Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e39322e382e302f32322d3234203d3e2030.roa
File: 34352e39322e382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: sN0s2cnRhnAHMzzoO6nUKgN00HS0MdF1iG9yfvuSZUE=
Subject key identifier: AE:81:48:44:A6:4F:7E:45:C5:DD:76:B5:07:DF:8A:E9:A0:B3:C8:54
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 268D3451D3B733BAA970F864672845FB3BCE0269
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e39322e382e302f32322d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:31 +0000
ROA not before: Mon 27 Mar 2023 08:22:31 +0000
ROA not after: Mon 25 Mar 2024 08:27:31 +0000
asID: 0
IP address blocks: 45.92.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:8d:34:51:d3:b7:33:ba:a9:70:f8:64:67:28:45:fb:3b:ce:02:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 27 08:22:31 2023 GMT
Not After : Mar 25 08:27:31 2024 GMT
Subject: CN=AE814844A64F7E45C5DD76B507DF8AE9A0B3C854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:2c:df:5f:74:57:1f:34:68:1c:11:72:ff:
6d:24:a4:ab:00:62:77:e3:97:c8:c7:68:23:6d:1d:
55:ff:29:57:9e:6d:67:4a:44:b5:fa:0b:cc:f6:8b:
67:44:75:65:6b:9e:c4:e7:fd:20:7b:de:e9:cc:02:
f0:65:89:89:8a:6a:2d:b0:f4:90:f5:c2:5c:e8:b1:
8e:81:83:ac:70:a8:05:e3:ee:86:e4:96:ba:22:8c:
b7:f2:4f:f1:63:9c:6b:52:e7:62:6b:88:b0:5f:e0:
77:4a:ed:72:ae:7f:ad:c0:6e:a0:92:f3:8e:7c:0d:
5f:c4:95:6f:75:fc:8a:3c:27:b3:b9:0b:4d:de:6e:
35:8a:9f:a5:ae:03:4e:6a:1d:89:39:9f:fa:2d:0d:
54:73:7d:33:9a:54:35:df:de:6a:2f:93:f3:21:1a:
16:fa:01:ce:b0:66:c5:a2:a6:2d:e7:39:e3:9d:60:
ba:b1:90:77:a8:ea:6f:2d:5b:6f:81:85:0e:ec:07:
cf:45:ee:46:d0:70:14:b0:a9:29:b8:5e:96:6d:4a:
24:57:4e:4a:71:12:53:1a:bf:2e:9e:cf:ea:0d:ca:
80:51:ab:33:e7:a6:5d:48:32:1b:5c:24:78:ed:dc:
2e:94:1e:56:b3:83:f0:d9:73:da:c7:b7:a1:95:bf:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:81:48:44:A6:4F:7E:45:C5:DD:76:B5:07:DF:8A:E9:A0:B3:C8:54
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e39322e382e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.8.0/22
Signature Algorithm: sha256WithRSAEncryption
89:a5:3d:89:9b:d9:b5:e9:c2:42:b1:17:df:19:1f:1e:69:80:
a4:a2:b1:28:5f:84:4a:77:75:65:47:74:6b:2f:c0:04:25:da:
2b:c8:e2:1c:6f:4f:0c:24:fd:ab:21:ca:72:ee:8d:75:10:3f:
59:71:6b:2b:c5:45:66:02:c4:a8:2b:97:14:a2:3c:92:ff:00:
47:a4:f7:e0:e0:b2:89:df:3f:2d:ea:b9:41:10:6f:0d:57:7c:
7f:5f:39:97:e5:9c:89:44:36:51:75:34:5b:d0:07:75:11:a6:
de:30:8c:e9:5b:54:5b:15:2d:a6:95:3e:f7:47:4c:6d:d6:89:
5d:cf:c4:aa:bb:45:bb:4e:35:96:d5:b4:2b:01:1a:7e:90:2f:
1a:d4:d3:d4:fc:31:36:0e:05:02:83:0c:c2:d5:39:b9:6c:af:
b9:d8:27:17:c9:62:3a:55:17:f8:f4:b4:06:3e:38:6e:a2:e8:
7f:6d:39:67:4a:81:2a:0a:fc:a7:a3:34:bb:ea:be:f1:46:1f:
0e:9e:32:b3:ed:bb:c3:19:6e:50:af:ac:8b:a7:2a:89:91:aa:
ce:1f:00:c2:d4:67:88:bb:e5:f2:0d:eb:53:6b:dc:81:c4:d4:
8a:00:7f:85:af:2d:6b:a6:4b:ac:2d:a3:7b:8f:8b:a7:98:a0:
8a:56:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:04 2025 by rpki-client