342d3234203d3e20323039323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.7.0/24
Signature Algorithm: sha256WithRSAEncryption
58:13:21:d2:4a:cf:f6:d5:b6:72:8d:7f:bb:72:29:40:51:4c:
fc:06:5a:75:e0:01:84:af:d2:64:ac:38:92:ad:94:e1:ef:93:
80:e7:00:6e:f9:c3:7a:6e:ee:a2:57:71:0d:6f:65:d2:37:30:
0f:0c:c3:57:2b:cb:20:e8:f5:5c:18:59:c1:d0:0b:e9:f5:90:
ef:ea:53:66:15:bc:2a:1e:2d:7a:58:b2:06:4c:ee:ac:05:fe:
52:d6:d7:8e:19:e2:de:c6:0e:7d:51:b4:7d:a3:fc:97:d0:09:
e1:93:83:68:27:b5:c7:da:44:56:22:cf:e3:59:94:9a:c1:c8:
35:de:f2:bc:dd:70:0e:36:10:96:a7:f1:fe:8f:ae:a1:f3:db:
ef:b7:1f:d7:90:9b:fb:0c:b7:47:b8:e3:58:2a:aa:f8:2e:8c:
92:43:e9:6d:93:96:7e:c4:4a:71:01:cc:4b:b7:33:78:c9:36:
f2:dd:da:ea:b7:a5:0f:42:93:14:af:c6:c9:0c:4f:f9:90:d4:
ea:19:2a:17:7a:8e:f8:84:3c:5e:26:ef:ea:2d:7f:3c:dc:35:
bf:70:86:a5:55:8b:9c:9b:5f:6a:7b:5f:0e:5d:58:ad:42:10:
b7:49:81:69:c0:e8:c5:c1:16:ec:92:81:bf:69:42:91:c8:05:
7e:98:0c:a4
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUfAZ95TgIGT29Yds0iqq+gGcKvLkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY2ZjFhZjllOTE5YTk2NTMyNjgzMjdiOTg4MTRjYWZl
YjVjMGExMzAeFw0yMzA0MjkwOTI1MTdaFw0yNDA0MjcwOTMwMTdaMDMxMTAvBgNV
BAMTKEYzMkExMkY1ODAyNTU5NzNBNTlDM0M3NjAyODY0NDcwOThEOUUxNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgbJHIcBdzgFRCRrrJNoC7UZbA
FoeILdaPrZmaH8/3xP1xxVEw0jeEa9UENB1TC1jb2p4y9BwDx4YIF7CQ/F48XrIi
1uWZfy1zKCoHOE+L6ZeQw51bQzYdpr3vxvaToENwTDY7YzFywZMEfTd2j6bcD1cv
QscWMnqS07jNYZEfLl3P+hDQtj0ttK0wkf0Ct9xewGsCNTulaWktrIrfUJd0mlbJ
pyUA8aNDXCTVwJzuijNQlyk327o2On32dmz+umrrsn/TjxLSNHgkxRebPmpI9EOD
dYmPt1MthYhT8ck3FEv1PQZqJUN6MZCFOebiv9Jj8DBKzV3/XvoJGNU/f0oXAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU8yoS9YAlWXOlnDx2AoZEcJjZ4WIwHwYDVR0j
BBgwFoAU328a+ekZqWUyaDJ7mIFMr+tcChMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzAvREY2RjFBRjlFOTE5QTk2NTMyNjgzMjdCOTg4MTRDQUZFQjVDMEExMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyOGEtZWtacVdVeWFESjdtSUZNci10
Y0NoTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzAvMzQzNTJlMzgzMDJlMzcyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzkzMjM2MzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtUAcw
DQYJKoZIhvcNAQELBQADggEBAFgTIdJKz/bVtnKNf7tyKUBRTPwGWnXgAYSv0mSs
OJKtlOHvk4DnAG75w3pu7qJXcQ1vZdI3MA8Mw1cryyDo9VwYWcHQC+n1kO/qU2YV
vCoeLXpYsgZM7qwF/lLW144Z4t7GDn1RtH2j/JfQCeGTg2gntcfaRFYiz+NZlJrB
yDXe8rzdcA42EJan8f6PrqHz2++3H9eQm/sMt0e441gqqvgujJJD6W2Tln7ESnEB
zEu3M3jJNvLd2uq3pQ9CkxSvxskMT/mQ1OoZKhd6jviEPF4m7+otfzzcNb9whqVV
i5ybX2p7Xw5dWK1CELdJgWnA6MXBFuySgb9pQpHIBX6YDKQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org