Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0/34352e3134352e3234302e302f32342d3234203d3e203536393133.roa
File: 34352e3134352e3234302e302f32342d3234203d3e203536393133.roa (raw, json)
Hash identifier: IfLNb9wk0eHurDu2/2anDa+V3useNLPoWBukXPDQ5OE=
Subject key identifier: D5:B0:CB:24:7C:C6:76:54:76:78:7D:CE:E5:44:B5:1A:05:62:B6:CC
Certificate issuer: /CN=3fee952bad4efed0ee5b17937a75fbec861dbff7
Certificate serial: 32C5F025B65E1BCD7E2E9E6F23922AD866E575DF
Authority key identifier: 3F:EE:95:2B:AD:4E:FE:D0:EE:5B:17:93:7A:75:FB:EC:86:1D:BF:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-6VK61O_tDuWxeTenX77IYdv_c.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0/34352e3134352e3234302e302f32342d3234203d3e203536393133.roa
Signing time: Fri 31 Mar 2023 14:03:10 +0000
ROA not before: Fri 31 Mar 2023 13:58:10 +0000
ROA not after: Fri 29 Mar 2024 14:03:10 +0000
asID: 56913
IP address blocks: 45.145.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c5:f0:25:b6:5e:1b:cd:7e:2e:9e:6f:23:92:2a:d8:66:e5:75:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fee952bad4efed0ee5b17937a75fbec861dbff7
Validity
Not Before: Mar 31 13:58:10 2023 GMT
Not After : Mar 29 14:03:10 2024 GMT
Subject: CN=D5B0CB247CC6765476787DCEE544B51A0562B6CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:be:8c:1a:fa:f5:13:2a:92:e5:ae:53:26:
cd:b5:93:20:1b:5f:bb:d1:b0:c3:3b:46:f2:19:09:
81:b9:9d:d9:7d:1c:f4:c3:c4:ce:ab:5b:61:24:ce:
cd:5f:69:ef:39:fb:3c:c9:6e:1b:48:87:11:56:4c:
91:f3:9b:25:e5:fd:13:14:a2:e3:9d:27:d3:9a:35:
1b:a9:ac:b8:c1:2b:ab:68:b7:1e:e0:c4:94:d9:4b:
58:4c:55:a9:b3:55:cc:74:fc:7d:f3:4e:65:ae:6e:
72:1a:a4:27:85:25:87:83:c8:af:a6:66:43:09:29:
38:e0:f1:9c:40:15:56:0f:63:c1:11:4d:b5:f2:9e:
26:c9:fa:2a:af:f7:0e:4f:5c:fa:5f:69:4d:55:d5:
08:18:f2:19:5e:79:83:6b:68:6b:ba:7e:45:de:40:
5a:cd:9b:de:32:dc:69:b6:cc:a8:4b:f3:29:5d:8f:
a0:83:52:9a:ef:ed:e3:d5:59:84:d1:04:4e:5b:93:
7d:64:4f:96:0b:83:86:22:f9:66:25:6c:23:24:f9:
82:fe:5c:73:7a:2f:88:53:21:2f:0d:93:84:1a:57:
4f:07:ea:e2:22:c6:b5:02:f6:d2:4a:50:e9:a8:c5:
d9:f5:04:22:20:ed:44:96:9d:c9:61:40:c8:9f:17:
0a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B0:CB:24:7C:C6:76:54:76:78:7D:CE:E5:44:B5:1A:05:62:B6:CC
X509v3 Authority Key Identifier:
keyid:3F:EE:95:2B:AD:4E:FE:D0:EE:5B:17:93:7A:75:FB:EC:86:1D:BF:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0/3FEE952BAD4EFED0EE5B17937A75FBEC861DBFF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-6VK61O_tDuWxeTenX77IYdv_c.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0/34352e3134352e3234302e302f32342d3234203d3e203536393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.240.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:80:c6:79:dd:87:33:7d:fa:e4:90:c8:5f:6b:26:77:0d:59:
5c:68:21:86:80:fe:6f:79:dd:86:da:80:6a:a4:4c:09:93:65:
66:df:09:fc:d3:42:5d:35:2c:b7:7e:d2:3d:25:26:19:a4:e5:
6b:f5:72:62:2e:e4:cf:4b:58:c9:35:74:00:18:29:24:32:56:
b6:9b:3a:b6:00:39:6f:14:b2:0c:e7:76:3e:57:5e:cd:8f:98:
4d:fa:05:c6:45:a9:ef:9f:f6:dc:91:38:6f:e7:cb:d0:bd:64:
ac:c9:cf:3d:c4:c2:6a:ae:19:3e:9b:04:c2:a0:7b:29:50:b0:
7e:82:e5:a4:f1:2c:40:7c:55:43:4b:76:b1:dc:0d:80:d5:45:
46:44:9b:b9:01:ae:9a:62:9c:ec:ce:d1:d3:72:d8:71:23:dc:
3f:73:76:5b:e9:f1:dd:ed:9a:45:e4:ba:c9:be:fa:6f:c2:d8:
f8:f6:9f:84:6a:c6:2b:b2:a1:5d:22:6b:ce:88:fc:19:9b:9e:
ea:81:d7:88:80:6a:4b:d5:c3:3f:78:5b:41:77:40:3e:10:a1:
db:5c:0a:d4:54:40:ce:3c:7d:3e:17:cf:10:b1:5d:c2:04:04:
48:cc:55:fe:31:3c:93:e7:e7:b5:f2:e0:c6:fc:16:ef:33:ac:
fa:37:ae:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:24:31 2025 by rpki-client