Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134302e302f32342d3234203d3e20323037303833.roa
File: 34352e3134382e3134302e302f32342d3234203d3e20323037303833.roa (raw, json)
Hash identifier: VC1dRYB54r3C/KuER3bNDsWXt6DuKeIU0rWcXhIG9yk=
Subject key identifier: 58:A9:99:40:AA:A3:77:C9:23:BB:E1:09:33:78:DB:1E:56:F1:47:19
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 7661B1161CA025C683C71861A8AD418D627EC2D0
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134302e302f32342d3234203d3e20323037303833.roa
Signing time: Tue 13 Jun 2023 10:26:43 +0000
ROA not before: Tue 13 Jun 2023 10:21:43 +0000
ROA not after: Tue 11 Jun 2024 10:26:43 +0000
asID: 207083
IP address blocks: 45.148.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:61:b1:16:1c:a0:25:c6:83:c7:18:61:a8:ad:41:8d:62:7e:c2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jun 13 10:21:43 2023 GMT
Not After : Jun 11 10:26:43 2024 GMT
Subject: CN=58A99940AAA377C923BBE1093378DB1E56F14719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:2f:3c:71:a2:3c:57:d8:b6:f5:8a:51:c8:
4e:2b:f7:97:5e:7e:90:76:69:fd:5f:bc:09:ba:55:
ff:7a:b5:e3:88:7f:13:18:22:76:4f:84:be:43:e3:
6d:4f:72:a5:82:a2:ef:93:c8:25:ae:5f:cd:83:22:
f2:79:5e:e2:6c:0c:e4:33:96:6b:bb:a2:97:b8:b2:
d9:5e:e9:9a:39:d2:1f:ed:7c:76:eb:38:6e:de:6e:
c9:3b:2c:9f:50:ed:19:b8:91:6d:a5:c4:53:12:6e:
7a:dc:90:3d:a7:b4:30:66:47:94:9e:df:18:cd:13:
fb:59:70:77:83:2e:6b:81:3e:f6:15:26:39:6a:6d:
45:63:e2:98:7c:87:85:90:04:fa:4b:8f:7b:c3:41:
53:2e:98:5d:ce:b2:cc:66:0e:00:2f:e2:ec:e2:4b:
37:30:16:ee:d9:89:23:76:cc:53:66:bb:65:16:43:
a4:a3:19:07:34:34:b5:44:e7:11:73:04:dd:47:ef:
96:a1:8d:e4:22:2d:71:e7:ef:f5:6a:cc:3d:b7:17:
2f:37:12:53:d2:a9:41:07:6a:06:63:dc:98:ee:1d:
27:69:5c:b7:46:8e:89:cd:f5:32:75:cd:95:e5:87:
95:ef:99:d8:5a:c0:4c:71:bd:f6:f7:a4:0b:86:4a:
4b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A9:99:40:AA:A3:77:C9:23:BB:E1:09:33:78:DB:1E:56:F1:47:19
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134302e302f32342d3234203d3e20323037303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.140.0/24
Signature Algorithm: sha256WithRSAEncryption
99:f6:02:4d:a9:3d:e1:97:3b:9a:a3:38:7e:66:b1:93:4f:77:
79:83:f6:d8:82:51:db:24:01:41:e2:cd:12:70:eb:5a:be:ba:
ce:8b:7f:d8:9f:4b:7e:72:6c:8e:59:46:85:c0:01:e0:ab:b2:
0a:2c:6f:8d:ec:52:09:8d:31:f9:df:90:39:ab:e8:41:cd:67:
b9:b9:6f:a9:15:b7:f8:8a:6b:65:b9:2a:ef:9c:df:00:93:9d:
48:8e:b2:1b:9d:e9:3a:63:bd:2e:1d:b4:8e:b4:6f:f8:34:a3:
a7:18:5d:05:f0:b1:77:7f:ba:68:57:49:c7:d9:64:21:97:92:
f9:1e:d2:24:0b:1b:b4:aa:6d:fd:af:dd:10:91:d2:8c:8b:77:
2b:28:d8:b6:b8:53:04:19:23:d3:23:f8:70:9b:2f:df:57:84:
0a:6e:cd:50:d4:04:42:ca:5b:cd:61:0b:3d:27:22:64:5c:13:
cb:e0:e6:d2:c5:8d:5e:ad:59:13:60:f5:ff:72:3b:06:0a:15:
79:6e:f7:9a:ff:4d:d6:19:be:58:0a:32:3d:e0:a9:6b:7b:7f:
38:7d:f4:a4:f3:3c:65:d3:09:a9:b3:bb:ab:91:48:ad:4e:76:
75:86:d7:3e:3a:70:f5:76:f8:00:a7:cf:69:f1:8b:87:07:a4:
a7:0d:31:af
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUdmGxFhygJcaDxxhhqK1BjWJ+wtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGE4ZDM2MGNlZTY1MTY1MjdmZDU0OTJjMzdjYWM0NDQx
ZTExOWMwMDAeFw0yMzA2MTMxMDIxNDNaFw0yNDA2MTExMDI2NDNaMDMxMTAvBgNV
BAMTKDU4QTk5OTQwQUFBMzc3QzkyM0JCRTEwOTMzNzhEQjFFNTZGMTQ3MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx+i88caI8V9i29YpRyE4r95de
fpB2af1fvAm6Vf96teOIfxMYInZPhL5D421PcqWCou+TyCWuX82DIvJ5XuJsDOQz
lmu7ope4stle6Zo50h/tfHbrOG7ebsk7LJ9Q7Rm4kW2lxFMSbnrckD2ntDBmR5Se
3xjNE/tZcHeDLmuBPvYVJjlqbUVj4ph8h4WQBPpLj3vDQVMumF3OssxmDgAv4uzi
SzcwFu7ZiSN2zFNmu2UWQ6SjGQc0NLVE5xFzBN1H75ahjeQiLXHn7/VqzD23Fy83
ElPSqUEHagZj3JjuHSdpXLdGjonN9TJ1zZXlh5XvmdhawExxvfb3pAuGSkvNAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUWKmZQKqjd8kju+EJM3jbHlbxRxkwHwYDVR0j
BBgwFoAUSo02DO5lFlJ/1UksN8rERB4RnAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUtODgwYy00MmIyLTgyMTMtZjIwYTUwNWVi
OTdlLzEvNEE4RDM2MENFRTY1MTY1MjdGRDU0OTJDMzdDQUM0NDQxRTExOUMwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1NvMDJETzVsRmxKXzFVa3NOOHJFUkI0
Um5BQS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUt
ODgwYy00MmIyLTgyMTMtZjIwYTUwNWViOTdlLzEvMzQzNTJlMzEzNDM4MmUzMTM0
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzczMDM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtlIwwDQYJKoZIhvcNAQELBQADggEBAJn2Ak2pPeGXO5qjOH5msZNPd3mD9tiC
UdskAUHizRJw61q+us6Lf9ifS35ybI5ZRoXAAeCrsgosb43sUgmNMfnfkDmr6EHN
Z7m5b6kVt/iKa2W5Ku+c3wCTnUiOshud6TpjvS4dtI60b/g0o6cYXQXwsXd/umhX
ScfZZCGXkvke0iQLG7Sqbf2v3RCR0oyLdyso2La4UwQZI9Mj+HCbL99XhApuzVDU
BELKW81hCz0nImRcE8vg5tLFjV6tWRNg9f9yOwYKFXlu95r/TdYZvlgKMj3gqWt7
fzh99KTzPGXTCamzu6uRSK1OdnWG1z46cPV2+ACnz2nxi4cHpKcNMa8=
-----END CERTIFICATE-----
Generated at Thu Apr 3 08:58:54 2025 by rpki-client