Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/34352e31342e3231322e302f32322d3232203d3e20323031333431.roa
File: 34352e31342e3231322e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: X9q2XGDbJqvY20c0GxR5hGFzInGUZftLWEft7qz7ohQ=
Subject key identifier: B0:38:91:8E:10:F1:08:1F:FE:50:48:A9:42:79:1D:22:DC:9E:D1:23
Certificate issuer: /CN=5d2125f62f509085753ba79e14ab685d68fb498d
Certificate serial: 412C2BE5B96149E1B2378AC6EEC82F64AB2E850F
Authority key identifier: 5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/34352e31342e3231322e302f32322d3232203d3e20323031333431.roa
Signing time: Mon 27 Mar 2023 08:27:48 +0000
ROA not before: Mon 27 Mar 2023 08:22:48 +0000
ROA not after: Mon 25 Mar 2024 08:27:48 +0000
asID: 201341
IP address blocks: 45.14.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:2c:2b:e5:b9:61:49:e1:b2:37:8a:c6:ee:c8:2f:64:ab:2e:85:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2125f62f509085753ba79e14ab685d68fb498d
Validity
Not Before: Mar 27 08:22:48 2023 GMT
Not After : Mar 25 08:27:48 2024 GMT
Subject: CN=B038918E10F1081FFE5048A942791D22DC9ED123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:0f:d7:69:a0:89:e2:aa:9a:12:7a:89:69:
e8:7d:c9:7a:20:3b:e1:98:33:43:da:95:2d:2f:e3:
cd:c1:ec:95:fa:69:1c:73:06:d7:1c:5d:ed:cd:f9:
d5:4e:48:f4:1f:86:1b:2f:f4:dc:36:9d:a9:47:04:
85:e3:97:72:b3:d1:d8:3b:1c:c0:d5:02:ad:26:62:
f4:f8:48:60:2d:9a:f2:a5:f0:0f:f9:39:4f:52:e2:
f7:e2:b2:68:7c:52:a9:b7:f9:05:3b:b3:63:05:11:
49:d6:13:fc:39:67:b5:a8:17:80:36:6e:da:54:2e:
79:81:27:62:4e:11:f0:d3:05:5f:07:6c:fb:ad:36:
4c:10:ec:dc:59:e7:d9:35:e0:7a:cf:b7:87:78:a6:
91:95:43:1f:dc:37:3c:01:eb:cd:13:f4:ed:b7:03:
e8:1a:6d:f8:9e:00:0d:9b:a1:81:b3:a2:16:17:4a:
a1:7c:9d:cf:16:62:f9:25:0c:c5:25:b1:63:cd:46:
58:91:7d:18:cd:43:95:77:35:34:5c:a7:bd:ed:93:
16:8a:7b:5c:c1:45:31:97:95:d6:95:2a:1f:40:a6:
0d:9d:ad:c2:e8:ff:7d:29:06:d1:6d:6e:31:b4:01:
d1:2b:36:9e:6d:c1:c0:69:8d:aa:5f:1f:d4:51:16:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:38:91:8E:10:F1:08:1F:FE:50:48:A9:42:79:1D:22:DC:9E:D1:23
X509v3 Authority Key Identifier:
keyid:5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/5D2125F62F509085753BA79E14AB685D68FB498D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/34352e31342e3231322e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.212.0/22
Signature Algorithm: sha256WithRSAEncryption
49:16:f4:d3:01:70:4a:88:75:7b:e3:e2:ff:5f:e3:fe:15:e8:
a4:46:ee:64:d2:eb:59:ae:63:5a:ff:62:c4:1a:36:1c:27:63:
d1:dd:06:ec:1e:1f:57:53:ff:78:a1:47:8e:48:fe:5b:89:f5:
e2:a5:ea:5a:a3:96:67:ac:75:f8:78:aa:e3:5c:66:10:1d:14:
fc:d7:55:9b:8b:ed:eb:e9:d2:07:fa:68:ea:5a:9b:c1:8a:89:
f1:e4:60:04:41:fe:39:01:97:25:73:8a:24:46:3d:5f:c1:86:
02:ce:bb:d6:6b:6e:16:e8:40:72:56:95:ba:53:17:1f:d9:bd:
a1:94:5b:8b:d8:a2:8b:b3:47:4a:cb:63:96:b4:a9:21:d7:d7:
ad:ae:76:3c:67:13:15:49:c4:6f:5d:63:9a:cc:8e:82:cc:7f:
0c:03:a4:d5:67:36:e6:47:f0:d8:a5:10:cd:63:9c:1c:3c:ec:
1d:9a:67:37:c3:f4:f4:ea:0d:3e:8e:d9:59:4a:b2:f3:43:95:
59:a1:9e:0b:ca:38:45:d6:c1:f5:43:a5:f4:5a:30:31:76:9a:
e3:dd:81:5f:39:f5:0c:0b:b7:ce:61:a7:23:96:12:29:95:07:
45:2c:3f:0e:bb:61:b2:2c:65:62:5a:fd:c8:15:70:a8:13:3d:
55:c4:fc:cc
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUQSwr5blhSeGyN4rG7sgvZKsuhQ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWQyMTI1ZjYyZjUwOTA4NTc1M2JhNzllMTRhYjY4NWQ2
OGZiNDk4ZDAeFw0yMzAzMjcwODIyNDhaFw0yNDAzMjUwODI3NDhaMDMxMTAvBgNV
BAMTKEIwMzg5MThFMTBGMTA4MUZGRTUwNDhBOTQyNzkxRDIyREM5RUQxMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Eg/XaaCJ4qqaEnqJaeh9yXog
O+GYM0PalS0v483B7JX6aRxzBtccXe3N+dVOSPQfhhsv9Nw2nalHBIXjl3Kz0dg7
HMDVAq0mYvT4SGAtmvKl8A/5OU9S4vfismh8Uqm3+QU7s2MFEUnWE/w5Z7WoF4A2
btpULnmBJ2JOEfDTBV8HbPutNkwQ7NxZ59k14HrPt4d4ppGVQx/cNzwB680T9O23
A+gabfieAA2boYGzohYXSqF8nc8WYvklDMUlsWPNRliRfRjNQ5V3NTRcp73tkxaK
e1zBRTGXldaVKh9Apg2drcLo/30pBtFtbjG0AdErNp5twcBpjapfH9RRFl7DAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUsDiRjhDxCB/+UEipQnkdItye0SMwHwYDVR0j
BBgwFoAUXSEl9i9QkIV1O6eeFKtoXWj7SY0wDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNjQvNUQyMTI1RjYyRjUwOTA4NTc1M0JBNzlFMTRBQjY4NUQ2OEZCNDk4
RC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hTRWw5aTlRa0lWMU82ZWVGS3Rv
WFdqN1NZMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE2NC8zNDM1MmUzMTM0MmUz
MjMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjMwMzEzMzM0MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAItDtQwDQYJKoZIhvcNAQELBQADggEBAEkW9NMBcEqIdXvj4v9f4/4V6KRG
7mTS61muY1r/YsQaNhwnY9HdBuweH1dT/3ihR45I/luJ9eKl6lqjlmesdfh4quNc
ZhAdFPzXVZuL7evp0gf6aOpam8GKifHkYARB/jkBlyVziiRGPV/BhgLOu9Zrbhbo
QHJWlbpTFx/ZvaGUW4vYoouzR0rLY5a0qSHX162udjxnExVJxG9dY5rMjoLMfwwD
pNVnNuZH8NilEM1jnBw87B2aZzfD9PTqDT6O2VlKsvNDlVmhngvKOEXWwfVDpfRa
MDF2muPdgV859QwLt85hpyOWEimVB0UsPw67YbIsZWJa/cgVcKgTPVXE/Mw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org