Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38382e3232302e302f32342d3234203d3e20313431303339.roa
File: 34352e38382e3232302e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: tEDtZqhFzWAM9uoeGkgGz1oEVzZhzg+0+7qgmZqiRvw=
Subject key identifier: E2:F1:3F:48:A3:62:3A:1B:67:E0:54:CE:1B:48:C6:78:28:4B:43:BD
Certificate issuer: /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial: 5083BACEB3D3F5F9E98EE3CDD09E74261DA1080C
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38382e3232302e302f32342d3234203d3e20313431303339.roa
Signing time: Mon 27 Mar 2023 08:27:46 +0000
ROA not before: Mon 27 Mar 2023 08:22:46 +0000
ROA not after: Mon 25 Mar 2024 08:27:46 +0000
asID: 141039
IP address blocks: 45.88.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:83:ba:ce:b3:d3:f5:f9:e9:8e:e3:cd:d0:9e:74:26:1d:a1:08:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Validity
Not Before: Mar 27 08:22:46 2023 GMT
Not After : Mar 25 08:27:46 2024 GMT
Subject: CN=E2F13F48A3623A1B67E054CE1B48C678284B43BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:fb:b3:c6:41:d2:02:e7:80:7b:b6:b5:c6:
89:f1:7b:5b:d8:94:f5:d0:b0:96:41:69:b7:d4:af:
f2:ac:d8:bc:fc:41:24:e8:17:f6:e7:b9:ac:c0:7e:
9d:6b:d3:ad:d6:75:fb:46:f7:06:97:b7:bd:2b:c0:
72:75:c8:64:aa:ba:d5:c5:8a:62:98:cb:05:bf:4c:
bc:3e:dc:8a:2b:f0:ed:70:25:34:16:f8:69:4e:b3:
dd:a3:dc:42:a0:4e:3a:25:56:3a:8e:25:ba:37:a7:
7c:df:dd:06:80:92:f1:c0:ad:56:c8:91:78:3e:35:
a3:8b:6e:2b:3c:52:72:5b:0e:ee:0e:b6:4f:b7:dc:
2e:0d:27:74:ad:99:cd:92:92:f0:b6:94:7e:e8:e8:
0b:05:37:00:4a:f5:65:85:45:a0:9a:c5:37:c0:3f:
af:d8:7f:8e:74:90:6e:b0:8a:83:d9:df:ea:02:dd:
98:69:c6:e4:68:e5:20:21:07:c3:19:a9:ff:06:61:
c5:f5:16:8c:dd:05:2c:5f:5c:12:04:fa:e7:ed:a8:
a5:8f:40:05:24:ca:b3:ec:a4:c1:d4:79:aa:72:ab:
fb:03:ca:e4:4b:94:ae:5b:50:56:ef:31:d9:ef:1b:
b1:73:58:9a:d6:28:d4:fc:74:fc:ca:e0:1b:ce:9d:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F1:3F:48:A3:62:3A:1B:67:E0:54:CE:1B:48:C6:78:28:4B:43:BD
X509v3 Authority Key Identifier:
keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38382e3232302e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.220.0/24
Signature Algorithm: sha256WithRSAEncryption
de:3e:71:c8:57:09:9b:59:e6:66:68:6a:46:85:2f:a9:e6:26:
df:b3:87:d1:03:e2:14:1d:22:41:d5:b6:a3:0d:5f:0b:58:a8:
a1:57:43:e4:dc:0d:b1:dc:3b:c7:b4:83:72:3e:e8:93:bf:1a:
c0:1b:03:3c:fa:13:48:2d:5e:5d:23:fb:db:d6:67:d6:67:b4:
1b:c2:88:5a:c1:43:46:48:28:bc:10:b1:d1:33:64:aa:4f:26:
67:b6:b6:b8:6c:6d:4d:01:90:cb:86:19:9e:a4:02:f7:d1:8b:
7f:ef:42:bc:03:c6:df:f5:87:40:f2:b3:77:d6:bb:b0:15:1a:
f7:78:cc:17:e3:54:76:69:1c:45:82:03:a7:8c:18:15:5c:62:
ce:52:4b:e1:bb:4f:31:90:4d:e0:36:f0:b1:a4:9b:8b:b4:d8:
9e:e6:a2:1d:bb:26:f2:6d:a4:55:70:6e:73:d2:94:2f:50:9c:
04:70:c8:e9:82:8e:33:ef:e5:65:ea:a2:db:42:13:37:92:1d:
63:52:1c:91:ee:a6:72:87:97:8d:6e:e8:44:43:f5:35:83:1f:
7d:7a:82:c4:21:6f:de:79:2f:c9:70:0d:83:d8:76:e9:8f:ab:
3d:73:9e:6b:30:5b:bd:13:46:ca:d4:12:d1:6e:45:1b:2b:1c:
d4:40:73:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 12:48:16 2023 by rpki-client on console-ams.rpki-client.org