Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/43e56663-9a28-4208-9fd2-c275c768a326/0/34352e3134302e33362e302f32332d3234203d3e203536393133.roa
File: 34352e3134302e33362e302f32332d3234203d3e203536393133.roa (raw, json)
Hash identifier: W+Ttpr1mLyKEFXXQtWKJeHNJ1L1/WPIt8W4LiDp58Ps=
Subject key identifier: AC:FE:42:30:A0:4E:D1:8B:FD:99:F1:D8:EC:54:68:B9:AF:D6:64:22
Certificate issuer: /CN=b740b0385c1dd0153280e0a3e6444b24f96fff30
Certificate serial: 272F4EE899044C982F7C59F2C2A4B58EB9A2849E
Authority key identifier: B7:40:B0:38:5C:1D:D0:15:32:80:E0:A3:E6:44:4B:24:F9:6F:FF:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0CwOFwd0BUygOCj5kRLJPlv_zA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/43e56663-9a28-4208-9fd2-c275c768a326/0/34352e3134302e33362e302f32332d3234203d3e203536393133.roa
Signing time: Fri 31 Mar 2023 14:05:13 +0000
ROA not before: Fri 31 Mar 2023 14:00:13 +0000
ROA not after: Fri 29 Mar 2024 14:05:13 +0000
asID: 56913
IP address blocks: 45.140.36.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:2f:4e:e8:99:04:4c:98:2f:7c:59:f2:c2:a4:b5:8e:b9:a2:84:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b740b0385c1dd0153280e0a3e6444b24f96fff30
Validity
Not Before: Mar 31 14:00:13 2023 GMT
Not After : Mar 29 14:05:13 2024 GMT
Subject: CN=ACFE4230A04ED18BFD99F1D8EC5468B9AFD66422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e8:8c:31:34:9b:4c:20:38:ca:62:9f:c8:41:
7e:ec:a5:f3:6f:8f:f6:b2:52:c8:5d:03:bb:f6:8e:
cf:34:ff:88:1b:9a:7b:88:8e:51:ab:82:5e:9a:ad:
94:c1:f9:5a:d7:c2:c4:2c:35:e0:03:92:53:5d:ad:
02:81:e4:4c:88:46:39:c8:6e:0c:b1:52:63:b4:e7:
50:12:d1:ec:c1:8e:4f:9e:72:1c:51:24:07:f9:e5:
06:a6:1e:c4:51:7d:1c:4d:9e:fe:10:42:67:f8:da:
6c:19:18:e8:8f:e0:31:93:91:25:ed:07:50:77:21:
6b:bd:db:ca:03:74:17:9b:5a:78:25:09:51:45:59:
b7:4a:5b:4d:87:30:b9:9e:c0:cf:58:b0:9c:42:46:
5f:9a:41:92:2f:5c:16:d3:fe:39:a4:c4:f3:69:98:
b4:bb:b3:4d:d0:0d:e7:a6:72:23:64:1f:e3:b4:b2:
4f:75:bb:2b:fa:40:db:f0:87:97:ae:55:2d:06:f5:
17:d8:9d:d3:fd:85:4c:44:3d:75:bc:af:95:fa:17:
f7:33:7f:74:e9:0f:e5:b2:25:09:11:96:34:12:71:
f0:3c:ee:90:a9:3e:25:83:d6:55:2b:f0:46:45:32:
8b:4d:12:ef:f6:c8:20:a6:79:28:dd:34:ad:ee:eb:
13:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FE:42:30:A0:4E:D1:8B:FD:99:F1:D8:EC:54:68:B9:AF:D6:64:22
X509v3 Authority Key Identifier:
keyid:B7:40:B0:38:5C:1D:D0:15:32:80:E0:A3:E6:44:4B:24:F9:6F:FF:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/43e56663-9a28-4208-9fd2-c275c768a326/0/B740B0385C1DD0153280E0A3E6444B24F96FFF30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0CwOFwd0BUygOCj5kRLJPlv_zA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/43e56663-9a28-4208-9fd2-c275c768a326/0/34352e3134302e33362e302f32332d3234203d3e203536393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.36.0/23
Signature Algorithm: sha256WithRSAEncryption
50:1f:c0:e3:46:9c:41:d1:03:c6:e4:31:8e:bd:51:f8:fa:5e:
37:e8:1f:bb:95:27:9a:c9:b2:f8:3d:dc:7c:62:31:9d:e5:83:
ff:40:6c:a0:44:b0:d5:7a:8b:a8:8f:45:d9:63:ac:e8:a6:aa:
fb:80:93:22:2b:ee:cf:74:74:b8:66:ae:f3:13:7c:e3:91:9c:
42:78:95:e1:bf:4e:4f:5c:8f:df:0a:65:ee:c0:0d:df:10:e3:
e7:ea:5b:5d:d7:d9:5f:d5:7e:8f:a4:27:d1:0c:80:4a:b3:37:
36:86:bd:1b:b8:1d:71:22:03:27:c3:ad:cc:b5:20:e7:11:f3:
e3:cd:87:e2:bb:4b:3a:11:2f:56:d4:ba:f2:85:ab:4a:8f:37:
39:ed:73:89:1d:62:91:c8:16:20:17:16:d2:41:5b:40:67:ff:
30:a1:0b:0b:ce:79:04:22:50:97:0c:99:07:d7:36:d0:64:7e:
9c:b6:ab:20:7a:a5:be:97:4e:ee:cf:3f:5f:18:a5:45:6d:52:
4b:fa:66:14:dc:02:63:37:40:62:05:a6:ef:6e:a5:32:82:bd:
71:cb:cb:c4:97:c8:42:0a:9f:7c:77:41:ea:f4:af:a7:bc:32:
e3:55:05:f4:68:29:8a:60:a7:cd:76:88:33:59:d6:d2:b2:b1:
17:e9:55:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:52:41 2025 by rpki-client