Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137332e302f32342d3234203d3e20323135303531.roa
File: 34352e382e3137332e302f32342d3234203d3e20323135303531.roa (raw, json)
Hash identifier: 57fpBk2RaJ3ewZmDLEA9Q1tOyOewIxNjXWis5PqcHJQ=
Subject key identifier: 1A:7A:5B:B1:CA:24:1D:90:D3:41:63:5E:8E:B6:00:2C:2D:EE:A5:97
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 2E7ED8B2CCAFE795175B53D0AF0322B18D21E63D
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137332e302f32342d3234203d3e20323135303531.roa
Signing time: Thu 20 Feb 2025 14:37:01 +0000
ROA not before: Thu 20 Feb 2025 14:32:01 +0000
ROA not after: Thu 19 Feb 2026 14:37:01 +0000
asID: 215051
IP address blocks: 45.8.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:7e:d8:b2:cc:af:e7:95:17:5b:53:d0:af:03:22:b1:8d:21:e6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Feb 20 14:32:01 2025 GMT
Not After : Feb 19 14:37:01 2026 GMT
Subject: CN=1A7A5BB1CA241D90D341635E8EB6002C2DEEA597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:30:19:74:65:80:eb:19:f5:a3:bd:1d:22:
0e:03:07:64:bf:13:8c:cc:fd:0a:6e:17:65:de:dc:
a0:40:b2:c7:c9:89:ed:7b:90:05:6d:59:d4:50:29:
e5:72:c8:3b:b5:e2:db:92:3c:79:87:dd:cf:5e:a8:
46:ae:7d:83:f9:39:55:b6:ff:52:1d:8d:10:32:fd:
bf:02:f9:a2:28:bb:65:19:33:0d:85:c4:6c:f0:0c:
c4:66:a0:e8:92:0f:d3:da:3b:35:0e:ab:cf:9d:e4:
72:07:92:7c:f8:37:05:84:07:41:8f:ab:cc:0b:3e:
be:d3:02:0c:9c:3e:64:b3:c3:60:da:7d:19:c0:f2:
ab:c8:7f:98:01:85:27:c2:10:5a:7e:49:fd:f1:5c:
ee:c4:1c:de:a0:d9:3c:4a:af:b2:45:42:08:96:a6:
22:ec:7b:24:79:07:ae:d3:13:60:df:ea:e9:b2:2c:
5c:55:5e:03:1a:86:3d:49:b5:ff:a9:c2:7b:e3:84:
46:07:f4:ea:39:ad:08:0c:45:e6:90:62:d6:a6:9b:
87:67:e7:f5:c2:ac:6d:97:27:68:bf:b3:3c:ee:f7:
6b:12:2d:e3:5f:b4:37:f0:b4:27:e7:ef:ec:01:dd:
94:13:7f:a1:fa:76:e6:3a:ad:a5:fd:ad:bc:16:9e:
42:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:5B:B1:CA:24:1D:90:D3:41:63:5E:8E:B6:00:2C:2D:EE:A5:97
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137332e302f32342d3234203d3e20323135303531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.173.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d3:34:3f:6b:13:c4:f1:f5:01:2e:cf:42:c5:38:bb:7a:12:
5b:0e:b9:3a:fa:a3:6f:ce:a6:f4:c2:ee:58:04:ae:8f:73:fc:
b9:d7:65:24:0f:b3:af:dd:54:3a:a4:be:ff:a7:01:5a:0e:ac:
b7:54:40:52:1f:e1:01:7a:9b:bb:2a:14:d5:32:48:db:e2:0a:
03:1f:62:de:b4:04:97:e2:2e:56:a3:6b:33:3b:25:0e:3f:5b:
db:a0:32:9e:2d:67:bd:45:c4:85:66:4e:2a:8b:35:fe:3e:f9:
2b:55:b5:6a:a1:bc:fc:73:c9:ce:cf:ae:d2:ac:ce:e8:84:af:
ca:01:16:49:9d:50:d4:6d:55:dd:76:e5:9e:61:7e:c2:9b:91:
96:1e:52:b2:a9:f8:a8:34:da:c7:05:55:c9:03:43:cf:2a:c8:
0d:e8:a6:f8:b1:78:74:86:c0:47:9c:60:49:33:19:d2:8d:16:
06:be:20:2d:c0:5f:92:b1:46:5e:b0:c4:3c:cc:38:eb:66:34:
e0:09:a4:51:9d:88:44:50:75:52:bc:16:fd:d4:62:70:90:51:
d2:87:c0:89:6d:a3:27:be:7c:6d:02:0e:61:cc:1f:24:dc:fa:
30:b1:33:0b:0a:5e:93:43:36:87:3b:7d:df:4d:d6:46:85:1b:
4f:c7:d8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:30 2025 by rpki-client