Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134302e302f32342d3234203d3e20383334.roa
File: 34352e3134382e3134302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: uFUEeS62NMp9qFx3g6+cLQvIrHW7XtHuPxvi6R1RIBw=
Subject key identifier: 5E:2D:36:04:2A:08:31:0D:02:9B:CF:DE:25:D4:9C:A1:90:C5:D7:D2
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 7CF9B083F32CC38AC33C94C8B09983443EA059BF
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134302e302f32342d3234203d3e20383334.roa
Signing time: Mon 10 Jul 2023 17:30:04 +0000
ROA not before: Mon 10 Jul 2023 17:25:04 +0000
ROA not after: Mon 08 Jul 2024 17:30:04 +0000
asID: 834
IP address blocks: 45.148.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:f9:b0:83:f3:2c:c3:8a:c3:3c:94:c8:b0:99:83:44:3e:a0:59:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jul 10 17:25:04 2023 GMT
Not After : Jul 8 17:30:04 2024 GMT
Subject: CN=5E2D36042A08310D029BCFDE25D49CA190C5D7D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:0f:7f:0c:df:67:75:5d:21:26:75:f1:fe:
33:bf:70:93:e0:58:ce:e3:db:8e:fe:ff:53:11:5c:
0b:76:b6:b3:23:bd:88:1d:8d:1d:98:ec:a7:93:b0:
64:51:49:f8:48:6b:e4:4c:b1:d3:ad:bf:27:1b:6a:
2e:9b:e5:56:77:b3:5e:49:ba:17:f5:50:a0:58:a5:
19:d3:0d:5e:a6:13:41:b3:98:6d:11:cf:9d:2b:07:
19:90:6b:82:d0:d9:2d:a6:ca:36:43:b6:38:5d:83:
7b:b7:97:c3:2f:d3:75:df:91:c5:8d:2e:37:72:1c:
41:ab:7c:2e:59:b5:9b:b3:d7:91:2b:4f:69:05:11:
b7:33:fc:5e:bf:86:96:65:08:a0:97:c3:57:3d:65:
ce:27:30:39:87:8f:7e:fa:79:fd:fa:85:d2:ad:97:
23:e6:2c:6b:21:0c:cb:78:87:c7:22:63:3b:d4:6c:
eb:94:6e:b9:4a:0e:01:c1:9c:b8:82:92:f8:a5:2c:
b4:b1:8e:1b:69:26:7e:7d:ee:5f:29:52:9e:e7:86:
08:37:51:a9:29:11:74:b4:be:f3:4e:1b:b8:78:d8:
90:6a:98:11:41:d8:b8:4a:91:8e:94:99:ac:b9:52:
d3:60:4f:8c:38:b0:3d:12:20:3d:45:fe:93:e0:e3:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2D:36:04:2A:08:31:0D:02:9B:CF:DE:25:D4:9C:A1:90:C5:D7:D2
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e3134382e3134302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.140.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a3:e0:02:86:56:3a:bd:ff:2d:b4:f1:8b:53:7b:7a:1e:7d:
48:35:88:db:ae:6b:48:2d:64:a6:56:07:de:d1:05:00:6a:64:
3e:49:01:87:3d:68:b3:3e:09:34:c1:be:26:c0:89:dd:cd:32:
fc:df:c9:0e:9c:11:70:de:a7:d2:ab:de:45:a2:d0:60:06:d1:
7d:46:a7:ad:cb:73:c9:f6:3c:31:57:60:c7:66:9a:8f:9d:6e:
4a:99:ba:41:dd:16:50:9c:81:00:66:33:30:1c:8f:95:68:b6:
c7:fe:ef:6d:bb:2a:c3:23:62:c8:11:04:86:4f:1a:da:5d:63:
55:86:22:8e:3c:b8:71:70:ed:10:43:21:ab:40:d9:0f:0e:23:
ab:bf:c4:32:7d:ba:46:1f:0a:41:3c:50:b2:23:d7:f3:ff:d3:
41:c4:f1:51:14:13:ef:ef:d0:26:86:03:2b:cb:28:8d:b1:80:
47:fa:19:23:5d:a4:98:9c:bc:5e:d5:79:74:d3:2c:d6:1e:21:
63:0f:44:10:5f:59:81:e7:a5:d7:50:f8:ef:2a:16:b2:55:1b:
74:6c:ab:18:4d:99:86:78:b8:0b:7f:a9:40:97:06:0b:14:45:
76:bc:5a:5f:c7:c8:0c:70:85:2d:4d:a8:d7:99:15:23:80:e4:
01:46:a6:67
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUfPmwg/Msw4rDPJTIsJmDRD6gWb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGE4ZDM2MGNlZTY1MTY1MjdmZDU0OTJjMzdjYWM0NDQx
ZTExOWMwMDAeFw0yMzA3MTAxNzI1MDRaFw0yNDA3MDgxNzMwMDRaMDMxMTAvBgNV
BAMTKDVFMkQzNjA0MkEwODMxMEQwMjlCQ0ZERTI1RDQ5Q0ExOTBDNUQ3RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEaQ9/DN9ndV0hJnXx/jO/cJPg
WM7j247+/1MRXAt2trMjvYgdjR2Y7KeTsGRRSfhIa+RMsdOtvycbai6b5VZ3s15J
uhf1UKBYpRnTDV6mE0GzmG0Rz50rBxmQa4LQ2S2myjZDtjhdg3u3l8Mv03XfkcWN
LjdyHEGrfC5ZtZuz15ErT2kFEbcz/F6/hpZlCKCXw1c9Zc4nMDmHj376ef36hdKt
lyPmLGshDMt4h8ciYzvUbOuUbrlKDgHBnLiCkvilLLSxjhtpJn597l8pUp7nhgg3
UakpEXS0vvNOG7h42JBqmBFB2LhKkY6Umay5UtNgT4w4sD0SID1F/pPg47AXAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUXi02BCoIMQ0Cm8/eJdScoZDF19IwHwYDVR0j
BBgwFoAUSo02DO5lFlJ/1UksN8rERB4RnAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUtODgwYy00MmIyLTgyMTMtZjIwYTUwNWVi
OTdlLzEvNEE4RDM2MENFRTY1MTY1MjdGRDU0OTJDMzdDQUM0NDQxRTExOUMwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1NvMDJETzVsRmxKXzFVa3NOOHJFUkI0
Um5BQS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUt
ODgwYy00MmIyLTgyMTMtZjIwYTUwNWViOTdlLzEvMzQzNTJlMzEzNDM4MmUzMTM0
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtlIww
DQYJKoZIhvcNAQELBQADggEBACij4AKGVjq9/y208YtTe3oefUg1iNuua0gtZKZW
B97RBQBqZD5JAYc9aLM+CTTBvibAid3NMvzfyQ6cEXDep9Kr3kWi0GAG0X1Gp63L
c8n2PDFXYMdmmo+dbkqZukHdFlCcgQBmMzAcj5Votsf+7227KsMjYsgRBIZPGtpd
Y1WGIo48uHFw7RBDIatA2Q8OI6u/xDJ9ukYfCkE8ULIj1/P/00HE8VEUE+/v0CaG
AyvLKI2xgEf6GSNdpJicvF7VeXTTLNYeIWMPRBBfWYHnpddQ+O8qFrJVG3RsqxhN
mYZ4uAt/qUCXBgsURXa8Wl/HyAxwhS1NqNeZFSOA5AFGpmc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:06 2025 by rpki-client