Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38352e3234382e302f32342d3234203d3e2030.roa
File: 34352e38352e3234382e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: uUUIv2skFHRQh+XT/VGbvERnTKVVgGdWzu/hvl7kE/Y=
Subject key identifier: F9:EF:A8:F6:DD:BA:A8:2D:BF:2A:99:E7:5C:91:FA:21:4C:8A:E3:E5
Certificate issuer: /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial: 0CCE21F4C240B199DFAA8B38B466E821C67D1AA6
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38352e3234382e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:47 +0000
ROA not before: Mon 27 Mar 2023 08:22:47 +0000
ROA not after: Mon 25 Mar 2024 08:27:47 +0000
asID: 0
IP address blocks: 45.85.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:ce:21:f4:c2:40:b1:99:df:aa:8b:38:b4:66:e8:21:c6:7d:1a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Validity
Not Before: Mar 27 08:22:47 2023 GMT
Not After : Mar 25 08:27:47 2024 GMT
Subject: CN=F9EFA8F6DDBAA82DBF2A99E75C91FA214C8AE3E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a2:ce:0a:9c:93:ef:38:ea:06:57:d1:73:4b:
f0:07:e2:ea:4a:82:b9:76:00:94:47:7d:f3:cc:d3:
2b:b8:2a:d3:96:44:06:a2:5a:91:e1:6c:47:a4:10:
93:42:3c:cd:11:f8:1d:98:51:34:b8:d2:b9:7e:94:
fa:4d:86:75:5b:bc:76:77:32:65:1c:c3:ef:b3:a2:
ec:bd:09:c8:57:9c:60:e2:83:38:52:ea:e9:15:33:
c8:bc:da:81:00:57:de:8d:c5:2d:28:2f:bd:d9:80:
9f:a0:b3:9e:41:a9:53:3d:c4:ef:96:c0:63:44:19:
3c:09:c3:ad:f5:61:f8:2d:7f:e6:27:27:ff:07:ee:
5b:ce:e4:f4:20:80:33:14:ff:b8:42:b4:e3:b5:2f:
82:c7:78:45:a2:51:f7:40:96:bf:8c:62:a8:31:ab:
a4:d9:1b:58:85:bc:0d:63:d4:a6:48:3c:3a:9b:5b:
b4:c9:88:77:5b:c0:ea:7e:7b:88:0a:b3:3c:16:fe:
29:99:81:b8:d1:fd:dc:66:f1:79:b0:09:cd:d4:25:
52:77:28:75:5c:27:85:50:f7:38:0b:32:7a:d1:47:
71:39:8b:d8:c0:ec:8d:92:cf:eb:5e:bc:5a:78:4a:
8c:a0:d2:36:2a:b3:38:76:79:3b:24:4b:cb:7f:9b:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EF:A8:F6:DD:BA:A8:2D:BF:2A:99:E7:5C:91:FA:21:4C:8A:E3:E5
X509v3 Authority Key Identifier:
keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38352e3234382e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.248.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:3a:2e:07:57:d4:fd:6b:b6:de:a0:20:00:f5:ca:3a:10:55:
12:be:1f:33:9a:4b:ac:56:d0:49:45:27:2b:b3:e4:b0:74:9e:
53:69:ba:4d:09:83:19:55:67:bc:4b:12:30:25:3e:e0:53:39:
a8:77:4d:14:1c:55:a0:3f:c0:f1:d1:38:b1:c5:42:0b:63:17:
0e:7c:b9:cd:7b:70:35:82:04:3a:b6:dd:9c:2f:8a:37:d1:d6:
be:87:57:c3:f9:4f:ba:2b:c7:a4:05:89:d8:6b:24:1a:9f:32:
20:f2:c7:d8:7f:15:43:40:dd:16:3b:36:1e:2a:2c:2f:e4:dc:
98:c3:ea:be:0c:ec:f4:c6:3b:d8:6d:0e:14:9c:3e:35:06:cc:
37:48:a2:08:6f:54:0b:9f:12:48:4f:6d:6e:05:bd:e2:7c:4c:
04:66:05:60:cb:6f:22:18:0b:cf:e7:9f:c3:05:21:81:ca:39:
8c:2a:a2:33:a1:a1:57:a6:5a:14:05:1d:e0:c0:a4:ba:0f:85:
51:b5:e9:58:70:13:76:82:1f:ed:02:d6:d7:37:68:30:8e:5c:
cc:e0:c3:0e:21:59:4d:62:b6:02:71:fb:eb:57:55:33:ae:44:
8b:9f:9f:e9:6e:6c:cc:00:a6:4d:96:66:c5:f1:3b:b3:37:c3:
83:23:ae:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org