Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31342e3139352e302f32342d3234203d3e20313431303339.roa
File: 34352e31342e3139352e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: bvhu2rkp7xQiXVjoieivqScLrl94j3LWjenjDxLs8V4=
Subject key identifier: 89:CB:A7:DB:4C:FA:31:CC:A3:DE:36:7D:C7:92:93:51:55:E4:70:6D
Certificate issuer: /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial: 1B0A79FFE5CE881C84463465BE7FB696B6A739EC
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31342e3139352e302f32342d3234203d3e20313431303339.roa
Signing time: Mon 27 Mar 2023 08:27:47 +0000
ROA not before: Mon 27 Mar 2023 08:22:47 +0000
ROA not after: Mon 25 Mar 2024 08:27:47 +0000
asID: 141039
IP address blocks: 45.14.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:0a:79:ff:e5:ce:88:1c:84:46:34:65:be:7f:b6:96:b6:a7:39:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Validity
Not Before: Mar 27 08:22:47 2023 GMT
Not After : Mar 25 08:27:47 2024 GMT
Subject: CN=89CBA7DB4CFA31CCA3DE367DC792935155E4706D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ff:7e:b0:74:9e:0a:d6:ae:40:dd:5d:b9:06:
55:ee:32:8c:9c:6c:94:59:2b:c2:84:27:bf:20:2c:
90:c4:1e:84:48:86:f6:4f:0b:53:09:cc:a4:11:98:
e8:41:9e:fe:d1:b0:bb:61:90:22:4f:97:73:5e:07:
d2:ef:91:da:44:7f:82:70:af:f5:11:29:58:b6:14:
5b:66:19:87:31:b4:fb:b6:0a:03:ca:09:0d:9f:22:
62:ce:ec:24:18:93:87:2f:64:49:fa:c9:26:85:d9:
d9:74:14:74:19:91:37:68:5d:0a:54:08:96:a1:8c:
7e:d5:c5:30:d2:63:4c:f2:21:45:71:be:2f:07:d6:
c4:3a:ea:d9:d9:66:0e:7c:35:d9:36:e3:1f:74:e0:
2f:53:5d:96:07:f9:71:22:e0:74:37:e2:99:c4:0e:
8a:e4:95:74:f6:4d:8f:9e:8f:c5:0e:6a:52:9d:60:
dc:ae:0b:aa:7c:cd:ac:59:b3:7c:b8:48:ce:2f:c9:
eb:42:f2:2c:90:68:68:87:02:70:a7:54:b0:52:57:
3c:78:ee:2b:4c:2b:de:d1:e7:45:7b:9d:36:27:86:
c4:03:84:89:3f:8d:34:f9:77:70:81:79:7a:26:5e:
8a:80:96:fd:82:8f:b3:8b:ac:bc:c1:3f:e7:a3:f0:
38:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CB:A7:DB:4C:FA:31:CC:A3:DE:36:7D:C7:92:93:51:55:E4:70:6D
X509v3 Authority Key Identifier:
keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31342e3139352e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.195.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b7:bb:2c:30:6f:ca:68:23:58:ef:0a:d0:1b:f0:16:d2:96:
10:81:ce:22:91:a1:0d:0f:c3:1b:47:fd:7e:50:cb:cf:db:71:
2a:a5:a5:75:d5:08:14:55:cf:d9:97:49:a2:31:c0:ef:75:45:
85:d6:6e:17:17:26:57:7a:cc:f3:cb:92:5b:3c:7e:aa:b7:98:
ff:e0:66:82:29:ae:c2:61:16:ea:7d:98:99:e9:d9:c3:e6:a5:
49:29:0a:dd:84:74:cc:e7:df:79:7d:0d:e9:1e:4d:c0:17:d8:
ca:de:ba:f8:63:f9:fb:77:cf:5f:fd:d5:ca:d5:20:e0:45:fe:
c1:52:34:68:59:5d:9c:50:82:7d:df:c8:7e:03:4b:e2:c7:8c:
b3:72:f0:5d:86:02:b0:f7:e6:eb:c1:29:d8:c6:d6:aa:d4:69:
82:45:8e:4e:10:bb:af:87:06:e6:7d:18:d3:87:cc:90:37:a2:
50:89:28:fa:6f:66:aa:7a:e9:9e:7c:fc:84:cc:ff:8e:a5:6d:
ad:33:53:9e:d8:fb:a7:3d:75:3d:a1:f2:1e:01:cf:0c:1e:f3:
ee:af:ca:91:e0:e7:ab:33:b3:0c:1b:ec:6d:1e:f6:9d:de:39:
12:f9:5b:8e:33:35:94:1b:a4:ba:1e:31:89:7f:9f:62:4b:2a:
9c:cb:25:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 12:32:54 2023 by rpki-client on console-fra.rpki-client.org