Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/13/34352e38352e31362e302f32322d3234203d3e20323032333834.roa
File: 34352e38352e31362e302f32322d3234203d3e20323032333834.roa (raw, json)
Hash identifier: c96Co1IZZ0Ns40+XMg4kwnkqkluCrq1r2OB78wTWeSk=
Subject key identifier: 00:8A:0D:8F:D9:0A:1F:79:16:1E:E1:8D:EA:48:4B:45:2C:7B:99:E5
Certificate issuer: /CN=ccaf873e18e4a5500dbf80194f6fbd99fb2663ee
Certificate serial: 24F40E7E6CFBDF75EF48A8EA4E9330B9F7C67DC4
Authority key identifier: CC:AF:87:3E:18:E4:A5:50:0D:BF:80:19:4F:6F:BD:99:FB:26:63:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK-HPhjkpVANv4AZT2-9mfsmY-4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/13/34352e38352e31362e302f32322d3234203d3e20323032333834.roa
Signing time: Wed 10 Jan 2024 20:51:40 +0000
ROA not before: Wed 10 Jan 2024 20:46:40 +0000
ROA not after: Wed 08 Jan 2025 20:51:40 +0000
asID: 202384
IP address blocks: 45.85.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f4:0e:7e:6c:fb:df:75:ef:48:a8:ea:4e:93:30:b9:f7:c6:7d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccaf873e18e4a5500dbf80194f6fbd99fb2663ee
Validity
Not Before: Jan 10 20:46:40 2024 GMT
Not After : Jan 8 20:51:40 2025 GMT
Subject: CN=008A0D8FD90A1F79161EE18DEA484B452C7B99E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:1b:3f:c3:bd:9e:12:66:77:be:9d:9b:7a:
c5:37:5d:06:0b:91:fb:41:12:39:d4:54:02:cc:57:
62:e6:6e:f2:31:09:d8:09:16:1e:14:5b:04:c5:08:
23:1a:10:20:38:2b:a8:80:1c:41:22:2d:7a:34:39:
d3:ac:6b:ef:38:4f:ce:ed:c2:5b:3b:e1:a3:80:3e:
56:da:54:32:bd:3a:76:0f:99:91:0e:42:76:a3:60:
da:18:3b:d1:37:15:d3:a2:cd:57:86:c4:2e:8b:c7:
eb:2f:64:ad:d2:64:9e:8c:15:25:94:0d:16:6e:86:
6e:4d:48:b2:7d:6a:aa:78:21:70:dc:2c:f4:22:e4:
15:c7:cc:9e:6a:25:5d:37:79:d4:10:77:49:7c:dc:
9d:86:42:c7:02:5e:5c:6d:4d:58:b3:df:92:6d:94:
db:93:41:cd:bd:08:14:3c:9e:b6:84:5f:ae:b9:86:
a6:0d:b1:3f:dc:c6:8b:27:f4:04:54:2e:76:66:47:
39:21:d1:29:c4:73:94:dd:0d:0d:bf:3d:95:95:fb:
74:d8:dc:20:fe:ed:ab:17:ef:b9:04:29:b1:f0:f6:
2e:4d:bc:35:8e:30:45:3f:41:9f:38:27:d3:1e:ce:
1d:bb:9a:81:04:26:56:e2:b5:a7:c4:74:17:cb:50:
e9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8A:0D:8F:D9:0A:1F:79:16:1E:E1:8D:EA:48:4B:45:2C:7B:99:E5
X509v3 Authority Key Identifier:
keyid:CC:AF:87:3E:18:E4:A5:50:0D:BF:80:19:4F:6F:BD:99:FB:26:63:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/13/CCAF873E18E4A5500DBF80194F6FBD99FB2663EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK-HPhjkpVANv4AZT2-9mfsmY-4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/13/34352e38352e31362e302f32322d3234203d3e20323032333834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.16.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:de:0a:2b:ed:57:e1:2c:a6:a8:a1:a7:ff:3e:ec:3a:26:64:
f3:c7:a8:78:05:b3:33:c2:9f:1c:4d:5d:d7:83:56:03:a5:b4:
bb:c8:b5:9c:e1:57:19:f0:3f:16:88:76:23:1a:3c:44:0c:86:
9a:8c:d8:5b:89:b8:96:76:b9:5a:11:fa:fa:3d:b8:ff:74:12:
d7:e7:a2:ff:ef:ed:c5:dd:13:c6:60:a1:16:79:53:1e:86:3e:
73:b5:39:67:f7:3e:c7:4c:72:b0:f4:a6:fa:0b:41:e3:06:9d:
cc:88:a6:0f:b7:58:4a:65:68:cf:29:11:f1:97:20:73:15:ed:
64:1c:0a:00:9d:28:6a:d9:d8:18:6b:68:1d:d9:31:6e:53:df:
62:c4:16:47:6a:2a:76:c9:5c:27:f5:bf:2c:cd:07:14:58:59:
bf:a9:ef:ce:17:aa:ba:11:15:82:02:f7:0b:65:0e:d4:98:cc:
5a:ee:02:fc:81:af:c6:dc:2c:27:73:42:85:bc:43:da:70:90:
82:2a:93:11:10:bb:6f:c3:60:ca:a7:d2:7c:34:07:54:2c:ea:
7b:98:ad:55:fb:37:82:11:3d:ee:94:5b:02:29:a7:52:60:95:
3b:04:d7:c6:67:68:fe:c3:08:9c:5f:5a:3d:17:84:73:c5:fc:
e6:33:1e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:45:02 2025 by rpki-client