Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31312e38302e302f32342d3234203d3e20313336373837.roa
File: 34352e31312e38302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: usSHSKkUb6j0S0QDDKWdWm+1nctfloh7x12ZRI0TqDY=
Subject key identifier: 0B:96:00:69:D8:56:F2:EB:C3:7D:78:5F:23:98:F2:C6:08:28:B5:FF
Certificate issuer: /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial: 5D11C8996104C9CE97FBE2C7BBDDF9E1B64E0A59
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31312e38302e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 01 May 2023 13:23:29 +0000
ROA not before: Mon 01 May 2023 13:18:29 +0000
ROA not after: Mon 29 Apr 2024 13:23:29 +0000
asID: 136787
IP address blocks: 45.11.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:11:c8:99:61:04:c9:ce:97:fb:e2:c7:bb:dd:f9:e1:b6:4e:0a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Validity
Not Before: May 1 13:18:29 2023 GMT
Not After : Apr 29 13:23:29 2024 GMT
Subject: CN=0B960069D856F2EBC37D785F2398F2C60828B5FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:70:5f:92:34:85:bf:33:28:7b:39:6b:23:f0:
bb:9e:f2:a5:bb:49:56:67:03:7a:86:7b:0b:a7:c2:
d3:07:f3:51:92:53:45:23:af:c4:67:1d:cf:ff:b6:
22:74:5f:e9:c6:c1:c7:ae:23:79:84:92:cf:59:3b:
a7:dd:4b:83:4c:59:74:61:85:eb:27:23:21:6e:b0:
f3:50:cc:56:b5:39:36:f1:07:1d:ab:7b:0d:6e:6e:
30:6b:2e:d9:f1:57:08:1d:cb:10:b9:cc:07:d2:23:
c8:c3:da:42:bb:64:9c:8a:56:4d:4f:b6:e3:a3:ae:
23:2c:6a:8b:ae:58:52:53:3a:ca:fa:f5:8d:57:fe:
01:dd:20:13:09:9f:20:11:cd:86:2e:25:9b:eb:ab:
b8:05:7d:ea:ed:55:0d:ca:df:66:7a:0e:8b:12:0e:
a7:93:70:32:9d:bd:ed:3e:c2:2a:4d:0a:e8:35:9a:
04:ad:ee:0d:c0:85:f0:73:8f:8e:5d:9a:f0:c8:db:
f3:1d:f6:e1:21:80:91:95:cd:09:d0:47:d4:b9:34:
ab:a6:dc:c3:68:88:57:0a:5b:00:7b:08:63:fd:59:
b2:83:c9:9a:16:77:07:bc:09:0c:6b:3d:a3:4d:da:
9a:d7:02:ef:30:35:c0:21:ce:7f:9d:75:32:0d:e4:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:96:00:69:D8:56:F2:EB:C3:7D:78:5F:23:98:F2:C6:08:28:B5:FF
X509v3 Authority Key Identifier:
keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31312e38302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.80.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:30:ff:95:69:2a:4b:88:d4:af:3f:37:46:0a:96:a2:a9:ae:
51:a4:82:8a:af:d0:24:b4:3b:42:c3:b6:70:8b:38:a6:5a:d4:
57:6d:fc:86:0a:f5:01:53:e6:40:07:8a:88:9b:9a:7f:bc:0f:
f4:16:e0:98:14:6a:b4:6b:5f:33:1e:d4:47:3d:74:18:e6:34:
d5:9b:26:ba:76:6a:8d:67:99:bd:3f:34:e3:03:a0:00:35:83:
81:d3:bf:a2:1c:6f:80:a5:18:cf:63:c9:a6:a7:5f:7f:56:7e:
b9:f2:2f:51:36:cd:26:21:72:9e:64:4b:9f:68:5f:9b:02:a7:
ee:23:4d:0c:82:10:d8:02:f8:a3:c7:9e:40:bc:57:35:10:4a:
24:58:a7:16:bf:5a:e1:ac:76:fc:bf:93:99:d2:6d:13:9c:e6:
e0:78:ea:9f:a0:84:e1:bc:5e:bf:3e:12:67:af:c7:e2:c3:ce:
69:59:d0:97:43:d8:78:82:b1:55:97:c0:15:18:91:ed:e7:4e:
57:cb:e6:23:f4:fd:16:31:05:ac:de:42:e4:81:12:42:9b:ca:
44:4c:02:6c:1b:24:76:5e:16:8a:47:90:c7:68:fb:92:ab:8a:
3a:0e:56:7b:3f:ed:0d:0b:50:58:c3:c6:c0:52:39:80:51:0f:
ae:fb:fd:63
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUXRHImWEEyc6X++LHu9354bZOClkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGQyYTlhNDc1ZTdiOTdlMWJlZmNmY2U0NzNjNzJhMDhl
YjQ3MWMxYTAeFw0yMzA1MDExMzE4MjlaFw0yNDA0MjkxMzIzMjlaMDMxMTAvBgNV
BAMTKDBCOTYwMDY5RDg1NkYyRUJDMzdENzg1RjIzOThGMkM2MDgyOEI1RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbcF+SNIW/Myh7OWsj8Lue8qW7
SVZnA3qGewunwtMH81GSU0Ujr8RnHc//tiJ0X+nGwceuI3mEks9ZO6fdS4NMWXRh
hesnIyFusPNQzFa1OTbxBx2rew1ubjBrLtnxVwgdyxC5zAfSI8jD2kK7ZJyKVk1P
tuOjriMsaouuWFJTOsr69Y1X/gHdIBMJnyARzYYuJZvrq7gFfertVQ3K32Z6DosS
DqeTcDKdve0+wipNCug1mgSt7g3AhfBzj45dmvDI2/Md9uEhgJGVzQnQR9S5NKum
3MNoiFcKWwB7CGP9WbKDyZoWdwe8CQxrPaNN2prXAu8wNcAhzn+ddTIN5EZvAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUC5YAadhW8uvDfXhfI5jyxggotf8wHwYDVR0j
BBgwFoAU3SqaR157l+G+/Pzkc8cqCOtHHBowDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xMDgvREQyQTlBNDc1RTdCOTdFMUJFRkNGQ0U0NzNDNzJBMDhFQjQ3MUMx
QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNTcWFSMTU3bC1HLV9QemtjOGNx
Q090SEhCby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzEwOC8zNDM1MmUzMTMxMmUz
ODMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQALQtQMA0GCSqGSIb3DQEBCwUAA4IBAQAqMP+VaSpLiNSvPzdGCpaiqa5RpIKK
r9AktDtCw7ZwizimWtRXbfyGCvUBU+ZAB4qIm5p/vA/0FuCYFGq0a18zHtRHPXQY
5jTVmya6dmqNZ5m9PzTjA6AANYOB07+iHG+ApRjPY8mmp19/Vn658i9RNs0mIXKe
ZEufaF+bAqfuI00MghDYAvijx55AvFc1EEokWKcWv1rhrHb8v5OZ0m0TnObgeOqf
oIThvF6/PhJnr8fiw85pWdCXQ9h4grFVl8AVGJHt505Xy+Yj9P0WMQWs3kLkgRJC
m8pETAJsGyR2XhaKR5DHaPuSq4o6DlZ7P+0NC1BYw8bAUjmAUQ+u+/1j
-----END CERTIFICATE-----
Generated at Wed Sep 27 12:48:16 2023 by rpki-client on console-ams.rpki-client.org