Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/34352e3135362e3131372e302f32342d3234203d3e20383334.roa
File: 34352e3135362e3131372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 9GNjxBw3E5UThXDU/Pk+BaXjwuGFO0l++LFxKfmLTLo=
Subject key identifier: 66:71:EC:C2:7D:B1:29:53:00:07:93:D9:02:12:45:CC:7A:40:02:ED
Certificate issuer: /CN=06da19f4285eb04d0310733f4ac00107b73337ad
Certificate serial: 49136AB8C6A4896124B23EDCE3CD97BF4353927A
Authority key identifier: 06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/34352e3135362e3131372e302f32342d3234203d3e20383334.roa
Signing time: Thu 03 Oct 2024 00:04:33 +0000
ROA not before: Wed 02 Oct 2024 23:59:33 +0000
ROA not after: Thu 02 Oct 2025 00:04:33 +0000
asID: 834
IP address blocks: 45.156.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:13:6a:b8:c6:a4:89:61:24:b2:3e:dc:e3:cd:97:bf:43:53:92:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06da19f4285eb04d0310733f4ac00107b73337ad
Validity
Not Before: Oct 2 23:59:33 2024 GMT
Not After : Oct 2 00:04:33 2025 GMT
Subject: CN=6671ECC27DB12953000793D9021245CC7A4002ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:af:c8:19:d1:e3:cc:ed:ea:88:41:24:0a:7c:
30:3a:e0:57:86:df:eb:dc:72:f7:23:54:67:0c:2e:
f5:fb:ae:36:4a:8e:5a:33:d3:2d:10:92:40:74:c9:
6f:fe:5a:91:77:7b:18:56:eb:0d:d7:53:b0:d7:d6:
96:37:75:a8:13:58:21:e4:5e:e5:40:42:8a:3f:64:
bf:ca:24:94:a7:39:2c:43:f8:cf:56:2b:3b:11:06:
13:3b:3a:90:64:f9:3f:c3:1c:41:4c:b7:49:8a:b1:
e7:1e:a4:f4:80:30:05:2c:f4:c2:4e:59:10:ca:55:
1e:3b:65:77:08:a1:50:f2:4d:1c:d5:8d:72:9d:79:
fa:41:dc:c9:b5:58:01:2a:93:4f:a0:f5:ee:87:41:
6a:89:33:f7:63:15:3d:08:36:ed:b2:0e:35:15:26:
c2:7d:23:42:e2:0b:9b:b2:1d:f7:72:7a:f0:25:d1:
7b:42:0e:05:a5:c0:42:91:cd:46:b7:f1:7a:98:6c:
94:d8:32:7a:47:4a:83:2d:ce:bf:0d:74:29:6a:14:
72:c1:7f:74:23:3f:8a:02:4f:ab:90:00:ce:54:ec:
5e:de:b2:0a:02:73:c0:c3:35:7f:f5:09:80:d5:14:
ac:4b:8f:9a:40:4e:1d:08:17:a9:ca:c1:9a:78:bb:
5e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:71:EC:C2:7D:B1:29:53:00:07:93:D9:02:12:45:CC:7A:40:02:ED
X509v3 Authority Key Identifier:
keyid:06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/34352e3135362e3131372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.117.0/24
Signature Algorithm: sha256WithRSAEncryption
be:85:b0:51:33:ed:c7:a6:22:22:ce:5a:aa:99:f0:eb:ce:25:
06:ed:ff:87:b0:cd:7b:b1:bc:12:5c:8f:40:c8:ca:55:a5:cf:
dc:82:da:9d:44:87:c2:62:d6:d5:57:08:a6:bc:13:bd:eb:ca:
cf:5e:f5:fd:f8:82:09:f2:6b:06:ce:d1:e6:2f:da:b9:58:c3:
0b:c0:a9:df:b5:46:09:2b:d3:12:21:72:c2:ab:f7:b9:25:32:
eb:b3:ae:0a:59:93:47:88:4d:fe:06:84:6d:ba:fb:07:92:95:
6d:8e:38:9a:00:72:44:80:ca:f7:8c:2d:6b:2c:75:97:98:a6:
7b:f4:30:2c:e8:ec:9e:ff:b9:38:32:49:8e:0e:10:22:02:84:
3f:db:62:f4:bc:f6:0d:6d:c1:1e:6c:27:6b:13:5a:60:85:bf:
14:0a:e4:95:5c:c6:c9:36:5f:a8:8f:23:77:f6:eb:c3:85:27:
9c:80:f6:d9:81:77:b2:9f:7b:3c:97:3b:23:33:69:4c:56:65:
6e:67:e3:53:c7:ef:88:58:e8:cc:1d:a5:d2:aa:b5:d4:2f:4c:
26:17:88:dc:8b:3f:16:cf:33:0c:cd:a2:f4:5f:d4:31:fd:47:
71:ad:79:e3:26:1a:02:09:4f:47:6a:77:c4:e8:3d:32:6f:e4:
6e:03:6e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:37 2025 by rpki-client