Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231372e302f32342d3234203d3e20323135323837.roa
File: 34352e382e3231372e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: 8jFwx4KnZqbnDojr8jg1Na+6GGq/16NiDQAS7msx6ic=
Subject key identifier: E8:0A:64:A7:8C:A8:CF:A5:A2:2B:5F:F3:C0:9D:B2:96:CC:F8:92:F5
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 3602DF4FE1D1808EEF3F313642FEB414F4BBE74E
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231372e302f32342d3234203d3e20323135323837.roa
Signing time: Wed 18 Dec 2024 11:47:53 +0000
ROA not before: Wed 18 Dec 2024 11:42:53 +0000
ROA not after: Wed 17 Dec 2025 11:47:53 +0000
asID: 215287
IP address blocks: 45.8.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:02:df:4f:e1:d1:80:8e:ef:3f:31:36:42:fe:b4:14:f4:bb:e7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Dec 18 11:42:53 2024 GMT
Not After : Dec 17 11:47:53 2025 GMT
Subject: CN=E80A64A78CA8CFA5A22B5FF3C09DB296CCF892F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e9:9c:46:68:08:c3:15:49:52:3f:6e:bb:7b:
ee:ef:2c:50:e8:73:85:91:49:c3:1f:df:2a:57:4d:
3e:86:de:4d:9e:9b:6f:58:94:60:f3:aa:ae:08:05:
84:9a:c4:89:ac:26:f7:12:a4:b9:a5:7f:35:83:bc:
76:7d:41:2b:2c:37:e4:26:af:58:7e:9b:d8:57:9f:
02:42:94:3e:a5:9d:a7:32:2d:da:51:2c:bd:b4:78:
c8:8e:f6:47:d6:40:0d:68:95:b6:01:b2:5c:6f:37:
a7:32:b2:eb:fc:a7:c7:db:f2:56:22:27:ff:f9:15:
94:24:f7:ac:94:08:5b:79:3a:56:5d:d9:22:dc:2f:
f5:90:85:69:35:b4:89:79:30:19:d2:5b:79:53:be:
c6:87:84:2f:eb:cb:3f:dc:a5:07:18:54:c9:57:58:
1b:a5:e1:05:ee:bb:3c:75:9f:30:93:a5:a3:3e:29:
d6:a2:aa:af:09:b8:c6:7a:fe:69:97:22:33:34:01:
1d:f9:42:6c:fd:06:95:1b:3a:49:eb:2b:20:31:82:
93:d3:90:1d:32:14:75:0e:0b:60:b1:e4:f2:8f:da:
2a:d3:cd:0e:e2:4b:12:e6:97:7a:1a:df:2e:22:72:
f3:ef:0c:66:e3:da:38:a5:42:32:73:28:3d:78:33:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:0A:64:A7:8C:A8:CF:A5:A2:2B:5F:F3:C0:9D:B2:96:CC:F8:92:F5
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e382e3231372e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.217.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:fd:58:c1:7b:c8:d5:93:48:3b:98:5d:db:cc:51:05:5f:59:
8f:61:bf:9d:cc:98:02:7b:1d:30:b3:29:93:44:1e:47:a8:0a:
ce:d5:39:0b:ac:a9:1c:7f:63:32:e9:fb:93:89:8f:d8:8a:a9:
2c:aa:00:cb:9d:6a:fb:06:fe:6d:0d:07:fc:db:4d:de:67:4f:
1e:86:eb:a0:ed:f8:40:78:1c:16:57:d2:65:75:34:8a:dc:17:
10:02:74:c8:8a:19:3a:dd:5d:5c:8b:0b:42:77:af:8b:5a:54:
b7:29:13:3c:13:6d:81:b5:57:41:5d:18:b1:81:2e:b9:38:fb:
44:e1:f8:b7:82:92:5b:90:92:21:6a:30:15:cb:f2:3f:45:ce:
f5:4d:1d:d5:6f:df:59:8d:26:4d:ae:2b:68:d6:6b:72:91:0f:
ee:2f:70:de:ae:2a:06:19:b8:43:03:81:f4:52:dc:79:5e:8c:
53:03:51:55:6e:fd:bd:d7:51:df:ae:05:81:18:62:54:2f:3c:
8f:bf:8a:a7:9f:d4:aa:7c:4c:7e:d5:b8:08:3a:11:db:8a:8c:
8f:9c:d2:88:51:f9:97:87:c9:17:1c:1d:7b:8d:1e:c8:8b:a0:
c6:98:ed:b5:7a:6e:2c:ad:b6:52:5f:94:78:1a:54:52:bc:57:
4f:54:3a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:24 2025 by rpki-client