Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131382e302f32342d3234203d3e20383334.roa
File: 34352e36352e3131382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: EXyev82YYvIquELdwcT2hkROlnJDQBomIipNO+krLa4=
Subject key identifier: CD:D2:9C:A1:E1:24:44:B2:21:CC:CA:90:3E:FB:09:E8:3B:62:91:EF
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 01C21E1B59B4E4EF0FE965C77DAB810961862524
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131382e302f32342d3234203d3e20383334.roa
Signing time: Fri 04 Aug 2023 15:30:08 +0000
ROA not before: Fri 04 Aug 2023 15:25:08 +0000
ROA not after: Fri 02 Aug 2024 15:30:08 +0000
asID: 834
IP address blocks: 45.65.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c2:1e:1b:59:b4:e4:ef:0f:e9:65:c7:7d:ab:81:09:61:86:25:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Aug 4 15:25:08 2023 GMT
Not After : Aug 2 15:30:08 2024 GMT
Subject: CN=CDD29CA1E12444B221CCCA903EFB09E83B6291EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:33:fc:65:b4:e1:03:05:d8:c9:d3:a4:d1:
ab:d4:44:2e:2c:43:09:cc:9c:e4:95:c3:cd:70:80:
61:f4:6d:f4:a1:7c:ef:e2:42:f0:c9:e4:51:97:e5:
b0:7f:ae:10:34:d0:2b:94:8a:8e:af:c9:55:9e:c6:
06:28:96:5c:29:d2:a7:3e:04:40:b6:5e:71:0a:73:
9d:cd:01:18:66:61:63:85:ec:21:52:c4:3a:ec:ff:
1b:39:c1:cf:ef:57:d1:e5:82:5a:41:34:cd:b5:69:
c2:cf:c3:20:e9:57:b5:05:f5:75:d4:9f:6a:ca:63:
07:6e:2b:48:ca:a0:44:03:23:9a:1c:ca:3f:10:6f:
e2:dc:f3:d2:7f:5e:ba:dd:74:29:80:f5:2e:ca:ad:
85:d7:f0:70:75:50:22:8f:4d:f6:8b:72:2e:f8:52:
33:bc:fe:22:30:80:ce:10:f8:50:85:be:9c:bf:19:
da:a6:87:94:7f:8b:8c:c4:80:15:3c:bd:26:88:fd:
cd:5b:07:58:38:ed:8c:fa:c5:1a:33:73:66:09:a1:
36:39:49:f7:d9:f2:5b:3a:a1:19:66:70:41:7d:72:
0e:8e:c5:31:ad:fa:ed:de:df:65:bf:83:4f:78:40:
db:f8:3a:ed:fc:32:34:2d:ae:2e:d6:f7:84:98:77:
b9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D2:9C:A1:E1:24:44:B2:21:CC:CA:90:3E:FB:09:E8:3B:62:91:EF
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e36352e3131382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.118.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ae:77:97:53:7d:c1:26:59:17:e7:a8:7d:2f:be:68:c9:54:
59:ac:44:7e:5c:47:93:13:40:a0:1f:38:b8:e7:6c:5f:01:08:
f8:30:98:cc:55:67:39:a8:cb:a4:12:a0:4c:2c:d5:8a:77:74:
ff:3e:b7:88:7c:7d:fe:f4:61:c3:d6:59:15:20:01:19:24:e6:
cd:66:5b:a3:37:ba:9f:2d:82:9a:13:5e:bf:64:28:87:16:04:
bf:28:fa:5e:6f:f4:e4:1c:7b:dc:77:59:2c:e8:46:9b:04:39:
a4:fd:17:c4:44:d3:3c:70:3b:42:60:01:6e:d6:0f:af:4b:4f:
91:53:91:79:0c:9b:96:53:cc:6e:f4:30:bb:1f:78:3c:45:7e:
2d:20:1c:19:a8:e5:db:c5:0e:f3:17:99:8c:05:f4:ca:0e:ca:
8d:ab:84:79:b0:2b:18:09:e6:b3:f1:a4:05:c6:c7:00:cd:26:
39:b1:d4:20:6a:95:1d:b0:87:cf:73:20:95:15:e5:9e:f4:69:
f1:d6:d6:44:65:a7:78:83:1d:1d:5d:3d:db:f0:03:e3:64:87:
4f:d7:89:63:e3:2d:dc:0b:ae:e8:8a:ba:a1:c8:ed:30:81:44:
e6:62:86:de:bf:e4:38:13:a4:7b:26:be:24:c9:21:c6:87:e2:
ac:57:a2:59
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUAcIeG1m05O8P6WXHfauBCWGGJSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGE4ZDM2MGNlZTY1MTY1MjdmZDU0OTJjMzdjYWM0NDQx
ZTExOWMwMDAeFw0yMzA4MDQxNTI1MDhaFw0yNDA4MDIxNTMwMDhaMDMxMTAvBgNV
BAMTKENERDI5Q0ExRTEyNDQ0QjIyMUNDQ0E5MDNFRkIwOUU4M0I2MjkxRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyiTP8ZbThAwXYydOk0avURC4s
QwnMnOSVw81wgGH0bfShfO/iQvDJ5FGX5bB/rhA00CuUio6vyVWexgYollwp0qc+
BEC2XnEKc53NARhmYWOF7CFSxDrs/xs5wc/vV9HlglpBNM21acLPwyDpV7UF9XXU
n2rKYwduK0jKoEQDI5ocyj8Qb+Lc89J/XrrddCmA9S7KrYXX8HB1UCKPTfaLci74
UjO8/iIwgM4Q+FCFvpy/Gdqmh5R/i4zEgBU8vSaI/c1bB1g47Yz6xRozc2YJoTY5
SffZ8ls6oRlmcEF9cg6OxTGt+u3e32W/g094QNv4Ou38MjQtri7W94SYd7ktAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUzdKcoeEkRLIhzMqQPvsJ6Dtike8wHwYDVR0j
BBgwFoAUSo02DO5lFlJ/1UksN8rERB4RnAAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUtODgwYy00MmIyLTgyMTMtZjIwYTUwNWVi
OTdlLzEvNEE4RDM2MENFRTY1MTY1MjdGRDU0OTJDMzdDQUM0NDQxRTExOUMwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1NvMDJETzVsRmxKXzFVa3NOOHJFUkI0
Um5BQS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMzUxNzhmOTUt
ODgwYy00MmIyLTgyMTMtZjIwYTUwNWViOTdlLzEvMzQzNTJlMzYzNTJlMzEzMTM4
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUF2MA0G
CSqGSIb3DQEBCwUAA4IBAQANrneXU33BJlkX56h9L75oyVRZrER+XEeTE0CgHzi4
52xfAQj4MJjMVWc5qMukEqBMLNWKd3T/PreIfH3+9GHD1lkVIAEZJObNZlujN7qf
LYKaE16/ZCiHFgS/KPpeb/TkHHvcd1ks6EabBDmk/RfERNM8cDtCYAFu1g+vS0+R
U5F5DJuWU8xu9DC7H3g8RX4tIBwZqOXbxQ7zF5mMBfTKDsqNq4R5sCsYCeaz8aQF
xscAzSY5sdQgapUdsIfPcyCVFeWe9Gnx1tZEZad4gx0dXT3b8APjZIdP14lj4y3c
C67oirqhyO0wgUTmYobev+Q4E6R7Jr4kySHGh+KsV6JZ
-----END CERTIFICATE-----
Generated at Thu Apr 3 08:44:18 2025 by rpki-client