Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/34352e39342e3136302e302f32322d3234203d3e20323031333431.roa
File: 34352e39342e3136302e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier: /+WFxvVXqHxeUKEcZ4HjPCbqN4VTFZERZVQWp8PdKqY=
Subject key identifier: 15:0E:87:B4:94:D6:65:63:BD:DB:57:89:D6:BB:05:DB:B1:FB:DB:1A
Certificate issuer: /CN=5d2125f62f509085753ba79e14ab685d68fb498d
Certificate serial: 779CFC4EDB286CE17198DC58F7D50CC7A40950C9
Authority key identifier: 5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/34352e39342e3136302e302f32322d3234203d3e20323031333431.roa
Signing time: Mon 27 Mar 2023 08:27:48 +0000
ROA not before: Mon 27 Mar 2023 08:22:48 +0000
ROA not after: Mon 25 Mar 2024 08:27:48 +0000
asID: 201341
IP address blocks: 45.94.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:9c:fc:4e:db:28:6c:e1:71:98:dc:58:f7:d5:0c:c7:a4:09:50:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2125f62f509085753ba79e14ab685d68fb498d
Validity
Not Before: Mar 27 08:22:48 2023 GMT
Not After : Mar 25 08:27:48 2024 GMT
Subject: CN=150E87B494D66563BDDB5789D6BB05DBB1FBDB1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:4b:e3:e2:26:60:8d:dd:92:6b:ef:d1:8f:
f6:85:59:0a:42:dc:f1:6d:a0:67:93:6c:4c:e7:48:
8d:51:9c:c2:a1:b9:4c:9d:8b:02:da:eb:5f:4c:4a:
6e:98:12:4f:88:d5:24:81:e2:3e:6c:35:11:59:a0:
a9:c8:19:a5:16:9e:2f:8d:f4:cf:d2:c6:ae:9d:3d:
3b:7c:49:b4:53:09:be:0b:23:bc:6e:16:15:29:55:
8a:e2:c7:d3:bc:80:04:e8:95:55:8d:ad:e1:dd:83:
84:8c:eb:c5:fb:1b:4d:51:da:3b:53:b6:eb:53:c6:
5d:ce:e9:6f:82:29:66:db:f6:94:19:4e:5a:75:31:
f4:d9:c3:b2:72:47:f6:90:02:89:5e:7d:3b:e3:1e:
93:8d:82:ad:f6:36:53:5e:ac:df:f3:44:0c:c0:a6:
46:23:4a:4d:5d:11:60:5b:61:87:09:95:25:70:a0:
7d:10:6d:c7:63:05:60:79:23:c4:48:04:0c:76:b0:
e9:2f:d0:fb:64:de:d7:89:a8:54:f2:67:6a:33:a8:
c3:90:e1:58:8b:48:fc:2e:6f:21:0f:eb:0d:33:23:
bd:93:3d:8e:ca:5f:33:65:d0:5a:d5:e7:6e:0b:c3:
c2:5c:7f:e4:0d:3c:d6:6c:a3:f4:cb:72:4f:ea:15:
a2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0E:87:B4:94:D6:65:63:BD:DB:57:89:D6:BB:05:DB:B1:FB:DB:1A
X509v3 Authority Key Identifier:
keyid:5D:21:25:F6:2F:50:90:85:75:3B:A7:9E:14:AB:68:5D:68:FB:49:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/5D2125F62F509085753BA79E14AB685D68FB498D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSEl9i9QkIV1O6eeFKtoXWj7SY0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/164/34352e39342e3136302e302f32322d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.160.0/22
Signature Algorithm: sha256WithRSAEncryption
15:b6:c3:22:1c:3c:31:8f:e1:ca:0a:bd:d8:a4:40:f8:93:b1:
42:56:b2:b8:59:04:3c:bb:5e:b8:46:0f:3a:8f:5a:02:c1:cb:
7e:72:84:87:d6:4b:82:b4:e9:90:35:a1:fe:f5:db:40:54:13:
f3:ec:f6:36:69:75:2b:54:96:2c:cb:8c:8c:05:20:98:27:a6:
81:2e:aa:6d:14:4e:76:66:ec:fa:1d:9d:36:a5:1b:97:7b:dd:
a7:2c:57:fd:b8:ba:ce:13:7a:3b:3d:99:fc:9f:a0:20:fa:49:
41:6d:b0:bc:33:9b:2b:4b:24:e9:89:dd:e3:10:aa:66:fc:ab:
64:e7:7f:69:90:56:bb:4c:b3:43:d4:e8:e2:29:a3:a2:2a:d9:
e1:e5:fc:26:ba:83:52:9a:de:d2:17:c5:cf:78:49:a6:6b:43:
e5:f4:a0:fe:51:53:fb:ce:bc:6d:34:57:7e:67:3f:0a:a0:42:
74:4f:31:2a:9e:8f:14:c6:a4:a8:6f:6e:6d:66:19:99:4b:e0:
9b:30:df:ff:4c:e6:c7:19:d2:dd:5f:2c:74:e1:5f:b3:87:0d:
c9:34:e9:9b:a3:fa:b5:f5:fa:33:50:3f:48:9f:02:78:aa:9a:
e7:5f:61:51:bf:8e:79:de:d4:98:b8:dd:ce:4c:df:c1:97:81:
e0:59:26:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:22 2024 by rpki-client on console-fra.rpki-client.org