Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e352e302f32342d3234203d3e20323131343430.roa
File: 34352e3135342e352e302f32342d3234203d3e20323131343430.roa (raw, json)
Hash identifier: Eyo+CXUXa9fb0pxGUAIfCqzjW+EmpCGz9ltYAe4wvcM=
Subject key identifier: D7:23:BC:78:E5:6B:7A:76:AC:BE:50:14:7B:9C:B8:0D:44:52:17:0D
Certificate issuer: /CN=da90910c27e0a78d5f8a404e69c260275561c59b
Certificate serial: 58A5C0C40AD933678F09C3A8756EF1E77E02D181
Authority key identifier: DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e352e302f32342d3234203d3e20323131343430.roa
Signing time: Thu 08 Feb 2024 14:05:12 +0000
ROA not before: Thu 08 Feb 2024 14:00:12 +0000
ROA not after: Thu 06 Feb 2025 14:05:12 +0000
asID: 211440
IP address blocks: 45.154.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:a5:c0:c4:0a:d9:33:67:8f:09:c3:a8:75:6e:f1:e7:7e:02:d1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da90910c27e0a78d5f8a404e69c260275561c59b
Validity
Not Before: Feb 8 14:00:12 2024 GMT
Not After : Feb 6 14:05:12 2025 GMT
Subject: CN=D723BC78E56B7A76ACBE50147B9CB80D4452170D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:94:b1:c8:34:9e:3b:4c:4c:e8:aa:12:15:
78:71:10:e1:26:50:3d:dc:a9:90:63:10:5a:60:74:
f2:d2:43:25:4a:ac:39:43:23:b7:41:87:ec:f0:bf:
c5:aa:fe:61:a3:16:98:a3:c2:63:ae:60:a6:2d:ed:
90:58:8e:93:41:68:d2:5a:ba:5b:15:e0:e8:36:ac:
ff:b0:ad:c3:e1:d1:eb:39:ff:6b:38:d5:13:ae:5b:
39:f8:eb:c7:3e:01:41:33:c1:26:10:7e:97:53:8b:
ce:bc:30:f5:e8:ee:eb:fb:32:91:bb:7a:05:a5:d9:
a8:b4:dd:c7:89:83:b1:59:7a:13:b8:80:e1:a1:fc:
d3:7c:63:59:b6:6a:42:b2:7d:e8:54:d1:c7:8b:ff:
ee:53:d7:d8:0a:90:e0:64:89:8c:fc:9f:ed:9c:6b:
2a:dc:77:93:be:01:d3:e6:84:65:6f:6f:3f:17:64:
5b:d0:bc:70:76:65:2f:d8:4a:e1:57:f9:ed:6d:35:
c6:a7:c6:7f:eb:de:48:28:76:73:66:5d:0e:0e:a8:
ac:0f:3f:2b:02:40:74:a4:cc:0d:d3:dc:09:1b:e4:
dc:5a:40:72:f2:0f:1e:7d:99:ac:b9:a0:b3:17:d2:
04:92:4c:a6:b2:93:70:48:2b:c0:c0:85:35:fe:8f:
c2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:23:BC:78:E5:6B:7A:76:AC:BE:50:14:7B:9C:B8:0D:44:52:17:0D
X509v3 Authority Key Identifier:
keyid:DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/34352e3135342e352e302f32342d3234203d3e20323131343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.5.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d3:fb:df:d8:35:9f:c0:4a:d6:06:94:1c:b2:e5:67:ea:e1:
be:6a:1b:77:fc:f8:56:53:b8:3f:bd:86:aa:3a:c3:1b:0b:9d:
5f:1e:c6:94:07:af:1f:43:f4:f0:74:cd:6d:57:0f:b4:bb:91:
2b:e2:ba:c7:7e:3a:c7:14:d2:6c:e3:33:c7:e5:4d:7f:43:64:
db:44:f4:d7:01:95:97:78:29:63:8b:9b:f2:67:ec:d6:33:7e:
61:ea:d4:fa:a8:aa:f3:74:cc:de:7e:60:85:a0:5d:b0:85:3e:
cf:45:79:db:96:ae:08:fd:ca:c6:1d:bd:0e:0d:c1:da:3d:92:
13:23:b8:40:69:98:bc:08:91:fe:86:43:c2:9b:b4:f7:b4:d9:
8d:84:fa:ff:ea:94:d5:6d:2d:a0:2a:b4:d3:26:52:0a:2a:1d:
23:6f:c1:f2:9c:19:83:d4:eb:0a:46:57:cc:6b:99:6f:c0:12:
b6:0f:bd:f4:3c:6d:2a:0f:8c:a6:34:4f:9e:71:c9:e2:93:9d:
50:d7:88:8a:1d:ff:71:eb:96:72:b5:1d:73:aa:b7:d8:7e:4f:
f0:4f:1a:22:f3:12:1d:a1:9d:d2:77:ff:5b:73:e1:3f:63:d3:
00:5e:dc:ba:6a:3f:e1:d7:33:55:4b:70:05:23:57:9e:f0:0e:
0c:99:fc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:37 2025 by rpki-client