Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/34352e3135362e3131372e302f32342d3234203d3e20383334.roa
File: 34352e3135362e3131372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: mXptro8SMfSL3ViCIAXW8hIoif2+wmk2eRxfge/gp3s=
Subject key identifier: 3F:7A:D0:70:D5:F8:E3:BE:CD:00:96:DC:DA:3B:E9:16:66:08:10:44
Certificate issuer: /CN=06da19f4285eb04d0310733f4ac00107b73337ad
Certificate serial: 609FA2A0555F8F3457FEAEA81D6F147E4C2836FF
Authority key identifier: 06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/34352e3135362e3131372e302f32342d3234203d3e20383334.roa
Signing time: Sat 31 Aug 2024 00:02:44 +0000
ROA not before: Fri 30 Aug 2024 23:57:44 +0000
ROA not after: Sat 30 Aug 2025 00:02:44 +0000
asID: 834
IP address blocks: 45.156.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:9f:a2:a0:55:5f:8f:34:57:fe:ae:a8:1d:6f:14:7e:4c:28:36:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da19f4285eb04d0310733f4ac00107b73337ad
Validity
Not Before: Aug 30 23:57:44 2024 GMT
Not After : Aug 30 00:02:44 2025 GMT
Subject: CN=3F7AD070D5F8E3BECD0096DCDA3BE91666081044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1f:02:89:95:df:9d:12:ee:96:5d:83:51:58:
38:14:b9:53:3a:92:30:91:ec:60:8d:c5:ba:a4:89:
ae:07:cc:61:bc:dd:f5:0e:2e:0e:a1:eb:1b:cf:75:
f7:f5:31:a7:37:b6:69:c5:89:3e:8b:4f:39:39:38:
17:e2:0a:52:64:12:0d:3d:b5:e8:4b:d0:03:1d:5d:
e6:a6:f8:e3:19:a0:a5:2f:69:34:53:5e:6a:78:16:
c1:7e:87:c9:20:81:d9:a8:97:4d:9d:a6:28:57:b7:
13:9f:93:22:b2:59:4d:da:35:e4:b5:90:43:5a:fa:
94:28:02:8b:18:95:7a:a3:99:98:f0:ca:35:c3:63:
72:a0:78:b1:5d:26:60:a6:dd:33:e8:35:64:78:80:
bd:15:8e:a7:7a:d8:aa:65:6b:47:77:aa:cb:3e:74:
8b:46:6b:af:ac:2b:21:c5:8f:67:de:3e:67:94:6d:
dc:6a:5d:d1:9f:17:3a:84:5a:cd:0d:08:ba:32:e2:
f1:9f:73:d4:dd:7f:35:74:32:46:fb:a6:df:61:db:
f7:fb:67:54:c4:f6:b9:dd:fc:a8:4f:25:b9:49:38:
e5:59:b6:e2:bd:cb:9a:ef:e2:05:2b:d1:97:28:f0:
29:e9:62:ab:b9:a7:2b:b4:0a:53:2c:f5:14:c1:e5:
3c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7A:D0:70:D5:F8:E3:BE:CD:00:96:DC:DA:3B:E9:16:66:08:10:44
X509v3 Authority Key Identifier:
keyid:06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/34352e3135362e3131372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.117.0/24
Signature Algorithm: sha256WithRSAEncryption
83:20:7f:1a:cd:90:e1:42:61:ef:20:25:a4:a5:86:42:40:04:
3c:92:14:ce:4c:0b:75:18:6a:49:85:a5:dc:78:41:4a:bd:0f:
92:ce:51:96:06:6d:14:ed:87:b2:64:c3:b6:10:f9:69:37:87:
38:1d:c0:63:04:8c:23:f4:47:64:a4:84:bb:0c:9d:01:82:d0:
ea:f4:e9:e3:0a:b2:49:dc:5f:ca:bf:43:54:f0:44:d8:ad:47:
20:e0:b1:3c:16:dc:b7:58:0d:57:3a:55:9c:38:f3:fd:65:72:
7d:2a:f5:c4:f4:a1:52:fe:59:62:b5:41:d1:bb:7a:fe:b4:dd:
dd:01:74:0c:e2:dc:07:b0:b9:37:5b:93:e4:46:25:c5:9e:c5:
f0:ef:f2:69:4f:a4:0d:e8:f5:ee:c1:23:51:4b:12:97:31:70:
77:1a:d5:dd:92:32:d6:07:48:be:60:82:e7:bc:ef:0b:11:27:
65:48:27:15:83:e7:b5:c4:db:f6:0f:6e:c5:1a:48:d8:86:7e:
69:c4:9c:8b:b5:13:3c:b0:5c:b7:48:7d:d2:c7:e4:4b:d6:d5:
fb:75:5d:6c:60:3b:c6:97:eb:28:dd:60:d2:c4:34:79:f8:4a:
8e:f6:03:d6:fa:2b:37:55:e9:82:97:98:70:10:7c:f8:57:0c:
37:89:4b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:27:55 2024 by rpki-client on console.sobornost.net