Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33372e302f32342d3234203d3e20383334.roa
File: 34352e3134302e33372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ea7OFzmrTJ6vwYnfednNza205RuvrZ/M/Rf9/8uFMtM=
Subject key identifier: 55:EE:57:88:B9:17:EC:92:62:71:2A:FD:34:1A:CF:4F:4B:B9:66:DC
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 31D391CF122D032263CDE2AA955E95D0CC63487A
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33372e302f32342d3234203d3e20383334.roa
Signing time: Sat 15 Mar 2025 00:04:59 +0000
ROA not before: Fri 14 Mar 2025 23:59:59 +0000
ROA not after: Sat 14 Mar 2026 00:04:59 +0000
asID: 834
IP address blocks: 45.140.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d3:91:cf:12:2d:03:22:63:cd:e2:aa:95:5e:95:d0:cc:63:48:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Mar 14 23:59:59 2025 GMT
Not After : Mar 14 00:04:59 2026 GMT
Subject: CN=55EE5788B917EC9262712AFD341ACF4F4BB966DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:66:c7:26:17:ed:c6:ee:7f:e6:5c:71:42:
88:31:23:45:51:56:22:61:95:e7:37:8d:80:38:58:
5b:0d:e3:55:0a:7a:f9:5b:22:49:dc:3c:c9:45:5a:
80:a5:b2:f7:8a:db:00:32:b9:85:e3:3b:7c:4b:26:
7b:ef:f3:87:b2:2d:07:fe:6b:66:e5:06:e4:23:9a:
32:dc:42:45:dd:e6:1e:b2:f5:d4:10:52:ba:14:89:
96:e7:89:66:51:64:41:08:cd:19:7e:19:00:a5:0a:
cd:61:9f:4a:08:24:cc:f4:00:c4:a2:4c:4b:4f:33:
ba:d1:a9:4c:03:42:ac:c9:b3:22:df:4d:f8:77:c5:
92:1b:d8:1c:c7:ff:48:96:2f:93:da:72:7c:bc:77:
99:b4:8a:e0:f8:af:8c:26:49:01:bb:b2:98:79:45:
e8:6e:5b:47:fe:59:89:73:5c:c1:4e:71:c9:a8:cc:
f3:c6:92:14:e0:a8:c6:12:9f:8f:e5:bd:a9:40:7d:
33:83:c1:a8:c1:c5:32:03:81:25:26:96:95:e0:97:
97:7c:02:36:87:b6:02:ca:fd:1b:cc:a7:a1:b3:bc:
2f:ec:94:79:f1:b5:8b:11:a0:db:6b:c8:2d:1e:87:
c6:f3:4f:e6:ac:2c:84:10:12:a8:d7:6a:e6:1b:e5:
83:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EE:57:88:B9:17:EC:92:62:71:2A:FD:34:1A:CF:4F:4B:B9:66:DC
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.37.0/24
Signature Algorithm: sha256WithRSAEncryption
90:2b:dc:13:cf:56:84:a9:1b:a9:71:d9:00:d8:cf:af:65:e6:
57:70:8e:6e:9d:dd:79:d3:e8:44:dc:eb:f8:24:9f:43:c7:05:
f4:66:b7:9c:b5:35:32:1f:d6:77:c2:bb:97:1d:c4:07:99:69:
1a:80:67:33:8c:b4:76:16:2f:9c:82:35:9a:e1:04:01:6e:15:
6b:5a:2f:4e:66:24:cb:15:3d:e1:e4:4b:8f:d3:83:71:92:09:
44:d7:3e:f6:f0:24:26:04:fc:ec:18:44:4c:58:b5:b4:4c:4c:
4b:1e:bf:e0:d4:8e:b8:20:b4:83:fb:c8:b8:81:18:16:2b:94:
1f:80:fd:90:3f:e8:b7:8c:10:85:b7:8c:0b:c7:e4:9c:7c:bb:
9b:3d:ab:28:5e:79:34:40:f3:d0:51:4b:29:64:19:46:bc:9a:
62:cd:03:4e:e7:64:7c:8a:3d:ff:06:a7:7e:4b:e9:6d:a4:cb:
f8:5e:cd:6f:14:18:24:e1:96:e2:8f:e3:47:26:59:75:43:50:
dd:46:8b:1c:72:40:38:4a:04:37:a2:56:91:fc:3f:60:e3:db:
92:d1:54:fd:c8:aa:95:5f:5d:0e:fc:fa:dc:fe:6e:3f:d2:14:
c1:a1:d3:32:37:25:53:e2:d2:fa:4b:c5:8c:a8:7e:0d:6b:c0:
bc:33:6b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:47 2025 by rpki-client