Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38382e3232332e302f32342d3332203d3e203531313637.roa
File: 34352e38382e3232332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: hZVbqLIgsbUco0BGMx67/iiTNdHJYJXGoECR7myvP+8=
Subject key identifier: 6B:64:F5:1D:43:F4:9C:2E:C5:3B:A0:19:79:A4:64:DB:0A:BE:BB:E6
Certificate issuer: /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial: 5C946BD0D80082EFBE53DB9CFC4706F8A9E1A5BB
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38382e3232332e302f32342d3332203d3e203531313637.roa
Signing time: Mon 27 Mar 2023 08:27:47 +0000
ROA not before: Mon 27 Mar 2023 08:22:47 +0000
ROA not after: Mon 25 Mar 2024 08:27:47 +0000
asID: 51167
IP address blocks: 45.88.223.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:94:6b:d0:d8:00:82:ef:be:53:db:9c:fc:47:06:f8:a9:e1:a5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Validity
Not Before: Mar 27 08:22:47 2023 GMT
Not After : Mar 25 08:27:47 2024 GMT
Subject: CN=6B64F51D43F49C2EC53BA01979A464DB0ABEBBE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:86:cd:8d:a9:5e:19:90:7d:d4:1a:45:9d:
20:d7:21:d0:04:33:d2:d6:6b:ac:5a:94:5e:8d:8a:
0e:20:4d:65:d7:fa:ce:95:55:54:2b:33:6a:92:aa:
c2:d1:98:62:89:fe:ff:1e:b9:04:b9:95:4e:21:22:
5a:0d:44:5d:d8:04:4b:56:ec:93:ae:d4:72:31:e0:
e9:5a:d6:5e:12:4b:db:3d:c9:ef:76:46:16:97:f6:
ce:bd:c6:e0:c3:32:e0:e9:f9:e8:ee:f3:26:02:23:
da:d2:ff:b3:1d:49:3f:bc:c7:47:c4:c5:f2:39:6c:
0c:17:7c:ea:8d:8c:e4:ca:d0:b4:7d:3b:76:92:33:
f8:04:8c:ca:9e:0b:5b:83:a9:5a:33:68:05:20:e6:
da:6e:81:87:1b:24:16:70:cd:90:6f:ca:63:9f:10:
75:e8:ac:37:e9:03:c2:51:ed:b3:4d:0f:f0:f0:79:
f2:01:ed:00:4e:28:9f:a9:b4:22:a5:cf:91:d7:d2:
00:14:15:5d:87:5b:85:fa:8d:4f:64:70:52:dd:3d:
cc:72:d5:31:20:0f:8c:9e:3f:80:2e:91:b0:3f:d0:
55:fc:04:08:34:6d:0b:be:51:9b:7d:5d:6e:cf:8c:
1c:cf:e7:2f:3b:c6:0f:d6:24:27:56:cd:cd:48:79:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:64:F5:1D:43:F4:9C:2E:C5:3B:A0:19:79:A4:64:DB:0A:BE:BB:E6
X509v3 Authority Key Identifier:
keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38382e3232332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.223.0/24
Signature Algorithm: sha256WithRSAEncryption
39:95:cb:85:3a:74:30:b8:a6:12:75:94:68:23:4e:d3:ae:df:
65:d3:b1:e9:fb:f1:d5:82:f1:4f:b4:49:7c:7c:10:83:4a:69:
31:11:b2:ef:ba:a4:b4:dc:bb:dd:24:ce:ca:00:a3:b6:ce:ed:
62:d7:6d:df:80:be:3a:b5:c9:20:e8:3c:73:65:c5:c4:0b:1a:
a9:24:14:9e:20:26:f4:71:e6:7e:52:e9:db:4f:15:3f:26:99:
b8:98:3d:9a:0d:75:ae:09:4b:39:bc:37:1b:ad:78:43:10:fa:
59:e9:8e:c6:93:e0:7f:dd:1e:07:12:3c:0f:bc:6f:12:2b:e5:
93:b6:c4:c4:76:bd:29:33:64:53:21:37:aa:60:89:5c:64:99:
6a:b5:a3:d7:d8:c3:e8:4d:e6:48:65:26:0d:89:39:c6:95:80:
85:3c:fe:2e:87:e3:86:59:22:9f:0a:4b:23:92:59:01:d4:6e:
3b:89:99:78:72:70:72:6d:e7:b6:0d:cd:4a:e2:3d:26:66:3f:
9f:af:68:4f:57:32:86:c8:12:5e:4c:0d:50:7f:62:cb:88:0f:
be:56:ba:a7:23:af:66:92:08:98:af:19:50:57:3b:b9:14:2d:
12:91:73:4e:73:39:82:98:db:76:39:03:7e:a8:f8:0f:34:ac:
58:0c:e6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:10 2024 by rpki-client on console-ams.rpki-client.org