Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3135312e302f32342d3234203d3e20333933393432.roa
File: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (raw, json)
Hash identifier: WkX/VhOIB2Xh55Xo8/0X7WB7DxjTEctJTPIyu/NmXnQ=
Subject key identifier: CE:E7:5A:06:0D:6E:3C:42:3C:96:60:CD:93:EC:08:1C:21:4C:76:5F
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 228DB371EE3A9CB9562CF32642D0DBFADA1E5B1E
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3135312e302f32342d3234203d3e20333933393432.roa
Signing time: Fri 07 Mar 2025 02:12:05 +0000
ROA not before: Fri 07 Mar 2025 02:07:05 +0000
ROA not after: Fri 06 Mar 2026 02:12:05 +0000
asID: 393942
IP address blocks: 45.66.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:8d:b3:71:ee:3a:9c:b9:56:2c:f3:26:42:d0:db:fa:da:1e:5b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Mar 7 02:07:05 2025 GMT
Not After : Mar 6 02:12:05 2026 GMT
Subject: CN=CEE75A060D6E3C423C9660CD93EC081C214C765F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e5:80:4f:df:18:5f:4d:93:7e:3b:8b:3e:7c:
8d:c8:4a:b2:c1:c1:5d:5d:fa:f1:3f:33:fa:e7:a6:
21:f4:f5:ee:98:ba:9f:b2:54:9c:16:4b:3d:dd:16:
45:a4:ad:a7:4c:5a:d9:a1:c1:cf:57:ae:53:8b:40:
dd:29:c2:82:27:d5:1d:3b:f7:e4:82:15:1e:c0:83:
35:8a:f4:b5:68:ad:64:ae:be:46:d6:af:90:77:86:
ba:9a:a2:c6:3b:ea:22:cf:d3:bf:bc:3a:48:cd:7d:
4a:62:2c:b2:b2:22:6d:58:e8:aa:61:32:75:2c:c6:
a7:d8:57:07:54:7f:80:ee:9a:9d:fb:7a:9c:80:b6:
bb:93:ee:46:b0:79:2b:ce:d7:4e:c7:5b:2c:3a:d7:
2c:cd:f9:8a:c6:bd:d9:ed:81:df:91:9d:7d:4a:a4:
16:2d:d8:d6:62:e2:fc:d0:fd:e8:5e:4c:93:c6:75:
d2:f9:76:29:11:eb:6b:56:df:1a:ab:5a:93:10:45:
2a:eb:58:90:e3:12:6b:e2:4c:6a:91:97:7b:dc:94:
92:55:0b:46:74:3f:d9:97:ff:dd:75:67:82:3a:1e:
bc:1a:fc:f4:7c:40:94:2d:55:1d:1e:72:5c:29:2a:
55:68:f6:01:91:b1:bf:c4:9d:0c:63:4b:e3:8f:e8:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E7:5A:06:0D:6E:3C:42:3C:96:60:CD:93:EC:08:1C:21:4C:76:5F
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3135312e302f32342d3234203d3e20333933393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.151.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:34:cc:3d:b1:81:72:8a:b7:35:c5:53:a5:43:14:0b:74:a9:
e5:08:f7:f6:b5:2a:2f:7e:ae:3c:9c:dc:d4:ff:dc:06:e6:b3:
b9:3f:55:38:f9:e3:ea:15:06:33:70:25:4f:e6:1b:be:a0:28:
65:14:66:56:35:ae:41:6a:eb:db:7f:a5:44:9c:f7:aa:ee:4b:
b8:4c:a8:af:dc:47:83:5c:cc:21:09:88:05:5c:e0:43:74:78:
ab:7c:45:ec:9a:bd:37:fa:c2:30:32:de:b3:63:b7:47:13:bc:
88:ae:f6:b3:93:72:4a:aa:2a:50:1a:19:73:a9:c0:75:73:60:
28:c7:86:32:a2:d7:a1:cb:13:29:af:5b:3d:e4:fb:53:68:c9:
6a:69:94:92:a9:4e:0a:f5:81:d1:ec:c8:f0:22:1b:72:28:8a:
1d:fd:e3:7c:c8:55:86:42:37:22:3e:c7:ed:60:75:e0:3b:5c:
37:80:13:31:0d:e6:92:ef:7f:44:14:85:4c:ab:df:e4:a0:9d:
fa:7e:07:a9:51:26:ee:85:e5:c3:2d:e7:57:49:a0:88:c7:f8:
0e:3d:8e:07:bb:40:38:bd:8b:ac:ba:f8:50:6a:a4:87:20:0c:
6e:74:73:59:29:65:22:3c:dc:46:08:21:0e:ce:7c:0f:f5:69:
76:62:99:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:53 2025 by rpki-client