Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134322e302f32342d3234203d3e20383334.roa
File: 34352e3134382e3134322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 3XmAD9Sk5knR4RVfBZgQ7jKISmSTyYF0nQsof4wy4nQ=
Subject key identifier: 57:B5:CD:2E:85:68:5D:14:69:65:BA:BB:A8:12:E1:CE:3F:D0:58:BD
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 60404D1EBF0361F9BB9B81F0DDBEF5B0B65F5EC3
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134322e302f32342d3234203d3e20383334.roa
Signing time: Sun 21 Apr 2024 10:05:39 +0000
ROA not before: Sun 21 Apr 2024 10:00:39 +0000
ROA not after: Sun 20 Apr 2025 10:05:39 +0000
asID: 834
IP address blocks: 45.148.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:40:4d:1e:bf:03:61:f9:bb:9b:81:f0:dd:be:f5:b0:b6:5f:5e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Apr 21 10:00:39 2024 GMT
Not After : Apr 20 10:05:39 2025 GMT
Subject: CN=57B5CD2E85685D146965BABBA812E1CE3FD058BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0d:b9:cb:69:f7:3a:c2:7d:5d:d4:24:d8:05:
63:3d:0c:ed:97:52:59:ea:b2:5f:48:ca:cc:d8:96:
2c:c5:4b:c4:8d:26:b0:bb:22:a3:55:95:7a:27:0a:
08:0c:d3:d0:c2:50:66:36:8a:97:3c:03:2d:7d:85:
72:b6:2a:1d:42:c5:ce:c5:01:e0:f3:d0:b4:4d:40:
4d:a8:8c:0d:f8:6e:3c:84:65:50:e0:c6:ac:5e:4e:
cf:5c:14:38:b3:41:cb:10:00:07:a1:c4:bd:8f:84:
f9:49:1f:03:de:a8:2a:ee:f8:1d:54:0a:fe:09:42:
cf:4d:c4:14:dd:1c:70:03:2d:62:9f:25:ee:18:3b:
c8:96:cc:0e:92:c2:25:38:61:d4:d9:1d:20:ea:af:
50:03:a4:60:ab:a6:87:59:19:4f:2f:a8:fe:35:a5:
7c:8f:79:84:b7:53:00:c6:3f:42:6b:6b:b9:37:13:
e3:06:b7:d0:c3:b5:c3:2f:f5:7f:8d:30:c4:b0:71:
72:8e:25:45:3e:f4:9e:e7:5e:bd:9e:93:bb:ae:d5:
10:2b:ba:ff:36:f6:24:72:96:29:1b:33:2b:26:4a:
fa:57:18:47:d7:24:2d:41:4f:bd:71:32:15:5f:ea:
7e:e2:cd:ca:ad:d9:ef:bf:2e:fd:ba:fe:6a:3a:1f:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B5:CD:2E:85:68:5D:14:69:65:BA:BB:A8:12:E1:CE:3F:D0:58:BD
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.142.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:09:d1:17:bd:ec:60:d2:35:34:80:5b:58:29:54:2e:a9:f9:
5a:1e:0a:ab:0a:e1:a4:21:44:67:86:2c:8a:5a:ba:d9:e3:38:
e9:91:95:8b:01:06:91:b0:a3:9f:a5:04:0c:7a:0c:da:67:d0:
11:a4:83:0f:7a:76:b9:e6:5a:0e:9b:c2:3f:7b:c9:f1:ed:19:
92:60:f1:d0:e2:ec:f0:65:f2:a7:80:d7:aa:58:4e:12:85:e5:
2f:e2:64:70:ca:52:d8:eb:eb:66:f5:eb:53:f2:1f:4a:47:6e:
22:bd:75:ed:80:a6:bb:05:dc:91:53:57:26:02:3f:b3:a5:54:
3e:03:36:5f:36:9f:ae:66:86:fa:26:d8:c5:ca:90:21:fd:7e:
a7:93:3a:ca:37:24:68:f5:e1:ab:01:22:62:8d:d4:2f:a0:79:
56:9c:be:40:52:0a:20:30:21:98:19:89:72:e9:05:1f:3e:6d:
04:9e:7b:6b:74:2b:26:5e:b4:4a:69:c1:f4:a0:a4:a5:15:99:
4b:2e:16:d4:08:82:cd:45:11:c8:50:09:6c:73:c6:3e:75:96:
a9:06:89:47:13:ef:b2:1a:2f:a0:eb:4e:8e:ac:04:4e:d9:c5:
88:b1:eb:8e:e2:b8:ef:8d:db:f9:f2:e4:c4:9a:5c:bc:a8:46:
31:56:f4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 03:23:17 2024 by rpki-client on console.sobornost.net