Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31312e38302e302f32342d3234203d3e2030.roa
File: 34352e31312e38302e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: IBZvJrcFrWppOADg0BxIutZNpkGm/4qH7jzVPqiy188=
Subject key identifier: 39:9A:7B:60:D5:79:62:53:C1:A4:84:3A:00:47:D3:0A:6D:20:16:CA
Certificate issuer: /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial: 74A1B035C9BD53B3ABD1AE59D699F15B453BE963
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31312e38302e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:45 +0000
ROA not before: Mon 27 Mar 2023 08:22:45 +0000
ROA not after: Mon 25 Mar 2024 08:27:45 +0000
asID: 0
IP address blocks: 45.11.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a1:b0:35:c9:bd:53:b3:ab:d1:ae:59:d6:99:f1:5b:45:3b:e9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Validity
Not Before: Mar 27 08:22:45 2023 GMT
Not After : Mar 25 08:27:45 2024 GMT
Subject: CN=399A7B60D5796253C1A4843A0047D30A6D2016CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:cf:27:01:56:b5:30:59:64:bd:29:36:5a:
07:77:4e:71:b8:2c:4e:34:31:fd:c4:a2:b5:3a:c8:
d9:de:88:7f:ad:a6:01:22:72:04:bc:5a:83:67:2f:
73:47:cb:97:9b:82:26:56:14:b7:ae:12:a9:b2:22:
16:fc:17:ac:6f:9a:d5:fc:fe:a2:aa:60:63:67:f1:
70:ef:65:80:6c:87:37:f2:f5:8b:bf:56:1d:c4:16:
61:e6:28:58:9c:12:30:a8:f8:30:da:83:12:0e:26:
46:c6:66:03:44:a7:5b:a6:0c:8e:67:9d:07:03:f1:
2c:0d:b8:3b:7f:92:07:35:5c:87:7d:06:f6:54:2c:
da:da:45:ca:b4:0d:6d:af:4f:24:3f:c2:41:fa:23:
42:51:c4:03:1e:d0:f2:6d:20:7b:3e:43:c5:ed:88:
03:7a:1c:15:18:0c:51:1c:7b:84:a8:4f:d4:43:ca:
ca:7d:4f:65:21:5f:6d:79:a2:12:4a:d7:8c:6e:20:
2a:05:77:ae:f9:82:89:dc:67:43:65:c6:ae:08:4e:
9e:b7:24:13:d4:e1:50:f1:c8:ec:02:8c:a5:a4:ac:
45:32:cf:d1:1e:86:82:ef:ad:95:19:a6:74:db:4b:
3c:36:87:e2:52:fc:9c:13:02:46:71:f7:fd:9a:97:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9A:7B:60:D5:79:62:53:C1:A4:84:3A:00:47:D3:0A:6D:20:16:CA
X509v3 Authority Key Identifier:
keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31312e38302e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.80.0/24
Signature Algorithm: sha256WithRSAEncryption
00:1b:52:e5:d0:47:7a:a2:b9:67:23:41:2d:70:98:0a:eb:97:
6b:65:8a:17:c6:00:3a:43:a8:b5:4e:9d:bb:b9:a3:6e:0e:e9:
7d:fc:a4:69:46:e1:4f:a6:01:ab:02:07:3d:49:41:49:e2:66:
22:7a:35:26:6f:bf:c5:74:7c:03:2e:16:87:5a:d8:d6:bb:9d:
03:2c:9e:fd:72:b1:46:96:d1:38:7f:10:e6:eb:1e:88:23:64:
06:46:85:85:bc:7a:a5:93:c2:9c:0f:c4:45:8a:46:da:63:48:
e1:7d:e5:50:06:09:98:c1:4f:a9:2b:e7:6b:7b:51:3b:36:e0:
be:92:74:c9:1e:3d:00:64:fd:c4:7b:68:ef:9e:35:64:56:5d:
2c:85:00:40:b0:93:5e:b3:08:46:24:d4:3a:7f:27:93:cf:e8:
00:2e:70:4b:b1:30:01:37:a5:c2:ab:05:4f:13:00:81:85:ce:
45:ce:93:33:fb:0e:07:ba:fe:b5:f0:af:95:66:8c:e4:e1:35:
b5:0d:ec:2d:61:12:60:49:50:8d:5e:78:bd:23:f8:21:89:31:
7d:e3:e0:a5:01:fe:bd:94:12:eb:59:bc:88:d9:ef:66:87:b3:
88:f2:b6:23:16:47:f9:a1:5b:d5:80:9c:b7:70:35:b8:66:70:
7c:65:7b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:59 2025 by rpki-client