Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31312e38322e302f32342d3234203d3e2030.roa
File: 34352e31312e38322e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: qPWQGnK9xuKDJuN3878Nj6Okt5fR+JsWDgQ4NuWP1+U=
Subject key identifier: 4B:61:3C:F7:FE:9F:F2:CC:E8:CA:5C:14:E7:05:6F:E7:EE:CB:7C:C0
Certificate issuer: /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial: 4E423A2D6C6940322FE39B7CA54541D6FF345692
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31312e38322e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:46 +0000
ROA not before: Mon 27 Mar 2023 08:22:46 +0000
ROA not after: Mon 25 Mar 2024 08:27:46 +0000
asID: 0
IP address blocks: 45.11.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:42:3a:2d:6c:69:40:32:2f:e3:9b:7c:a5:45:41:d6:ff:34:56:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Validity
Not Before: Mar 27 08:22:46 2023 GMT
Not After : Mar 25 08:27:46 2024 GMT
Subject: CN=4B613CF7FE9FF2CCE8CA5C14E7056FE7EECB7CC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:71:c8:78:10:61:49:18:3d:25:92:aa:16:
c8:b8:b6:55:99:d1:67:ad:ea:af:89:cb:ff:b9:1a:
be:9f:48:00:41:70:9d:8a:ba:43:47:80:56:3d:6c:
ad:f5:0b:e4:db:ad:e2:e5:3e:14:66:cd:ef:de:95:
ff:f7:fe:42:91:ad:87:09:ca:20:bd:ea:5b:cd:56:
23:e8:af:c4:0a:7b:11:9c:46:4f:80:1e:67:30:15:
80:f8:ad:28:26:08:d3:57:08:89:5c:33:9e:02:76:
ae:61:ff:ea:12:51:be:fa:f9:d9:a5:31:8b:ed:05:
2d:26:38:28:d8:d2:71:0e:f7:83:ba:37:a1:ea:79:
c4:61:ce:25:5a:b7:02:92:27:6f:8d:84:89:0e:14:
8e:75:1f:56:bb:17:99:a4:8b:ba:62:4d:ee:5f:6b:
18:6f:8b:06:7a:37:de:78:a4:d5:c1:c1:ce:f7:9e:
b3:58:41:ef:2a:18:df:4f:60:92:33:bd:c8:89:9d:
79:f1:0f:4d:d7:6c:6d:19:22:ff:5d:5b:f0:31:11:
3e:b2:4d:0a:64:b3:52:08:97:a4:35:cb:e1:89:4d:
7d:e4:cc:f2:b6:c7:ed:29:e7:aa:55:50:7c:95:f9:
af:23:2a:3b:27:dc:56:46:af:5c:b7:fb:24:5b:02:
ef:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:61:3C:F7:FE:9F:F2:CC:E8:CA:5C:14:E7:05:6F:E7:EE:CB:7C:C0
X509v3 Authority Key Identifier:
keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31312e38322e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.82.0/24
Signature Algorithm: sha256WithRSAEncryption
91:c1:ae:25:d0:9b:dc:7c:f7:9e:43:48:6c:f6:79:17:21:9f:
11:22:f9:88:b6:82:05:0b:47:50:71:9c:11:ec:9e:12:14:a7:
c6:7e:e1:86:a9:7c:ba:04:6f:03:04:31:28:28:02:ca:84:4a:
7a:ed:71:ea:84:a4:dd:5c:0a:40:39:65:38:c5:d8:eb:c4:5b:
50:da:74:15:57:0d:45:f9:29:a2:6e:d4:b2:e5:58:75:f2:4a:
9c:18:02:e3:01:75:e4:7e:16:77:02:92:49:11:19:f3:43:f6:
c7:53:ee:a4:50:a5:e1:5a:37:3b:15:21:60:70:3d:05:08:d7:
8f:a0:82:7f:0f:63:6d:13:b1:93:af:f3:09:5d:71:b7:7d:98:
d4:d3:c9:08:f2:b2:b3:27:80:6e:cc:ac:0c:07:53:e7:b3:b7:
58:d5:18:5d:e5:69:78:2d:09:80:df:b2:b6:06:42:ff:da:6d:
76:17:e0:d4:0a:d1:3d:1e:48:59:80:6a:be:af:5b:e3:6f:85:
1b:0c:c0:1b:6d:13:78:6b:00:a5:49:75:99:3f:2f:4c:f2:48:
dd:ba:5c:b5:3b:27:4a:ab:d4:b0:bd:0a:6f:b9:5c:51:a6:2c:
74:66:57:a9:b8:6e:06:b1:a5:a4:29:4d:97:90:55:f0:8a:79:
0a:46:1a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org