Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35362e302f32342d3234203d3e203634323637.roa
File: 34352e38312e35362e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: kGVNeEKX35ugOpsFmA5GwCl6f0GnZpLJS8pEn3cyWJI=
Subject key identifier: E5:45:2D:B1:A8:BC:E9:FB:31:12:1E:AC:7D:9A:94:F2:6A:B0:EC:86
Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Certificate serial: 53A141723C39FFDD80BACE4A763FF1862BCE0523
Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35362e302f32342d3234203d3e203634323637.roa
Signing time: Wed 27 Nov 2024 13:43:28 +0000
ROA not before: Wed 27 Nov 2024 13:38:28 +0000
ROA not after: Wed 26 Nov 2025 13:43:28 +0000
asID: 64267
IP address blocks: 45.81.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a1:41:72:3c:39:ff:dd:80:ba:ce:4a:76:3f:f1:86:2b:ce:05:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Validity
Not Before: Nov 27 13:38:28 2024 GMT
Not After : Nov 26 13:43:28 2025 GMT
Subject: CN=E5452DB1A8BCE9FB31121EAC7D9A94F26AB0EC86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:57:18:65:0c:ec:28:6c:a4:e0:c3:28:23:69:
b5:d9:f7:08:d5:f2:30:a0:c4:5d:e7:05:e1:e9:b6:
87:4e:2c:57:82:b4:72:c7:f3:82:02:22:1a:48:96:
75:9e:e9:23:70:19:52:07:b8:7f:33:41:b6:3b:4f:
10:7b:c9:40:6c:bb:4b:6f:f8:d0:f8:6d:d8:a8:73:
d7:77:57:47:55:c9:01:dc:77:4c:14:d8:a1:57:6c:
35:bd:82:36:9a:c3:b3:f6:36:ff:f7:73:e8:ba:7f:
b8:18:cb:1c:2f:a9:94:49:70:ce:06:50:e8:9f:06:
9e:57:57:37:97:84:09:63:c2:fe:53:4e:33:50:05:
41:f6:01:50:cf:b4:c2:4e:79:06:70:4b:bb:89:4e:
27:89:1c:b3:95:0f:cb:7f:f6:a5:7f:3c:a9:9c:b6:
22:9c:e7:7b:ca:e4:6f:96:8f:5d:26:13:45:76:c5:
30:fc:8b:a0:03:ed:55:d4:09:c8:f5:45:72:a5:96:
07:d7:7e:e1:3f:13:cf:c3:21:a8:58:35:e4:82:fd:
60:81:53:28:31:ec:5c:69:d3:b9:61:54:2e:12:f3:
86:f2:15:91:19:f8:9c:5a:1e:88:07:81:fe:8b:fc:
5d:9c:1f:10:f5:4c:66:8a:1f:ad:d0:d0:d5:83:8f:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:45:2D:B1:A8:BC:E9:FB:31:12:1E:AC:7D:9A:94:F2:6A:B0:EC:86
X509v3 Authority Key Identifier:
keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35362e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.56.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9f:49:b0:b9:49:ec:21:f3:eb:0e:e7:63:6d:50:73:70:63:
b7:5e:33:72:4a:7c:70:71:92:93:1d:f2:08:df:11:fe:de:41:
dd:ac:55:d9:dd:32:5f:6a:10:e8:97:fa:90:20:be:f4:be:b4:
22:c2:f1:f7:bd:a0:3e:a6:4a:07:14:19:35:c8:1f:5d:84:d5:
8e:a7:d0:92:e6:b5:be:0a:ef:c5:24:57:fb:4e:94:cf:5a:81:
51:d2:45:e6:65:81:13:9b:5d:fc:78:7a:12:d6:27:a2:09:5d:
12:f2:8c:36:44:fa:92:eb:91:74:d1:3d:9d:77:18:5e:2a:c4:
3c:a0:3a:78:e5:16:45:56:80:f2:eb:6a:b0:44:1f:bd:7a:ab:
cd:e5:47:c3:3f:b8:a4:21:08:37:63:66:fd:f3:c8:68:15:ff:
81:29:44:01:60:ee:ca:c1:d1:3e:1a:68:fe:0e:e3:d1:d2:48:
30:3a:f5:f8:28:95:7a:a7:bf:0b:7d:42:5c:0a:6b:2d:fc:b3:
94:5b:13:8a:c4:f3:24:81:22:96:27:5e:1e:68:7b:34:2c:98:
f2:29:d6:95:72:1d:28:d1:0e:77:60:aa:6b:14:20:74:d5:df:
e0:b7:4f:00:f7:a8:c6:9b:25:ad:3a:fd:9a:59:98:7b:c0:d3:
35:4a:51:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:49:22 2025 by rpki-client