Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3133322e39372e302f32342d3234203d3e203535323836.roa
File: 34352e3133322e39372e302f32342d3234203d3e203535323836.roa (raw, json)
Hash identifier: AU5yMujn57igY2l6ih0Q7y0f7UzkT89j4fCfoCxy9OY=
Subject key identifier: C4:B1:A6:C6:85:45:29:94:B2:09:F7:06:83:E0:0D:2F:59:EA:53:18
Certificate issuer: /CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Certificate serial: 554C8AED602631DA3F97C9C6F12EE79659FCDA2D
Authority key identifier: DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3133322e39372e302f32342d3234203d3e203535323836.roa
Signing time: Sat 29 Apr 2023 09:30:32 +0000
ROA not before: Sat 29 Apr 2023 09:25:32 +0000
ROA not after: Sat 27 Apr 2024 09:30:32 +0000
asID: 55286
IP address blocks: 45.132.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:4c:8a:ed:60:26:31:da:3f:97:c9:c6:f1:2e:e7:96:59:fc:da:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f1af9e919a9653268327b98814cafeb5c0a13
Validity
Not Before: Apr 29 09:25:32 2023 GMT
Not After : Apr 27 09:30:32 2024 GMT
Subject: CN=C4B1A6C685452994B209F70683E00D2F59EA5318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:83:7b:17:31:c9:30:a8:02:74:c2:81:60:
60:1a:6f:ba:1d:0b:8a:39:5c:c9:2f:73:0b:87:a2:
f5:ef:fb:70:e4:f3:3d:5a:89:e1:17:ce:67:70:8b:
54:26:87:f2:a5:b8:5d:ad:90:9a:50:3f:22:c1:90:
dc:3f:0d:da:27:19:62:7f:29:ea:07:77:5b:38:c0:
27:0a:c0:07:93:92:bf:50:17:4f:8f:dd:80:3d:0a:
8b:e8:a8:d7:15:b6:aa:c7:02:d3:72:ab:9c:be:75:
35:22:7d:41:17:a8:ec:1c:fb:7e:b6:07:75:0e:47:
91:ee:70:23:45:6f:21:75:f7:f8:c6:7e:b0:4d:37:
ee:4c:de:30:7f:d0:8e:72:c5:75:37:fa:44:47:1e:
b3:7e:29:43:a4:f1:73:c6:1a:3c:e5:bf:4a:29:38:
5e:45:28:0f:ca:7f:2e:45:ac:f8:7c:51:ff:59:54:
ab:97:2d:c3:6e:8b:76:82:02:d8:2c:21:ec:2b:26:
58:8f:1f:2e:33:5e:fc:c6:12:e2:be:56:b9:34:4f:
6d:72:17:76:da:12:14:f9:e1:92:b6:72:95:27:67:
66:53:a9:78:d7:d9:ee:6e:c2:e3:c8:93:49:3b:f3:
b2:99:75:22:83:78:01:eb:92:9c:c0:69:fa:e9:d0:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B1:A6:C6:85:45:29:94:B2:09:F7:06:83:E0:0D:2F:59:EA:53:18
X509v3 Authority Key Identifier:
keyid:DF:6F:1A:F9:E9:19:A9:65:32:68:32:7B:98:81:4C:AF:EB:5C:0A:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/DF6F1AF9E919A9653268327B98814CAFEB5C0A13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/328a-ekZqWUyaDJ7mIFMr-tcChM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/0/34352e3133322e39372e302f32342d3234203d3e203535323836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.97.0/24
Signature Algorithm: sha256WithRSAEncryption
87:db:46:92:61:2c:8b:21:49:9a:58:ab:23:ba:2b:87:82:51:
6b:91:81:6e:03:6a:f4:68:e9:73:f2:98:28:7a:45:41:0b:b7:
5f:8e:37:4b:5f:9b:a7:0d:e8:6a:17:ab:32:e3:8d:25:03:17:
c9:85:db:a7:f4:3e:f8:a6:06:d9:24:c4:f5:68:d1:7f:e3:cc:
15:fe:df:52:72:12:2e:f6:b8:1f:ad:8d:ae:48:9b:91:95:31:
ad:4d:1a:80:ce:de:00:6f:ad:dd:08:27:28:92:80:04:e8:b0:
d9:87:f9:65:77:9c:87:1b:d4:0e:22:87:36:64:47:d0:31:45:
b7:58:9c:1e:3b:7d:1a:44:84:c8:0d:61:ce:62:48:47:bf:05:
27:04:9a:05:5d:f8:9f:c0:67:2d:cd:79:62:c6:87:2d:af:e8:
7d:48:03:2f:a1:af:6f:e3:e0:8b:cb:8f:6f:71:90:56:1d:cc:
ce:52:ce:74:45:83:b4:ed:10:68:ad:f2:e3:ec:6c:39:74:2d:
4b:f8:6a:fd:fa:56:e9:5b:e0:35:3f:54:4e:5c:f0:ff:40:58:
49:e3:5c:78:cd:2c:c8:1d:4a:90:08:eb:09:ca:eb:51:fe:76:
6e:3e:88:2d:f9:e1:db:ba:bd:55:71:0d:8c:b2:74:3e:04:16:
ba:0a:63:8e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUVUyK7WAmMdo/l8nG8S7nlln82i0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGY2ZjFhZjllOTE5YTk2NTMyNjgzMjdiOTg4MTRjYWZl
YjVjMGExMzAeFw0yMzA0MjkwOTI1MzJaFw0yNDA0MjcwOTMwMzJaMDMxMTAvBgNV
BAMTKEM0QjFBNkM2ODU0NTI5OTRCMjA5RjcwNjgzRTAwRDJGNTlFQTUzMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIoN7FzHJMKgCdMKBYGAab7od
C4o5XMkvcwuHovXv+3Dk8z1aieEXzmdwi1Qmh/KluF2tkJpQPyLBkNw/DdonGWJ/
KeoHd1s4wCcKwAeTkr9QF0+P3YA9CovoqNcVtqrHAtNyq5y+dTUifUEXqOwc+362
B3UOR5HucCNFbyF19/jGfrBNN+5M3jB/0I5yxXU3+kRHHrN+KUOk8XPGGjzlv0op
OF5FKA/Kfy5FrPh8Uf9ZVKuXLcNui3aCAtgsIewrJliPHy4zXvzGEuK+Vrk0T21y
F3baEhT54ZK2cpUnZ2ZTqXjX2e5uwuPIk0k787KZdSKDeAHrkpzAafrp0L3tAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUxLGmxoVFKZSyCfcGg+ANL1nqUxgwHwYDVR0j
BBgwFoAU328a+ekZqWUyaDJ7mIFMr+tcChMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzAvREY2RjFBRjlFOTE5QTk2NTMyNjgzMjdCOTg4MTRDQUZFQjVDMEExMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyOGEtZWtacVdVeWFESjdtSUZNci10
Y0NoTS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzAvMzQzNTJlMzEzMzMyMmUzOTM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTMyMzgzNi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2E
YTANBgkqhkiG9w0BAQsFAAOCAQEAh9tGkmEsiyFJmlirI7orh4JRa5GBbgNq9Gjp
c/KYKHpFQQu3X443S1+bpw3oaherMuONJQMXyYXbp/Q++KYG2STE9WjRf+PMFf7f
UnISLva4H62NrkibkZUxrU0agM7eAG+t3QgnKJKABOiw2Yf5ZXechxvUDiKHNmRH
0DFFt1icHjt9GkSEyA1hzmJIR78FJwSaBV34n8BnLc15YsaHLa/ofUgDL6Gvb+Pg
i8uPb3GQVh3MzlLOdEWDtO0QaK3y4+xsOXQtS/hq/fpW6VvgNT9UTlzw/0BYSeNc
eM0syB1KkAjrCcrrUf52bj6ILfnh27q9VXENjLJ0PgQWugpjjg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:55 2025 by rpki-client