Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32332d3233203d3e203437343437.roa
File: 34352e3134362e3136302e302f32332d3233203d3e203437343437.roa (raw, json)
Hash identifier: RhIjHNXayp0tS4DN32atD6aHafLrHUAz0HkdV618CRY=
Subject key identifier: 11:4A:59:11:96:5D:2D:B5:C8:67:80:35:C8:2B:72:6F:F6:1B:EC:34
Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Certificate serial: 5BCFF5E1C0A390083CE76BDB66097993593E3C45
Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32332d3233203d3e203437343437.roa
Signing time: Fri 27 Dec 2024 12:33:52 +0000
ROA not before: Fri 27 Dec 2024 12:28:52 +0000
ROA not after: Fri 26 Dec 2025 12:33:52 +0000
asID: 47447
IP address blocks: 45.146.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:cf:f5:e1:c0:a3:90:08:3c:e7:6b:db:66:09:79:93:59:3e:3c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Validity
Not Before: Dec 27 12:28:52 2024 GMT
Not After : Dec 26 12:33:52 2025 GMT
Subject: CN=114A5911965D2DB5C8678035C82B726FF61BEC34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:1a:c5:77:21:cd:23:c8:18:29:ad:27:15:
8d:ae:7d:f8:c0:af:64:94:14:63:11:46:cf:9a:06:
df:25:d9:b4:e6:8b:89:8e:b6:5a:a1:f3:4d:d8:0b:
30:56:12:3f:bb:23:6f:b1:31:ca:d5:3d:10:96:80:
cb:3c:70:26:05:30:56:b2:2f:ee:23:46:88:fe:4e:
32:18:5d:7f:ef:3c:ac:57:01:c4:cc:46:30:69:83:
5a:aa:ac:6a:01:19:bf:b0:a0:48:b4:cb:92:3a:eb:
b3:e3:3a:b6:d5:c2:95:c6:df:45:a1:11:be:2f:57:
33:17:1a:18:fe:3d:f4:88:ff:6c:8c:71:7f:66:3f:
26:ec:3e:62:97:e4:f8:38:9f:b2:d7:58:c6:19:6a:
24:e0:59:45:ae:6f:59:f8:2d:10:07:19:76:12:88:
e3:25:82:dc:13:29:15:63:c6:9b:e0:bb:90:29:dd:
bf:17:02:89:37:b0:60:f3:b7:c0:1c:12:d6:7d:89:
f5:42:a1:10:45:58:e7:22:61:1e:b6:b2:44:b7:4d:
24:0c:00:1a:f1:36:cd:1b:20:7a:f4:c3:9d:d8:e1:
06:b6:8f:44:50:2e:1c:e8:ee:eb:11:14:b4:5d:b9:
6b:78:78:2d:40:83:b4:59:81:db:3b:c0:cb:c4:fa:
ee:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4A:59:11:96:5D:2D:B5:C8:67:80:35:C8:2B:72:6F:F6:1B:EC:34
X509v3 Authority Key Identifier:
keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32332d3233203d3e203437343437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.160.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:87:05:ef:2b:16:a2:1b:7a:90:b3:5d:e4:c8:dc:56:d5:68:
7a:ad:d9:3f:d9:1f:be:0b:27:97:a8:c0:fa:b1:6c:42:1f:b6:
ad:7b:cc:7a:4f:65:5a:e8:a7:de:47:ef:21:b0:8f:38:aa:17:
fa:72:06:75:11:61:07:3d:f9:f0:15:89:1c:9b:9e:38:82:e7:
aa:87:5b:22:09:73:1f:c2:02:44:17:29:1b:fe:10:49:15:16:
95:3c:f1:b1:5e:ad:47:af:b6:c5:e5:15:dd:e3:58:58:3a:ca:
40:99:9a:16:b4:8f:7a:78:33:38:6a:ef:60:cc:34:7d:a8:33:
23:c5:de:62:ca:4f:4e:f6:52:75:ce:27:31:7d:58:f8:c4:c2:
8b:6f:21:18:78:e3:ea:17:01:5a:e4:0d:d3:1a:bc:e8:7d:b1:
a2:19:d5:50:fc:3c:ff:89:d5:e6:82:fa:00:82:95:7c:6c:e3:
68:1f:fe:16:a5:e7:57:6e:e1:45:dc:91:6f:25:02:5a:e9:43:
ba:b8:4d:f1:fc:7f:dd:80:3d:3f:31:68:7f:52:b0:56:29:42:
19:1a:7e:a7:c0:d6:bf:76:10:6d:94:46:83:73:6c:dc:b0:86:
7c:cf:b8:8e:22:8d:26:6e:97:24:ea:54:8f:c7:c8:a5:53:d9:
ce:5f:49:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:51 2025 by rpki-client