Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134332e302f32342d3234203d3e20383334.roa
File: 34352e3134382e3134332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: u7t3v3mTeGe5kuA6J5Sk2tXBdtU1JQo749SP1lUUSRU=
Subject key identifier: 11:BD:69:D8:46:56:62:FE:EB:94:50:AF:68:9C:24:74:79:59:B5:4A
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 059DB4CCE042EAEE5150BDB053AF09950D207AE8
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134332e302f32342d3234203d3e20383334.roa
Signing time: Tue 27 Aug 2024 00:03:01 +0000
ROA not before: Mon 26 Aug 2024 23:58:01 +0000
ROA not after: Tue 26 Aug 2025 00:03:01 +0000
asID: 834
IP address blocks: 45.148.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:9d:b4:cc:e0:42:ea:ee:51:50:bd:b0:53:af:09:95:0d:20:7a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Aug 26 23:58:01 2024 GMT
Not After : Aug 26 00:03:01 2025 GMT
Subject: CN=11BD69D8465662FEEB9450AF689C24747959B54A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:37:32:8c:9a:46:9c:57:65:38:f1:74:7a:
82:b4:79:28:f6:4c:5f:5a:69:7c:1c:8a:2f:a4:45:
51:fa:7d:00:0c:ae:cd:9c:50:9b:88:a1:83:9b:b1:
2d:52:dd:08:a1:1f:94:75:2d:b7:94:89:ad:80:23:
01:5b:81:75:f9:0d:89:cd:dc:cd:6c:4a:eb:2f:c9:
0e:02:d7:d2:2a:0c:0a:5f:87:04:26:f9:41:b8:5f:
75:61:2a:aa:c2:60:ff:51:80:15:8b:66:2d:d1:b5:
5f:42:99:63:47:7a:2b:2f:8a:10:52:2a:e4:34:2c:
1a:ed:35:12:9d:48:f7:c9:ed:65:06:e0:7d:a9:ac:
ba:88:44:29:24:f5:13:8e:23:81:a1:62:d6:a0:3a:
78:b8:67:52:31:20:46:da:66:8b:1e:75:9d:31:20:
1c:24:83:0c:21:0d:8e:7c:b3:c9:c4:04:ad:bd:35:
6b:45:90:5b:d5:66:f6:9b:6e:26:04:56:7a:34:c3:
0d:44:45:e0:f9:4f:ef:f9:dd:ef:83:83:c9:9e:96:
f2:b5:3b:dd:69:80:ae:79:e7:08:4b:90:91:ec:2f:
d7:9c:03:9e:86:b9:ac:d5:e6:aa:bb:33:c3:ce:2d:
fc:b1:df:71:11:60:39:42:c4:44:d3:45:dd:fe:3e:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BD:69:D8:46:56:62:FE:EB:94:50:AF:68:9C:24:74:79:59:B5:4A
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.143.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:0d:4b:3f:32:f1:7a:ec:23:5a:11:5a:31:4e:39:db:ec:7d:
4a:75:c7:74:a4:95:e7:59:b3:a8:08:65:db:62:15:7c:c0:8f:
84:2a:ad:5e:7f:bb:61:1a:ad:37:ec:8b:b3:5b:b8:ce:01:d6:
f5:16:66:d5:ba:fa:b6:93:9c:6d:69:4f:54:34:a3:e7:27:3f:
d3:9e:57:19:52:73:d6:91:db:86:93:1c:a8:eb:d7:1c:6d:06:
5b:f1:0e:c2:9b:43:f7:3d:3a:07:fe:ca:07:0d:7e:8a:77:95:
0a:01:6b:ba:e1:58:d0:61:3d:4f:d8:92:02:43:7e:0a:9c:07:
af:bd:81:2b:8a:ce:1a:50:c4:c8:7c:02:8b:68:66:c5:13:f0:
f7:95:5a:8c:32:6f:2d:f1:2c:ce:6d:7c:6b:6e:00:c2:11:30:
9a:63:4f:57:a7:63:0c:c5:d4:29:18:72:49:ae:1d:83:fc:da:
52:33:00:3f:99:96:38:ab:e9:1f:b3:a5:f1:a0:3e:15:8b:4c:
99:49:10:bc:74:0f:0f:86:16:bd:84:bd:20:37:c0:42:62:59:
35:17:c2:26:78:75:89:39:d7:07:f6:c2:a4:b0:4b:41:3d:4e:
71:9b:27:e1:de:cd:59:8d:bf:2e:7a:84:f7:31:28:40:4a:06:
4f:ee:a3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:27:55 2024 by rpki-client on console.sobornost.net