Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38352e3234382e302f32342d3234203d3e20313336373837.roa
File: 34352e38352e3234382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: gpQO8CTYCA2x1tLJfcDQogyF9WHyTIugwszJW1qykyc=
Subject key identifier: C9:ED:AA:48:FA:9B:9F:09:91:D0:4B:A3:41:0C:02:43:3F:92:3E:AC
Certificate issuer: /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial: 213DFED98234D1DCA1976B2261DCFCC8C27B241F
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38352e3234382e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 01 May 2023 13:23:58 +0000
ROA not before: Mon 01 May 2023 13:18:58 +0000
ROA not after: Mon 29 Apr 2024 13:23:58 +0000
asID: 136787
IP address blocks: 45.85.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:3d:fe:d9:82:34:d1:dc:a1:97:6b:22:61:dc:fc:c8:c2:7b:24:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Validity
Not Before: May 1 13:18:58 2023 GMT
Not After : Apr 29 13:23:58 2024 GMT
Subject: CN=C9EDAA48FA9B9F0991D04BA3410C02433F923EAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:40:b0:f3:5b:fa:9e:c0:28:3c:37:e2:73:
24:fb:42:37:df:75:7d:6f:0a:41:6c:92:a4:12:87:
7c:e6:87:65:44:22:c1:a5:a8:01:1d:31:db:1e:06:
7c:3d:72:9c:a2:da:b9:19:15:9d:fe:10:f7:2f:56:
0e:24:77:11:0d:a6:d6:7e:e0:18:a0:98:c2:56:a7:
7f:e7:09:63:fa:f9:36:8f:80:74:20:76:f2:e2:cc:
43:d0:91:d3:2b:7d:17:8c:06:ab:ab:86:60:6b:c7:
85:b2:6c:c4:e4:46:24:a8:02:b5:42:b5:86:e1:32:
5b:a8:4b:16:61:38:2b:77:23:28:d3:da:ac:7b:6a:
67:29:e0:44:bb:ab:2f:cc:38:a8:6f:5c:b9:a7:e7:
d7:f0:40:e7:30:15:b2:ec:57:f7:21:d9:aa:bb:f3:
45:46:af:3c:34:ba:0c:a1:e4:64:60:05:4c:a9:6b:
54:77:7e:45:5b:0d:6a:14:5a:e5:2e:06:54:d2:23:
46:d6:ef:e4:a6:4e:c5:f2:7f:7d:ae:8c:11:fa:43:
6a:1a:ab:28:d4:03:32:55:33:f5:40:e0:ac:ad:f0:
ab:31:1f:2f:0f:d7:0e:ae:4f:8c:ae:41:5c:a1:aa:
02:e3:92:91:f2:40:37:05:55:a6:d0:4a:31:24:73:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:ED:AA:48:FA:9B:9F:09:91:D0:4B:A3:41:0C:02:43:3F:92:3E:AC
X509v3 Authority Key Identifier:
keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38352e3234382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:36:89:81:74:da:85:92:49:99:41:8b:2c:71:85:2a:20:fb:
71:22:c9:88:f5:49:de:a5:f8:31:14:0e:96:e1:51:44:fc:d1:
6a:37:b6:f4:b8:90:48:f3:ea:9d:50:95:b7:4f:88:e5:6c:a5:
6e:02:f9:6c:c2:96:3e:95:28:cf:15:2d:7e:ff:99:47:de:cf:
11:9a:e8:02:be:7a:c2:dc:1d:30:43:c0:f7:cd:6b:63:15:33:
89:f5:b2:f4:e0:8c:01:de:f4:c9:46:36:37:90:b2:05:c1:bd:
b8:c0:ec:ce:f9:84:f2:58:6d:e1:d5:2b:83:c5:d5:74:87:d8:
24:be:6e:79:1c:d6:78:88:31:a5:b0:25:73:60:17:9c:56:b9:
5b:c5:b8:b1:a3:ba:c4:79:c8:3c:3e:98:08:09:9b:1c:d4:90:
c1:a3:e4:42:6e:0b:55:c6:bf:20:e6:73:75:48:9c:eb:cf:22:
a3:02:23:10:e8:a6:eb:e9:b4:f4:d5:e7:0f:6b:3f:0f:d0:a7:
9f:ea:e1:13:10:ac:a5:d6:7d:b7:e1:5a:7e:7b:a5:9b:f0:df:
34:34:71:64:d3:a0:16:88:88:99:56:2f:b3:ae:c1:58:a7:92:
b9:fe:02:61:6a:d7:87:ba:df:ea:b8:f0:4e:66:4a:16:66:20:
2e:f8:48:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 12:48:16 2023 by rpki-client on console-ams.rpki-client.org