Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134332e302f32342d3234203d3e20383334.roa
File: 34352e3134382e3134332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Xdq2CBkkb+qF6c905pdmGZaneO1kGEUXsFn+hi8ZHCQ=
Subject key identifier: 7B:EE:11:AD:8C:26:D2:AD:75:8B:68:41:14:8B:69:06:E7:1F:14:F9
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 57507443B2107121E95423C4753DD477966CA7DA
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134332e302f32342d3234203d3e20383334.roa
Signing time: Fri 14 Mar 2025 00:04:21 +0000
ROA not before: Thu 13 Mar 2025 23:59:21 +0000
ROA not after: Fri 13 Mar 2026 00:04:21 +0000
asID: 834
IP address blocks: 45.148.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:50:74:43:b2:10:71:21:e9:54:23:c4:75:3d:d4:77:96:6c:a7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Mar 13 23:59:21 2025 GMT
Not After : Mar 13 00:04:21 2026 GMT
Subject: CN=7BEE11AD8C26D2AD758B6841148B6906E71F14F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6b:d8:15:e5:89:85:35:5f:7d:12:de:e2:1a:
b5:62:13:98:50:2c:1c:1d:f0:89:38:a2:a4:31:78:
30:f5:ba:05:d2:21:48:c6:d9:b5:e9:d5:7f:a5:66:
38:23:d7:72:45:d0:1e:cd:d4:9c:0e:9b:41:38:95:
40:fc:52:42:a0:36:a6:56:7b:bb:3a:3d:4d:dd:ef:
1b:ba:ae:55:dd:80:38:ce:70:8c:42:ac:04:45:e3:
68:29:20:69:52:63:e9:a9:82:c9:09:11:47:bc:5c:
74:78:f5:27:aa:41:db:5d:ad:ba:3f:c3:67:cd:1c:
f3:4e:a9:6e:7a:0f:c5:d3:63:7a:cd:15:28:dc:c6:
a3:1b:a2:d4:cb:5c:25:0e:82:ed:bb:77:9f:1f:40:
a7:3a:9a:db:35:21:f1:10:1c:6b:d5:3c:b1:cd:0e:
02:46:0c:9f:2b:f8:e6:22:a6:31:c5:96:ef:67:80:
78:6f:a0:d2:ef:52:a8:81:be:dd:d1:8c:55:59:cb:
4c:34:e8:2e:a0:ab:d6:f3:ca:d4:b9:d2:b2:7c:a5:
e4:c6:a9:2a:75:54:43:cd:ac:83:be:92:84:e7:df:
cd:22:53:fc:c0:1e:bf:01:90:c7:cf:43:61:e2:50:
97:4b:e3:fc:bf:ee:10:94:b5:c7:18:77:7a:62:0d:
b3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EE:11:AD:8C:26:D2:AD:75:8B:68:41:14:8B:69:06:E7:1F:14:F9
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.143.0/24
Signature Algorithm: sha256WithRSAEncryption
08:68:cc:6b:eb:d8:eb:05:bb:bb:27:9d:c2:e0:0c:b7:ed:8f:
43:e3:d6:2d:1e:18:2e:ac:32:07:b8:28:f6:01:fb:76:92:ee:
40:4f:51:70:ce:c0:f3:64:4f:62:d8:59:84:f2:53:44:c6:05:
19:e9:74:0b:03:3d:f8:ad:26:02:60:ef:52:55:e5:97:6b:0f:
40:38:e6:80:09:a8:84:a1:60:9f:4c:0e:ed:b2:75:6d:84:8a:
e9:65:de:ce:4b:2c:ed:de:3c:dd:e7:53:33:30:9d:af:a7:0a:
d2:57:95:e9:79:d8:bf:cd:d6:6c:9f:60:b9:56:91:47:b6:f7:
0e:d6:75:8a:d0:5c:ea:94:a6:36:3a:d4:6f:58:be:de:db:58:
6d:a7:1f:d9:2b:65:07:c9:54:3b:79:3c:41:64:47:ab:6b:28:
8b:e0:38:a8:a5:8e:30:ef:a6:75:85:1f:fb:37:a7:7c:e7:85:
49:24:44:77:de:cc:1b:41:6d:e6:8b:7a:4d:d1:7a:0f:2a:42:
7d:6c:43:48:84:5f:b9:3c:0a:d6:8f:f3:bf:72:77:d9:53:cb:
90:dc:ef:c6:60:b5:57:19:4f:65:4c:4f:ca:a2:98:d6:1f:a7:
ca:01:f0:d5:3d:1e:07:6c:3b:a3:0f:b4:5d:2d:ec:d4:71:29:
34:cd:be:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:06 2025 by rpki-client