Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38382e3232312e302f32342d3234203d3e20313336373837.roa
File: 34352e38382e3232312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Llww96aC8C649iCECTA68NZAaid8QgWkgEZWpom3t/c=
Subject key identifier: 54:1F:BE:8F:4C:86:CC:D9:29:95:41:03:B9:BD:3F:F4:2E:8A:00:36
Certificate issuer: /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial: 2739EFFC40FB85297EA89E98D03EBE84775BF271
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38382e3232312e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 01 May 2023 13:24:12 +0000
ROA not before: Mon 01 May 2023 13:19:12 +0000
ROA not after: Mon 29 Apr 2024 13:24:12 +0000
asID: 136787
IP address blocks: 45.88.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:39:ef:fc:40:fb:85:29:7e:a8:9e:98:d0:3e:be:84:77:5b:f2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Validity
Not Before: May 1 13:19:12 2023 GMT
Not After : Apr 29 13:24:12 2024 GMT
Subject: CN=541FBE8F4C86CCD929954103B9BD3FF42E8A0036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cf:39:07:22:18:ea:62:83:2b:a3:04:47:15:
ee:f9:22:3a:25:e2:19:5f:e9:cf:b1:38:8f:75:3c:
07:b7:35:07:8d:42:be:0e:4e:35:d6:a9:27:fc:98:
a7:59:e7:b6:92:0e:c7:4f:ed:b9:6e:d7:ae:0a:f4:
c5:26:68:fc:75:4e:5b:f8:f2:cb:87:34:fc:10:8c:
3a:33:81:53:3c:d5:0d:35:a4:90:2b:df:ed:52:3c:
1d:62:06:99:fd:a0:20:4f:e6:78:c8:5d:78:8a:13:
85:de:51:2b:7f:d3:c6:41:e4:ae:6a:27:99:ee:97:
e5:18:bf:fc:5b:5f:d5:fb:d0:18:c6:d3:e9:f6:67:
62:38:aa:d2:9f:3f:b4:e7:ea:8a:eb:14:67:38:32:
9f:6b:40:9a:9c:b5:ba:8e:c9:97:20:4c:24:d6:b6:
9e:d1:e7:71:96:37:de:a2:0b:96:ff:76:ec:ef:9f:
bf:17:a5:c1:81:ce:6e:9b:46:d2:8f:de:2d:db:de:
88:e7:78:28:c0:04:87:ed:ae:6d:0d:45:4f:f6:e0:
5d:1b:d2:b4:1f:47:e0:42:48:65:54:5d:e0:ca:3b:
07:e7:21:67:74:95:ce:cb:f3:a1:41:be:ea:94:ce:
de:52:e8:9d:3b:0a:4d:33:3f:2f:e7:bc:e3:14:7f:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1F:BE:8F:4C:86:CC:D9:29:95:41:03:B9:BD:3F:F4:2E:8A:00:36
X509v3 Authority Key Identifier:
keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38382e3232312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.221.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:2c:16:d8:7e:ac:6a:04:38:b3:86:19:b3:1a:82:d9:0a:69:
85:cd:f2:05:53:e6:1a:f3:b5:83:25:ba:93:2a:11:92:a5:46:
49:ed:e9:32:f8:a2:93:b3:aa:9a:3c:b8:f7:72:a2:f3:c3:fb:
f0:6c:2f:a4:21:ad:e7:59:f1:c4:38:ff:f6:fb:8f:e8:80:3f:
9b:bf:b0:0b:73:41:8e:59:e2:07:e6:73:27:ad:85:be:c0:d4:
e1:c8:ca:4c:74:b1:37:a2:db:06:c3:03:73:9b:e4:dc:a5:c7:
66:5f:bd:42:1d:00:30:1a:ce:a8:80:a6:4e:0b:51:0f:22:55:
0c:2c:51:98:3b:12:81:fc:31:90:62:7a:9a:b1:4d:7c:9e:bb:
00:a2:68:a9:b4:cc:42:b5:02:1a:4a:26:13:0d:3d:b5:e3:aa:
41:30:f3:df:c8:7f:47:c5:4e:b9:6e:8a:ab:61:fe:b8:0f:da:
52:8c:97:22:ee:3d:e3:02:f5:f0:f6:20:18:74:e7:d5:93:20:
35:14:f1:11:b7:e5:83:b6:28:35:ba:e1:68:e7:30:2d:19:7a:
f9:29:25:4a:24:85:3a:b0:77:1a:a9:0f:18:31:31:1a:1a:7f:
36:e6:26:d2:f3:93:87:c1:20:9d:57:20:65:48:37:78:8c:63:
92:c6:f4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 12:48:16 2023 by rpki-client on console-ams.rpki-client.org