Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39392e302f32342d3234203d3e20323134303235.roa
File: 34352e3133322e39392e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier: B8d2+hncDJwYWFBE/6NU4UUNL6b5ndRIKavdpX9Gi6o=
Subject key identifier: F5:82:3B:81:D6:96:FD:60:36:43:5E:E4:EF:F8:71:3D:EC:52:A2:F5
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 76185AA40121F96F5D4A7702578BE13F1CAF2D4E
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39392e302f32342d3234203d3e20323134303235.roa
Signing time: Thu 06 Feb 2025 17:02:58 +0000
ROA not before: Thu 06 Feb 2025 16:57:58 +0000
ROA not after: Thu 05 Feb 2026 17:02:58 +0000
asID: 214025
IP address blocks: 45.132.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:18:5a:a4:01:21:f9:6f:5d:4a:77:02:57:8b:e1:3f:1c:af:2d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Feb 6 16:57:58 2025 GMT
Not After : Feb 5 17:02:58 2026 GMT
Subject: CN=F5823B81D696FD6036435EE4EFF8713DEC52A2F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:ef:2e:48:fa:54:e8:38:c2:2a:15:46:4e:
91:36:a7:70:22:5e:4d:6f:4e:eb:be:c5:4c:fc:2a:
54:0c:21:3f:44:92:d0:5e:f7:d9:59:c0:c5:80:28:
89:76:2b:78:cd:40:7e:ad:90:01:f0:8a:aa:11:3b:
ed:06:d1:3e:b6:bd:a3:91:7f:b7:6c:50:76:7d:d0:
54:61:95:f4:52:da:2a:14:ab:89:e7:a9:72:0d:8a:
9f:86:51:c2:80:38:4a:50:4c:b1:c8:db:79:da:79:
50:4f:9f:87:a2:b0:54:a6:bd:6d:c4:80:a8:4f:0f:
11:24:48:e3:83:d3:96:eb:dd:4a:40:ea:28:a4:7a:
85:2b:95:7a:40:3f:41:03:98:9c:ae:05:ed:b6:17:
21:f3:9e:53:40:74:97:1a:5b:d2:f1:27:52:9d:d7:
87:18:ab:c4:6a:f4:da:bc:35:9a:b8:50:48:40:66:
cd:b1:30:8f:3c:9b:cc:1e:0e:36:4b:85:b3:28:ff:
a9:b6:6a:af:c0:2f:27:fd:31:55:be:94:53:6b:33:
58:9a:55:97:65:c8:8f:78:98:49:55:ab:9a:2e:71:
26:64:0d:29:85:c8:86:22:9b:88:35:a4:1c:97:ac:
43:ec:6e:bc:df:48:b3:b7:16:51:4d:89:39:b3:4b:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:82:3B:81:D6:96:FD:60:36:43:5E:E4:EF:F8:71:3D:EC:52:A2:F5
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39392e302f32342d3234203d3e20323134303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.99.0/24
Signature Algorithm: sha256WithRSAEncryption
11:51:f3:b6:2a:ed:52:5a:c1:a3:38:12:9a:a5:55:e7:46:d9:
de:0d:da:fe:2f:08:54:93:e3:24:15:3a:35:ac:75:c0:17:b5:
bc:c6:60:0d:f5:79:2e:44:13:24:11:f3:9e:1f:51:f3:05:f5:
4e:dc:a8:dc:81:76:81:33:95:44:33:b9:8d:10:e4:dd:de:bd:
bd:1d:ad:ae:17:d0:c9:7a:95:79:52:f7:b8:05:d9:d7:ca:0e:
10:f9:05:17:b2:88:b6:a3:f8:dc:3a:f7:31:51:98:3c:93:e7:
c6:0b:ba:65:26:09:2e:c8:e9:2b:f5:4f:75:1b:40:37:c3:c5:
fd:c7:92:bd:ae:3c:3d:10:21:4f:09:58:d2:b0:34:17:f7:fa:
6e:aa:24:ff:c6:6c:e4:c1:57:55:c0:09:94:d2:78:9c:ef:6b:
c7:43:0f:84:65:30:f6:05:1b:3a:9d:ed:11:6f:75:fb:6e:b5:
23:f1:9c:61:1b:65:3f:e1:ac:d4:cf:ea:f1:02:71:3a:0b:a3:
2f:f9:cc:81:48:7f:ff:dc:fd:ea:2b:d2:c4:32:40:79:c2:c8:
41:bc:39:d6:78:91:bb:f4:eb:4f:51:49:81:9a:ee:66:22:22:
95:7d:6f:e3:8b:33:38:2f:b6:98:0a:df:10:a6:90:2c:98:21:
4f:62:4b:85
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUdhhapAEh+W9dSncCV4vhPxyvLU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yNTAyMDYxNjU3NThaFw0yNjAyMDUxNzAyNThaMDMxMTAvBgNV
BAMTKEY1ODIzQjgxRDY5NkZENjAzNjQzNUVFNEVGRjg3MTNERUM1MkEyRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCale8uSPpU6DjCKhVGTpE2p3Ai
Xk1vTuu+xUz8KlQMIT9EktBe99lZwMWAKIl2K3jNQH6tkAHwiqoRO+0G0T62vaOR
f7dsUHZ90FRhlfRS2ioUq4nnqXINip+GUcKAOEpQTLHI23naeVBPn4eisFSmvW3E
gKhPDxEkSOOD05br3UpA6iikeoUrlXpAP0EDmJyuBe22FyHznlNAdJcaW9LxJ1Kd
14cYq8Rq9Nq8NZq4UEhAZs2xMI88m8weDjZLhbMo/6m2aq/ALyf9MVW+lFNrM1ia
VZdlyI94mElVq5oucSZkDSmFyIYim4g1pByXrEPsbrzfSLO3FlFNiTmzS5ApAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU9YI7gdaW/WA2Q17k7/hxPexSovUwHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzQzNTJlMzEzMzMyMmUzOTM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzAzMjM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LYRjMA0GCSqGSIb3DQEBCwUAA4IBAQARUfO2Ku1SWsGjOBKapVXnRtneDdr+LwhU
k+MkFTo1rHXAF7W8xmAN9XkuRBMkEfOeH1HzBfVO3KjcgXaBM5VEM7mNEOTd3r29
Ha2uF9DJepV5Uve4BdnXyg4Q+QUXsoi2o/jcOvcxUZg8k+fGC7plJgkuyOkr9U91
G0A3w8X9x5K9rjw9ECFPCVjSsDQX9/puqiT/xmzkwVdVwAmU0nic72vHQw+EZTD2
BRs6ne0Rb3X7brUj8ZxhG2U/4azUz+rxAnE6C6Mv+cyBSH//3P3qK9LEMkB5wshB
vDnWeJG79OtPUUmBmu5mIiKVfW/jizM4L7aYCt8QppAsmCFPYkuF
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:35 2025 by rpki-client