Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31312e38322e302f32342d3234203d3e20313336373837.roa
File: 34352e31312e38322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 5pOlgUNlP5cuLlNYc6gNivRfE0a4OMf/b5SFVScAQ3I=
Subject key identifier: BE:07:56:58:8F:52:D4:95:07:9F:1A:FF:86:25:F5:CB:DE:10:B5:E1
Certificate issuer: /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial: 5098C6F0C0BD676CB54E2CCB13655DFBB52FA9D0
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31312e38322e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 01 May 2023 13:23:36 +0000
ROA not before: Mon 01 May 2023 13:18:36 +0000
ROA not after: Mon 29 Apr 2024 13:23:36 +0000
asID: 136787
IP address blocks: 45.11.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:98:c6:f0:c0:bd:67:6c:b5:4e:2c:cb:13:65:5d:fb:b5:2f:a9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Validity
Not Before: May 1 13:18:36 2023 GMT
Not After : Apr 29 13:23:36 2024 GMT
Subject: CN=BE0756588F52D495079F1AFF8625F5CBDE10B5E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:2f:ed:da:f2:15:ae:5b:01:83:d4:b1:25:
5c:cd:4b:5a:08:a4:e8:ce:b1:70:af:b9:c3:38:88:
20:4e:ad:11:39:a0:db:30:ea:8f:c5:4e:73:04:b6:
65:4a:25:c3:c1:c8:08:1a:99:84:bb:e1:6a:a7:83:
52:4c:99:45:35:27:b6:26:f4:42:7d:62:b2:76:c2:
58:8a:30:bd:cf:71:8e:da:69:f3:6b:68:6e:93:00:
85:d0:b0:c2:29:a4:be:b9:96:9e:5d:ff:e3:0b:ab:
a1:7a:bf:77:fb:61:ed:47:e0:99:2e:5c:a6:b3:1b:
6e:ff:c2:6f:6e:dc:87:66:6f:7b:8b:02:09:07:f3:
39:b5:03:4d:4c:55:8d:7d:b4:d2:2c:12:85:db:ab:
5e:37:f9:4b:d1:56:1a:90:9b:9e:42:3f:5b:31:de:
3f:57:c9:7a:11:76:f3:9e:b9:da:ca:5d:29:92:c0:
3d:ec:2b:35:97:82:2e:3c:83:7a:4f:0b:fd:a0:ff:
06:6a:19:59:0b:8f:10:8a:d1:f7:50:bf:d2:dc:e8:
23:9d:f2:24:90:7d:38:b9:47:e2:1f:37:2b:7e:a2:
88:08:08:20:61:b3:66:e2:da:48:4a:b4:1c:d1:3d:
2d:5f:d9:37:61:4b:7a:79:01:3d:5c:38:1f:60:3f:
a9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:07:56:58:8F:52:D4:95:07:9F:1A:FF:86:25:F5:CB:DE:10:B5:E1
X509v3 Authority Key Identifier:
keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31312e38322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.82.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:d3:47:2d:7a:43:d6:3d:41:4c:f8:97:00:93:38:21:4c:26:
5e:a2:c3:11:eb:52:d1:50:25:0d:16:ae:1b:56:5c:cd:d2:03:
10:36:95:c1:c6:fc:32:d4:8f:65:f8:60:c9:22:32:9f:75:6a:
92:50:07:44:4f:95:7b:e7:72:b7:23:3d:5d:3b:21:93:f1:09:
bf:c8:65:3c:48:e7:da:c5:a2:ac:c2:ca:5e:aa:a8:31:0c:a4:
c5:6c:2b:86:17:30:03:d0:a8:14:47:71:97:bd:67:dd:c7:62:
03:ad:52:ec:2a:23:c8:3e:23:9f:12:bb:86:c3:e6:0f:94:cf:
cf:03:85:3a:77:fe:6e:14:65:f5:c9:11:ae:8e:79:2f:c5:b7:
53:2b:ea:fa:f0:c5:22:e8:37:a9:c2:3e:46:66:c5:bb:04:d7:
45:2a:58:37:21:13:12:58:83:17:be:7a:fc:4f:93:37:1e:e9:
bb:09:fe:50:7f:d0:b9:56:76:dc:87:bd:c6:f2:70:ad:8c:fa:
d4:08:36:0f:f9:31:fc:84:d9:55:e7:0f:de:d9:93:00:a1:16:
46:24:fa:6c:a5:a2:17:61:16:ee:bc:ec:bd:fd:6e:b3:46:2a:
27:f6:f0:1d:c8:d3:e2:bd:b0:d9:ac:2c:38:cf:8c:d3:29:4b:
87:a9:c8:97
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUUJjG8MC9Z2y1TizLE2Vd+7UvqdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGQyYTlhNDc1ZTdiOTdlMWJlZmNmY2U0NzNjNzJhMDhl
YjQ3MWMxYTAeFw0yMzA1MDExMzE4MzZaFw0yNDA0MjkxMzIzMzZaMDMxMTAvBgNV
BAMTKEJFMDc1NjU4OEY1MkQ0OTUwNzlGMUFGRjg2MjVGNUNCREUxMEI1RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBDS/t2vIVrlsBg9SxJVzNS1oI
pOjOsXCvucM4iCBOrRE5oNsw6o/FTnMEtmVKJcPByAgamYS74Wqng1JMmUU1J7Ym
9EJ9YrJ2wliKML3PcY7aafNraG6TAIXQsMIppL65lp5d/+MLq6F6v3f7Ye1H4Jku
XKazG27/wm9u3Idmb3uLAgkH8zm1A01MVY19tNIsEoXbq143+UvRVhqQm55CP1sx
3j9XyXoRdvOeudrKXSmSwD3sKzWXgi48g3pPC/2g/wZqGVkLjxCK0fdQv9Lc6COd
8iSQfTi5R+IfNyt+oogICCBhs2bi2khKtBzRPS1f2TdhS3p5AT1cOB9gP6nRAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUvgdWWI9S1JUHnxr/hiX1y94QteEwHwYDVR0j
BBgwFoAU3SqaR157l+G+/Pzkc8cqCOtHHBowDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xMDgvREQyQTlBNDc1RTdCOTdFMUJFRkNGQ0U0NzNDNzJBMDhFQjQ3MUMx
QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNTcWFSMTU3bC1HLV9QemtjOGNx
Q090SEhCby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzEwOC8zNDM1MmUzMTMxMmUz
ODMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQALQtSMA0GCSqGSIb3DQEBCwUAA4IBAQCz00ctekPWPUFM+JcAkzghTCZeosMR
61LRUCUNFq4bVlzN0gMQNpXBxvwy1I9l+GDJIjKfdWqSUAdET5V753K3Iz1dOyGT
8Qm/yGU8SOfaxaKswspeqqgxDKTFbCuGFzAD0KgUR3GXvWfdx2IDrVLsKiPIPiOf
EruGw+YPlM/PA4U6d/5uFGX1yRGujnkvxbdTK+r68MUi6Depwj5GZsW7BNdFKlg3
IRMSWIMXvnr8T5M3Hum7Cf5Qf9C5Vnbch73G8nCtjPrUCDYP+TH8hNlV5w/e2ZMA
oRZGJPpspaIXYRbuvOy9/W6zRion9vAdyNPivbDZrCw4z4zTKUuHqciX
-----END CERTIFICATE-----
Generated at Wed Sep 27 12:48:16 2023 by rpki-client on console-ams.rpki-client.org