Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38312e302f32342d3234203d3e20323036343436.roa
File: 34352e31322e38312e302f32342d3234203d3e20323036343436.roa (raw, json)
Hash identifier: GbENGZUuLIS9PGHYrvd354tvvl23U/EPVJV64OJc+JY=
Subject key identifier: AD:36:FA:48:FA:65:0F:1A:16:78:2D:0C:2F:70:5B:C4:06:EC:AD:C4
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 56B52F7091F5B43040FD0B7F00B759E1F1F43ABF
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38312e302f32342d3234203d3e20323036343436.roa
Signing time: Sun 08 Dec 2024 18:53:48 +0000
ROA not before: Sun 08 Dec 2024 18:48:48 +0000
ROA not after: Sun 07 Dec 2025 18:53:48 +0000
asID: 206446
IP address blocks: 45.12.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b5:2f:70:91:f5:b4:30:40:fd:0b:7f:00:b7:59:e1:f1:f4:3a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Dec 8 18:48:48 2024 GMT
Not After : Dec 7 18:53:48 2025 GMT
Subject: CN=AD36FA48FA650F1A16782D0C2F705BC406ECADC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:d8:7f:a8:96:0b:20:c7:7f:8c:e7:e4:36:
1a:21:41:62:78:0b:16:4a:c1:e2:41:c2:0d:0c:d7:
f1:09:69:6f:08:58:19:21:16:a7:05:99:e1:96:1d:
4d:5c:6b:4f:b8:57:35:f0:17:91:97:bc:a7:2b:58:
42:17:87:b3:91:5f:62:69:0e:a6:16:33:38:c1:db:
da:cd:02:ae:68:7d:d5:8b:77:7a:d2:23:d3:29:c9:
be:08:f4:3d:c8:10:fc:09:ea:23:80:90:4e:f6:d0:
40:d1:61:1a:8d:3d:5a:96:b0:63:6c:dd:bb:e7:6a:
9f:73:26:6b:aa:06:64:c1:83:8a:26:09:b8:aa:4d:
e9:35:39:08:1a:6f:55:10:06:37:68:26:ff:50:c3:
a1:21:73:68:01:d4:de:1a:2f:bb:c4:f9:61:a7:2d:
a4:e5:b1:12:4f:86:24:83:d8:29:d7:e3:1b:c1:5c:
01:16:73:d7:f9:49:54:8e:e6:12:12:f9:45:e6:ac:
f4:aa:94:a5:b4:45:4b:20:47:aa:c2:7c:f5:1d:9a:
8a:8b:f0:d4:7f:27:d5:b2:bc:43:16:37:d9:66:40:
e1:a6:1b:bc:5a:e3:4b:d4:1f:04:86:60:6d:36:7e:
de:60:b9:f7:40:4f:fc:0e:99:99:e7:20:be:24:0a:
65:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:36:FA:48:FA:65:0F:1A:16:78:2D:0C:2F:70:5B:C4:06:EC:AD:C4
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38312e302f32342d3234203d3e20323036343436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.81.0/24
Signature Algorithm: sha256WithRSAEncryption
41:4a:6c:fe:d1:7a:64:e4:2c:fc:75:0f:91:93:9a:d9:f3:8e:
e5:55:18:94:f2:39:a8:18:f2:fe:93:8b:68:94:b3:df:1f:88:
87:fb:bb:82:3f:80:e3:e3:b6:a6:88:4a:b2:8b:c3:45:ad:bf:
a2:a9:d9:31:90:2e:06:40:62:fc:18:89:5c:71:f3:a5:e3:a9:
e7:72:ad:06:e3:c9:54:be:18:a2:ce:5d:23:ff:b9:63:02:16:
a4:e3:87:51:b0:46:1d:2e:f0:d7:25:d6:55:db:4b:18:a6:e9:
0c:8c:cc:2a:a7:a6:1c:49:f4:12:2a:4d:a6:7f:4d:a3:56:ba:
70:e9:67:1e:1d:e2:74:8b:2b:3a:8b:81:3e:c9:7b:b6:0f:0d:
28:b6:95:e7:da:52:ae:0f:ae:62:21:9e:fc:d7:0a:52:65:69:
52:c5:b1:53:77:ad:30:4a:20:c1:a3:e3:ec:ac:fe:b2:49:81:
aa:1d:76:75:d7:78:ae:af:af:0e:a4:a5:84:b9:cb:b3:51:3d:
f5:c6:6e:36:29:44:6b:8b:8e:91:2a:01:8a:c4:02:ae:a2:e8:
e6:3f:2c:20:ee:c3:b8:22:b2:d9:ac:59:e2:72:ef:bd:0f:e9:
c1:d8:d9:ea:6c:52:41:39:7b:b4:84:7c:4a:d2:08:be:6c:30:
8d:5a:95:42
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUVrUvcJH1tDBA/Qt/ALdZ4fH0Or8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3
OWI1ZmQ5MTAeFw0yNDEyMDgxODQ4NDhaFw0yNTEyMDcxODUzNDhaMDMxMTAvBgNV
BAMTKEFEMzZGQTQ4RkE2NTBGMUExNjc4MkQwQzJGNzA1QkM0MDZFQ0FEQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnVdh/qJYLIMd/jOfkNhohQWJ4
CxZKweJBwg0M1/EJaW8IWBkhFqcFmeGWHU1ca0+4VzXwF5GXvKcrWEIXh7ORX2Jp
DqYWMzjB29rNAq5ofdWLd3rSI9Mpyb4I9D3IEPwJ6iOAkE720EDRYRqNPVqWsGNs
3bvnap9zJmuqBmTBg4omCbiqTek1OQgab1UQBjdoJv9Qw6Ehc2gB1N4aL7vE+WGn
LaTlsRJPhiSD2CnX4xvBXAEWc9f5SVSO5hIS+UXmrPSqlKW0RUsgR6rCfPUdmoqL
8NR/J9WyvEMWN9lmQOGmG7xa40vUHwSGYG02ft5gufdAT/wOmZnnIL4kCmXHAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUrTb6SPplDxoWeC0ML3BbxAbsrcQwHwYDVR0j
BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5
ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t
MV9aRS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt
ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzQzNTJlMzEzMjJlMzgzMTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNjM0MzQzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0M
UTANBgkqhkiG9w0BAQsFAAOCAQEAQUps/tF6ZOQs/HUPkZOa2fOO5VUYlPI5qBjy
/pOLaJSz3x+Ih/u7gj+A4+O2pohKsovDRa2/oqnZMZAuBkBi/BiJXHHzpeOp53Kt
BuPJVL4Yos5dI/+5YwIWpOOHUbBGHS7w1yXWVdtLGKbpDIzMKqemHEn0EipNpn9N
o1a6cOlnHh3idIsrOouBPsl7tg8NKLaV59pSrg+uYiGe/NcKUmVpUsWxU3etMEog
waPj7Kz+skmBqh12ddd4rq+vDqSlhLnLs1E99cZuNilEa4uOkSoBisQCrqLo5j8s
IO7DuCKy2axZ4nLvvQ/pwdjZ6mxSQTl7tIR8StIIvmwwjVqVQg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:43 2025 by rpki-client