Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa
File: 34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa (raw, json)
Hash identifier: ZZTeFnnkmIFoyKByZKAoXkqiW3x9U8bfEnkF0EICwb0=
Subject key identifier: 15:5B:42:25:38:FF:D4:ED:08:C7:03:BE:E8:5B:BA:46:FE:EA:BC:54
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 11B3CA108DB1B3EC53F54834DF7C84D821888A0C
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa
Signing time: Fri 07 Feb 2025 19:53:53 +0000
ROA not before: Fri 07 Feb 2025 19:48:53 +0000
ROA not after: Fri 06 Feb 2026 19:53:53 +0000
asID: 269070
IP address blocks: 45.145.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:b3:ca:10:8d:b1:b3:ec:53:f5:48:34:df:7c:84:d8:21:88:8a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Feb 7 19:48:53 2025 GMT
Not After : Feb 6 19:53:53 2026 GMT
Subject: CN=155B422538FFD4ED08C703BEE85BBA46FEEABC54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:89:de:a1:60:f1:93:14:4f:f8:07:30:a2:
26:3c:68:4f:0b:4b:21:49:25:4c:3c:d3:a0:af:e5:
51:1e:e9:41:f2:f4:7c:a8:00:9a:c9:b0:78:43:86:
91:26:17:31:28:b0:b8:24:9f:ef:62:45:a2:3c:14:
dc:3a:9a:7d:ee:24:c3:ec:a1:31:43:ca:de:02:a2:
e9:6f:e6:90:c3:4a:08:21:8d:c1:b9:7b:10:54:4a:
c4:ea:6a:86:3e:a1:94:36:67:63:72:3e:4b:e9:51:
68:aa:da:e5:00:bd:8e:ba:e0:f6:a8:7a:c9:6a:72:
11:17:1d:8e:06:e2:03:e5:06:64:5a:94:51:f4:1a:
67:16:ab:a1:1b:4e:ed:03:98:78:35:26:27:db:41:
f8:57:f2:9e:23:71:9e:b6:41:94:45:80:3f:ca:64:
37:e3:de:35:5d:d1:cd:86:55:2d:86:a6:49:f3:88:
18:2b:c2:00:14:64:3c:29:12:6a:45:c4:1b:ea:59:
6c:5a:43:ce:86:61:26:ae:40:a3:1f:3a:9f:02:61:
df:59:d7:b0:e0:c1:c1:a6:d5:84:f5:9b:c5:e1:88:
ea:02:68:46:c8:05:a1:da:70:c8:b1:fa:ec:1b:04:
ee:e0:66:1d:cd:bb:70:ed:16:1e:43:9d:f1:6e:14:
0f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5B:42:25:38:FF:D4:ED:08:C7:03:BE:E8:5B:BA:46:FE:EA:BC:54
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.240.0/24
Signature Algorithm: sha256WithRSAEncryption
35:9f:41:ff:db:fc:d9:ba:b1:50:d7:51:bb:17:01:de:fb:bb:
eb:67:07:79:cc:85:b8:04:af:e5:49:8c:22:d6:aa:95:8f:75:
31:02:3a:7e:02:2c:a7:9f:e0:c3:f9:35:4c:3b:44:c0:9e:25:
12:13:c7:9f:64:ff:63:5d:55:f3:7c:61:37:2c:1b:60:37:f3:
bc:ee:07:e4:1f:a7:33:4c:ac:6a:d5:5c:e0:35:31:b0:dd:52:
69:4e:1c:b8:fa:72:e9:ce:b0:2f:5f:35:82:17:f8:21:e1:0f:
35:ef:a7:06:d2:e5:cb:37:fd:f5:c0:4b:4b:b4:04:8d:4a:77:
2e:86:0a:d1:0c:dc:aa:cd:a1:d7:1a:ff:d0:c2:56:02:3d:bd:
42:71:44:5b:c7:ef:a5:d3:09:c7:5e:5a:65:e6:d6:67:79:4f:
d9:2a:a0:f8:e6:e7:b9:6a:4e:54:1a:71:65:34:26:6b:70:c9:
2c:85:3e:9d:10:e5:78:cc:2c:7d:db:7c:f1:04:ba:3c:f9:57:
ec:53:ef:f8:11:65:43:4f:3a:64:87:81:45:9d:35:dd:69:e5:
92:e2:f7:c7:e7:b0:b5:a1:9a:9a:62:24:17:81:91:52:34:a3:
d8:92:a1:6b:87:3d:9f:50:d3:3a:1a:72:cc:e2:21:1f:5b:d4:
ce:7d:6d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:22:30 2025 by rpki-client