Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31342e3139342e302f32342d3332203d3e203531313637.roa
File: 34352e31342e3139342e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: JY9kWoTTBZMpNyM1qDGCy2gVCtAsu3/Spnt7cfYL18o=
Subject key identifier: A3:55:D4:B8:E8:57:87:68:00:94:33:DF:E3:1E:25:8E:08:23:98:18
Certificate issuer: /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial: 4D733411592380EC45742B81B8B464C1193E16D8
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31342e3139342e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:47 +0000
ROA not before: Mon 27 Mar 2023 08:22:47 +0000
ROA not after: Mon 25 Mar 2024 08:27:47 +0000
asID: 51167
IP address blocks: 45.14.194.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:73:34:11:59:23:80:ec:45:74:2b:81:b8:b4:64:c1:19:3e:16:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Validity
Not Before: Mar 27 08:22:47 2023 GMT
Not After : Mar 25 08:27:47 2024 GMT
Subject: CN=A355D4B8E8578768009433DFE31E258E08239818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:0a:0f:2b:56:7e:09:bc:e6:eb:9d:e4:13:
65:e9:72:da:54:74:22:26:d3:f6:c1:5d:7c:f3:55:
48:4b:78:ab:34:cf:24:21:05:38:f1:6e:b4:93:9e:
e2:c9:aa:32:26:a1:26:19:e9:82:1c:1a:3c:e2:cf:
3d:d4:cb:97:03:fd:64:11:71:3b:d7:6f:b0:7d:26:
5d:e3:78:0c:a8:0f:92:d0:83:5e:a5:d4:50:eb:cf:
b8:95:75:cb:36:f1:8d:60:87:2a:0f:c1:95:e7:fa:
73:39:ca:86:ed:d5:fd:17:ca:5f:72:99:8d:fb:8a:
e2:76:7b:13:74:5d:c2:09:26:59:03:00:c3:4d:73:
28:ce:5d:fa:7e:c5:91:bd:dc:08:a7:bf:1c:cb:23:
54:70:01:6f:97:ce:94:7f:ae:3a:5c:74:62:ad:6e:
87:17:2a:34:94:b2:89:15:13:ec:72:bd:2d:e3:93:
89:41:41:34:02:d6:85:47:4e:20:c4:a3:3e:f8:42:
c7:60:7e:9d:c9:5f:85:52:7b:9e:ea:26:95:54:e1:
42:87:6f:95:2f:7e:57:fd:e1:83:2d:f7:0c:b0:d1:
bc:98:39:c8:6d:98:5c:e7:99:16:09:be:cb:e6:17:
97:1d:1a:8f:2b:98:a0:ec:02:72:5f:cf:e3:6e:28:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:55:D4:B8:E8:57:87:68:00:94:33:DF:E3:1E:25:8E:08:23:98:18
X509v3 Authority Key Identifier:
keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31342e3139342e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.194.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:d3:cb:a8:e2:a6:be:aa:38:73:d4:2c:b9:73:84:9a:6e:e0:
75:10:56:a4:b4:97:dd:fd:c3:99:d4:5b:6a:05:3b:ce:07:d7:
b0:8f:f8:6e:23:c6:ff:6c:91:a7:9b:f5:d6:b4:7d:bf:4e:94:
79:6f:ba:79:26:66:b4:94:02:50:3b:26:14:83:ca:69:e0:27:
a8:17:26:c6:63:30:bf:43:af:7e:94:e8:c7:34:bb:8e:4f:71:
ca:97:48:94:cd:5f:69:27:04:91:32:10:a2:b1:6a:45:5c:88:
51:69:4b:45:a5:e6:59:41:7d:ef:cd:18:86:a1:df:20:8a:e6:
f5:25:9d:4b:04:1e:62:ea:31:98:89:0d:06:e4:dc:c5:0f:bf:
77:49:bd:fc:a8:f8:f0:11:5b:6c:f0:5e:fd:47:51:00:25:f7:
cf:11:36:7b:47:eb:e4:2f:e9:42:37:f4:43:2e:7d:6c:00:00:
a6:e2:cb:a6:da:89:dc:ad:f3:fb:78:1c:b7:30:ff:ef:b3:03:
3f:e9:1b:4a:ba:78:33:9a:65:e1:28:47:2b:68:1d:a4:93:7f:
b0:ab:34:ff:ce:5b:ca:fa:44:e1:bf:d5:be:6e:19:69:df:d5:
2d:78:c8:ec:b8:77:cf:83:84:d7:67:dc:8a:29:a0:3a:63:d2:
1b:4e:37:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org