Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31342e3139332e302f32342d3234203d3e20323037313337.roa
File: 34352e31342e3139332e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: AV2iqVCV9bQOUoYIalt8FD+coeprzhXEWs6oqESwRcU=
Subject key identifier: D5:D2:CD:CC:A2:AC:A3:DE:44:89:05:12:D2:56:88:CA:63:82:4E:31
Certificate issuer: /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial: 4C93A85F224E791FD442BC00131C75BC4CFF524E
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31342e3139332e302f32342d3234203d3e20323037313337.roa
Signing time: Mon 01 May 2023 13:23:51 +0000
ROA not before: Mon 01 May 2023 13:18:51 +0000
ROA not after: Mon 29 Apr 2024 13:23:51 +0000
asID: 207137
IP address blocks: 45.14.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:93:a8:5f:22:4e:79:1f:d4:42:bc:00:13:1c:75:bc:4c:ff:52:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Validity
Not Before: May 1 13:18:51 2023 GMT
Not After : Apr 29 13:23:51 2024 GMT
Subject: CN=D5D2CDCCA2ACA3DE44890512D25688CA63824E31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f8:f6:16:80:bc:90:82:cd:46:7d:1b:1b:bb:
b4:87:57:c1:2a:e6:37:a0:40:1a:31:d2:06:eb:c2:
d2:35:e2:30:f8:05:5d:ae:48:1c:dc:5e:ba:7a:27:
79:33:df:f2:44:46:90:d5:d5:10:f1:d2:0f:4a:33:
7d:3a:ab:05:c3:b8:f4:41:7a:08:f3:d9:0a:44:37:
8c:57:a9:36:08:9d:98:d6:b4:93:ab:99:c2:76:83:
06:48:3f:4a:af:dc:a5:77:0e:d5:7b:60:cb:8f:aa:
5b:fe:2a:2a:ad:e0:6a:cb:21:54:47:a6:89:9c:a8:
2e:bc:d2:b8:77:c9:a0:68:e7:16:00:91:9d:8d:d1:
35:9a:c8:87:0b:31:ae:75:ac:d7:e5:84:92:05:15:
5b:8e:e9:9c:08:67:ec:3b:5c:a7:e9:91:18:c4:5c:
e2:6f:7e:0a:40:ef:59:35:f9:25:14:06:05:68:91:
88:af:22:29:de:7e:92:7a:3e:b0:9c:e2:ac:2b:19:
dd:54:0b:d3:e0:1d:04:eb:c3:7f:b9:b0:bb:a8:82:
28:c5:b7:32:bd:4e:26:a4:13:59:19:51:9e:8a:e3:
ce:92:1f:99:b9:d8:5e:ae:3b:23:ae:de:5b:f6:ad:
cd:a6:78:dc:1f:52:49:b8:1c:fa:f9:14:d5:ff:bb:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D2:CD:CC:A2:AC:A3:DE:44:89:05:12:D2:56:88:CA:63:82:4E:31
X509v3 Authority Key Identifier:
keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31342e3139332e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.193.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:75:0f:2f:a7:9f:ae:f1:47:d3:af:c6:8e:2c:3e:b8:48:b1:
fc:be:c3:fc:05:25:d6:19:e5:55:cb:f9:8a:4d:99:c3:9f:d8:
db:2a:e4:83:e5:77:fc:78:fb:4e:c2:b0:a7:41:93:65:3b:84:
c7:ef:dd:af:03:ac:53:82:d0:a1:26:a3:60:0c:ad:da:27:d1:
83:1b:eb:80:64:ab:92:e6:07:35:e0:68:1b:80:81:1b:9f:cd:
ed:ad:73:fb:21:7a:45:67:da:91:fc:2e:2e:bd:0a:9b:64:d5:
33:45:26:c7:1e:8b:ba:e8:d0:a2:a8:47:cf:0c:35:ba:ad:be:
40:fe:de:e1:51:11:33:8d:a5:ff:d0:4a:ec:eb:60:5b:d1:a4:
c5:68:2a:19:5c:09:99:92:3a:d0:1b:8b:f4:3b:1c:83:9b:4c:
17:4d:d0:66:8d:99:31:63:59:e8:91:77:76:3a:97:0b:97:00:
2c:ac:cf:39:d7:3c:24:a0:30:b5:34:65:7b:b8:a6:c2:72:e4:
76:84:a6:f2:6e:97:e9:02:ce:19:e5:12:81:8b:d3:f8:da:06:
0c:a2:5f:84:ee:25:d8:64:62:c4:42:80:4f:b4:58:25:c6:31:
fe:e4:ff:af:80:e9:09:cd:f4:15:78:5f:d5:b9:0f:85:46:a4:
3f:a4:1f:90
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUTJOoXyJOeR/UQrwAExx1vEz/Uk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGQyYTlhNDc1ZTdiOTdlMWJlZmNmY2U0NzNjNzJhMDhl
YjQ3MWMxYTAeFw0yMzA1MDExMzE4NTFaFw0yNDA0MjkxMzIzNTFaMDMxMTAvBgNV
BAMTKEQ1RDJDRENDQTJBQ0EzREU0NDg5MDUxMkQyNTY4OENBNjM4MjRFMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg+PYWgLyQgs1GfRsbu7SHV8Eq
5jegQBox0gbrwtI14jD4BV2uSBzcXrp6J3kz3/JERpDV1RDx0g9KM306qwXDuPRB
egjz2QpEN4xXqTYInZjWtJOrmcJ2gwZIP0qv3KV3DtV7YMuPqlv+Kiqt4GrLIVRH
pomcqC680rh3yaBo5xYAkZ2N0TWayIcLMa51rNflhJIFFVuO6ZwIZ+w7XKfpkRjE
XOJvfgpA71k1+SUUBgVokYivIinefpJ6PrCc4qwrGd1UC9PgHQTrw3+5sLuogijF
tzK9TiakE1kZUZ6K486SH5m52F6uOyOu3lv2rc2meNwfUkm4HPr5FNX/uyP5AgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQU1dLNzKKso95EiQUS0laIymOCTjEwHwYDVR0j
BBgwFoAU3SqaR157l+G+/Pzkc8cqCOtHHBowDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xMDgvREQyQTlBNDc1RTdCOTdFMUJFRkNGQ0U0NzNDNzJBMDhFQjQ3MUMx
QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNTcWFSMTU3bC1HLV9QemtjOGNx
Q090SEhCby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzEwOC8zNDM1MmUzMTM0MmUz
MTM5MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzczMTMzMzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAtDsEwDQYJKoZIhvcNAQELBQADggEBAA91Dy+nn67xR9Ovxo4sPrhIsfy+
w/wFJdYZ5VXL+YpNmcOf2Nsq5IPld/x4+07CsKdBk2U7hMfv3a8DrFOC0KEmo2AM
rdon0YMb64Bkq5LmBzXgaBuAgRufze2tc/shekVn2pH8Li69Cptk1TNFJscei7ro
0KKoR88MNbqtvkD+3uFRETONpf/QSuzrYFvRpMVoKhlcCZmSOtAbi/Q7HIObTBdN
0GaNmTFjWeiRd3Y6lwuXACyszznXPCSgMLU0ZXu4psJy5HaEpvJul+kCzhnlEoGL
0/jaBgyiX4TuJdhkYsRCgE+0WCXGMf7k/6+A6QnN9BV4X9W5D4VGpD+kH5A=
-----END CERTIFICATE-----
Generated at Wed Sep 27 12:32:54 2023 by rpki-client on console-fra.rpki-client.org