Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31342e3139322e302f32342d3234203d3e20323037313337.roa
File: 34352e31342e3139322e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: 6fFYM+D/UJ7v0rdCZaD0kYTQ8Fqn7frYNl0GmeDOqQA=
Subject key identifier: BF:1F:A1:A5:86:4F:0E:C2:10:31:A1:2D:F0:DF:30:1F:34:D4:86:C1
Certificate issuer: /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial: 1CD67E67A19FF0DD6BC82C057041EF0EB32B4C2E
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31342e3139322e302f32342d3234203d3e20323037313337.roa
Signing time: Mon 01 May 2023 13:23:43 +0000
ROA not before: Mon 01 May 2023 13:18:43 +0000
ROA not after: Mon 29 Apr 2024 13:23:43 +0000
asID: 207137
IP address blocks: 45.14.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d6:7e:67:a1:9f:f0:dd:6b:c8:2c:05:70:41:ef:0e:b3:2b:4c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Validity
Not Before: May 1 13:18:43 2023 GMT
Not After : Apr 29 13:23:43 2024 GMT
Subject: CN=BF1FA1A5864F0EC21031A12DF0DF301F34D486C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:8f:5a:1a:2d:10:46:72:46:5c:af:d6:36:
ea:e7:66:20:84:8d:49:90:c6:f5:0e:96:a8:0d:8c:
e4:ee:59:64:12:f0:6d:8f:37:7f:97:3c:c2:89:de:
1c:b0:fe:49:49:49:9a:c9:13:9b:24:8c:70:a3:90:
b7:a9:32:c9:ed:57:1b:ca:de:12:84:e0:47:84:fb:
5a:4b:72:1e:9a:bc:4c:40:17:07:d7:2e:13:9e:22:
4c:90:cb:1b:f7:7a:02:ee:97:9e:d5:cb:6d:5c:ab:
da:86:0c:8b:78:cb:f3:ff:15:6f:81:6f:b3:78:31:
6a:e8:31:f6:d3:85:72:94:53:02:66:83:10:41:50:
48:e0:a5:6c:9a:7c:52:a1:d9:37:e7:90:7b:a2:0c:
a0:95:e1:b3:c6:cc:1c:2d:f9:c7:31:db:e6:39:6c:
35:c9:24:23:40:5a:83:41:7c:04:c7:f6:96:25:26:
6e:0d:77:f1:82:ce:7a:41:36:47:c0:c4:6c:60:c8:
1e:b9:41:cc:87:e2:b6:1b:e7:91:64:d2:79:8e:85:
b5:af:6a:6b:cc:09:ec:aa:cf:aa:f8:f0:13:7b:27:
f4:52:28:29:e0:16:94:bd:4e:e3:6c:b4:3a:20:99:
68:4a:b3:26:03:de:5b:0c:8e:72:a9:3c:10:84:3d:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1F:A1:A5:86:4F:0E:C2:10:31:A1:2D:F0:DF:30:1F:34:D4:86:C1
X509v3 Authority Key Identifier:
keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31342e3139322e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.192.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:a9:67:9b:ea:8e:d8:5f:a5:e3:a1:35:e9:ea:89:c4:b1:1f:
21:88:5c:b3:9f:1d:eb:4f:56:2c:50:85:2f:70:82:f7:8b:bf:
78:76:a7:38:91:8b:3e:8d:d2:e2:1a:2f:6d:a1:1b:ad:79:e2:
40:5e:c9:7f:d5:43:09:1c:21:7b:e7:41:ea:0c:e4:b4:1c:d4:
da:dd:5a:fc:96:50:27:36:43:65:91:b4:f4:47:11:e1:83:9a:
01:f9:db:2b:e0:ec:02:be:b7:b1:02:b8:e6:94:08:7b:e6:18:
3a:91:20:89:1e:81:5e:21:1c:8c:c1:d3:74:3e:52:90:9c:4e:
fb:0c:28:a8:2b:34:39:c8:3e:7a:83:ee:d3:d4:87:5b:39:0b:
af:df:9b:e6:84:f4:ee:13:d4:0d:38:6f:40:b5:fc:98:28:96:
a8:ff:51:f7:0c:92:0b:b9:61:bf:65:96:fa:8a:f9:bf:de:1a:
e9:8a:51:ec:78:7c:28:1c:61:9c:2a:05:a4:81:15:70:eb:9f:
d8:c7:69:00:e5:0d:61:f7:ad:68:9a:7f:02:b6:d6:ad:ba:3e:
fc:9a:82:d4:b4:c9:61:9d:81:af:87:e1:0b:56:ac:a3:09:a6:
c5:63:20:9e:1d:55:1b:2b:66:ac:08:a8:a9:62:fe:01:65:cb:
06:99:10:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 12:48:16 2023 by rpki-client on console-ams.rpki-client.org