Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134302e302f32342d3234203d3e203236303432.roa
File: 34352e3134382e3134302e302f32342d3234203d3e203236303432.roa (raw, json)
Hash identifier: RA5UH/5lI60Gr2RWpVbKx5U0Q/n2MWK8uaORS5eE9Qs=
Subject key identifier: DF:ED:9B:54:4E:B3:FD:06:3C:18:48:0E:02:8D:15:CE:53:3F:A0:14
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 0ED555EABD4370C2F1CDD81DC17766BE225AD893
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134302e302f32342d3234203d3e203236303432.roa
Signing time: Mon 03 Mar 2025 21:15:28 +0000
ROA not before: Mon 03 Mar 2025 21:10:28 +0000
ROA not after: Mon 02 Mar 2026 21:15:28 +0000
asID: 26042
IP address blocks: 45.148.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d5:55:ea:bd:43:70:c2:f1:cd:d8:1d:c1:77:66:be:22:5a:d8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Mar 3 21:10:28 2025 GMT
Not After : Mar 2 21:15:28 2026 GMT
Subject: CN=DFED9B544EB3FD063C18480E028D15CE533FA014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:57:b1:06:19:3d:49:5a:ee:8a:ec:d6:a6:
c6:31:93:f1:38:a1:8e:c3:16:89:bb:0c:5d:07:f6:
c9:28:78:75:a9:f2:ba:9a:06:48:c4:0d:fa:dc:3d:
fd:45:de:df:8c:04:90:27:e8:2a:71:0c:5a:6b:f4:
39:84:a8:b8:6f:16:fd:7d:e4:18:af:94:e6:ed:c0:
88:eb:f4:a4:c3:fc:9a:09:ca:41:5f:79:6b:64:6d:
20:91:44:c1:2b:60:24:37:1f:8d:69:10:74:51:84:
47:86:78:e6:d0:d9:99:92:3c:d3:9b:fa:60:ec:d2:
bd:74:18:55:05:da:31:5b:f9:56:ac:32:45:6b:8d:
df:4f:5e:da:fd:96:87:8d:51:ff:52:cd:00:aa:14:
9f:fe:c2:d8:82:9b:36:ab:4f:91:c3:a2:93:48:54:
db:01:e6:01:7d:c2:79:da:bd:73:02:26:bf:57:50:
e2:8d:2c:bf:20:54:a7:99:7f:6d:19:4c:a1:ad:51:
ab:37:53:81:74:c5:9d:76:83:76:f0:92:ef:bb:ed:
cd:2f:06:4d:a2:df:c1:88:c7:ef:30:1f:26:86:08:
32:81:5b:00:e9:3f:3d:d4:7f:cb:21:e1:5a:19:cf:
5d:3e:3f:93:72:de:b7:34:51:25:73:ec:af:01:fa:
d4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:ED:9B:54:4E:B3:FD:06:3C:18:48:0E:02:8D:15:CE:53:3F:A0:14
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134302e302f32342d3234203d3e203236303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.140.0/24
Signature Algorithm: sha256WithRSAEncryption
af:40:7d:9a:05:99:96:11:a2:0f:24:f3:ae:a0:6a:08:f1:83:
97:78:f1:e1:c1:b8:bc:28:8c:7e:05:93:17:ce:23:96:e4:47:
3d:67:6f:17:a1:e0:63:82:84:86:3b:a0:c7:95:86:5a:cd:1c:
48:ce:eb:c9:5f:3e:3a:ed:29:c8:1e:24:a4:a3:d0:c2:86:41:
41:c2:b6:17:af:65:b9:b6:b5:9e:a6:07:94:32:77:65:dd:3d:
9c:91:1f:b0:fa:51:0d:df:22:8b:05:6c:16:4d:09:96:b1:41:
ce:3f:25:6b:42:c0:08:4b:c7:9d:d7:28:41:4f:e5:3c:64:34:
4f:d3:88:bc:65:78:23:af:50:7a:09:aa:93:97:8d:37:ee:7b:
55:30:d5:ba:c6:82:f9:35:45:16:4a:6d:ea:48:e5:fe:2e:ad:
86:16:89:86:18:b6:09:8b:a1:bb:3d:84:fb:a8:b5:85:eb:c1:
3e:36:08:da:3b:9f:5f:f7:e6:23:70:09:64:52:97:35:64:27:
09:5c:99:16:86:bf:2f:f6:e0:a4:e2:d6:0c:c1:88:87:5a:10:
51:eb:47:2d:ba:d9:1a:dd:75:78:21:e2:bf:53:90:b2:88:aa:
c9:74:fb:b9:3b:d8:c4:94:cb:69:77:87:18:e2:c0:50:f0:97:
1d:1f:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:46:34 2025 by rpki-client