Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/34352e3135362e3131362e302f32332d3234203d3e20383334.roa
File: 34352e3135362e3131362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: dn6V0cgMGcT68tk0iaEPGTcUQTHOA/PtQ+po6PoJIHM=
Subject key identifier: 6F:D0:F0:29:64:00:02:E2:17:47:F0:2E:2A:83:66:48:98:C4:3D:2D
Certificate issuer: /CN=06da19f4285eb04d0310733f4ac00107b73337ad
Certificate serial: 7A882824305F04AC3197E09D60AF2337B6AE8152
Authority key identifier: 06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/34352e3135362e3131362e302f32332d3234203d3e20383334.roa
Signing time: Fri 14 Feb 2025 00:01:44 +0000
ROA not before: Thu 13 Feb 2025 23:56:44 +0000
ROA not after: Fri 13 Feb 2026 00:01:44 +0000
asID: 834
IP address blocks: 45.156.116.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:88:28:24:30:5f:04:ac:31:97:e0:9d:60:af:23:37:b6:ae:81:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da19f4285eb04d0310733f4ac00107b73337ad
Validity
Not Before: Feb 13 23:56:44 2025 GMT
Not After : Feb 13 00:01:44 2026 GMT
Subject: CN=6FD0F029640002E21747F02E2A83664898C43D2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f0:77:52:d1:d0:87:4f:f7:ca:92:3b:7a:cf:
72:0f:a3:1e:b5:6d:05:a6:be:0b:15:1e:e6:6d:b3:
f9:16:a4:4c:ad:3c:9a:a2:f3:fe:6f:9a:42:97:ce:
72:a3:33:bb:bd:db:db:a6:09:b9:3a:f1:48:5b:4c:
c5:3f:4e:b2:7c:e2:bb:62:b3:87:06:11:2c:22:02:
98:9a:eb:f1:08:27:1e:a5:a2:ca:5f:38:94:1d:17:
d5:52:cb:a1:33:2c:ea:bd:f9:c0:b5:ad:00:14:9c:
71:18:73:97:a8:b6:29:6d:d7:7a:92:20:48:4d:aa:
ad:c7:11:df:fb:62:3a:c0:9e:7b:7c:2a:12:ea:d8:
6c:de:d9:1b:11:98:03:1a:1b:b8:a4:f6:25:25:44:
91:49:93:7e:24:f5:d4:ee:7d:a3:28:e3:96:aa:76:
be:58:7f:14:1a:a3:07:f4:57:34:13:3e:5e:71:e6:
53:b6:3c:d8:a7:2f:c6:9d:5f:3a:d4:14:e9:64:9f:
8f:d6:b8:a6:1c:88:4c:1c:7c:4d:08:23:7c:b0:f7:
93:3b:9b:42:b6:1f:dd:aa:c5:3d:1b:5b:ee:71:ee:
86:11:5f:55:44:3b:ac:00:e5:a1:0a:ac:bc:11:42:
22:30:50:27:60:2e:0b:16:a0:71:56:20:58:b6:dd:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D0:F0:29:64:00:02:E2:17:47:F0:2E:2A:83:66:48:98:C4:3D:2D
X509v3 Authority Key Identifier:
keyid:06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/34352e3135362e3131362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.116.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:f9:3d:3c:a5:b8:27:f5:12:ea:dc:48:ec:86:03:c3:ff:c0:
c7:d1:39:54:13:b9:f8:0a:6e:79:1a:8e:11:78:f6:7f:95:37:
7e:43:b8:31:b9:54:75:84:e4:9b:69:29:c9:9d:58:6e:4f:05:
ee:55:4b:11:e6:34:eb:a6:d5:ad:37:7e:01:0d:14:22:d7:77:
bd:d2:7e:7c:84:ab:ce:21:df:f8:fb:26:a8:5d:22:cd:5d:b5:
e6:d3:35:00:86:ff:5d:5b:b1:0d:7d:69:20:5a:e1:b9:19:34:
cf:b1:b5:c1:2c:c8:58:36:0c:c3:20:b1:32:cc:7f:38:3a:75:
c7:9a:20:fc:d3:0b:1a:5b:1e:38:3d:9b:e0:39:8c:3e:d8:21:
4c:ea:0d:1e:2e:aa:3f:6f:45:80:78:f8:07:b3:3b:76:56:81:
65:d7:da:6c:1b:d2:82:a1:94:30:6a:07:6c:13:82:29:21:08:
a0:3e:d6:43:d3:19:e5:47:0e:30:20:08:67:d3:c0:2d:2f:5d:
23:d7:50:ca:a4:ce:28:8b:74:73:c8:a7:93:03:93:39:17:7a:
b3:62:bc:15:55:5d:20:d3:14:ce:d2:c6:9a:7a:9b:c8:76:59:
89:a2:d7:02:69:eb:09:c2:4f:8a:44:a7:8b:fb:82:15:b8:1b:
d8:17:79:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:19 2025 by rpki-client