Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31342e3139322e302f32332d3234203d3e2030.roa
File: 34352e31342e3139322e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: 7TLWcx4Hq+UbZKtH+M9MHlGgNXXNYXepC6dzmxuTkrg=
Subject key identifier: FF:B4:EE:13:7C:0B:73:7E:1D:3D:AD:FF:68:9C:74:87:26:0A:ED:D1
Certificate issuer: /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial: 2CDE3080176DB331F7E7D9259CD4D84B6BE8CEA9
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31342e3139322e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:46 +0000
ROA not before: Mon 27 Mar 2023 08:22:46 +0000
ROA not after: Mon 25 Mar 2024 08:27:46 +0000
asID: 0
IP address blocks: 45.14.192.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:de:30:80:17:6d:b3:31:f7:e7:d9:25:9c:d4:d8:4b:6b:e8:ce:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Validity
Not Before: Mar 27 08:22:46 2023 GMT
Not After : Mar 25 08:27:46 2024 GMT
Subject: CN=FFB4EE137C0B737E1D3DADFF689C7487260AEDD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ba:e5:22:9a:0d:a5:69:9e:5e:ec:c3:37:f6:
a1:78:1b:a9:a9:28:77:37:70:ca:98:2f:26:2b:29:
0d:f7:68:94:c9:71:26:61:f7:41:0a:03:3d:a5:38:
e8:d4:66:1b:c5:86:99:5c:f1:d9:da:b8:cc:e4:99:
c0:71:4b:f0:54:b8:5d:b6:98:c1:69:5b:a8:cd:c8:
d8:27:60:9b:19:2c:79:0c:e3:8f:5a:0e:8a:1a:08:
26:67:cf:90:aa:d5:2a:03:5e:a3:e3:f9:6b:ca:5f:
19:45:29:d4:5d:a3:d6:1f:16:ac:4d:57:9a:9f:34:
78:55:6e:b0:e6:f3:d4:b6:d0:f4:2a:51:46:a1:40:
e9:bb:5b:c4:4f:83:f3:bc:e1:70:2c:9b:77:72:c0:
92:83:e4:b1:de:18:91:7b:82:83:e5:33:c6:04:09:
c1:09:c6:1a:90:46:89:57:8b:57:36:37:37:0a:b6:
93:d8:63:78:5d:c5:fb:5b:f6:35:4f:5a:7d:82:3a:
25:29:f3:52:1d:64:1e:db:0c:42:e4:26:ad:d9:a9:
b5:28:a6:56:13:22:03:d7:d8:c5:d8:c9:42:ab:17:
a1:71:e5:42:87:18:2b:d1:5a:de:71:f4:66:9c:c5:
ad:d3:b6:27:d5:9a:2f:92:17:17:e2:48:a3:e4:ab:
4b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B4:EE:13:7C:0B:73:7E:1D:3D:AD:FF:68:9C:74:87:26:0A:ED:D1
X509v3 Authority Key Identifier:
keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e31342e3139322e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.192.0/23
Signature Algorithm: sha256WithRSAEncryption
47:e1:71:82:5b:3c:69:c9:dc:f8:d6:02:3a:91:2c:ed:36:96:
21:3a:bc:d6:5a:06:90:6a:9e:d4:ba:42:3e:23:14:ef:6f:18:
06:bd:02:08:b1:98:d8:3b:9c:64:cb:42:43:5b:74:cf:a6:8b:
7b:75:dc:26:26:2d:73:05:17:cb:c5:87:be:4c:3e:d5:49:f3:
42:d9:7b:05:94:6e:ae:8a:80:fa:e3:1b:b5:90:a1:0b:8a:bc:
8b:0a:42:97:4b:d6:77:7f:3c:72:50:cb:61:a8:98:39:76:a2:
09:19:27:cb:13:26:d9:ee:fa:e1:a2:50:77:b1:53:31:f9:d9:
2c:60:42:56:66:74:38:f9:62:99:fa:32:62:fe:22:2b:a1:2d:
d7:95:cc:b2:ff:52:c8:a8:b2:aa:16:8e:b2:f7:03:b8:fc:20:
3c:ce:6f:45:c5:2b:bb:df:c8:1e:c0:33:f2:0c:69:96:13:dc:
e9:e6:73:e1:f5:a4:54:c5:2d:2c:58:bc:6b:5c:a5:be:7b:07:
73:a6:d0:04:0a:56:ce:6b:bd:a7:bb:79:24:bb:2b:37:5a:f0:
84:2a:1d:e6:55:c0:bf:c6:86:f6:f2:da:45:0b:75:63:8e:cd:
61:e8:93:50:08:5f:14:5d:03:54:99:b7:e1:9e:27:82:0c:e8:
9a:be:35:6c
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIULN4wgBdtszH359klnNTYS2vozqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGQyYTlhNDc1ZTdiOTdlMWJlZmNmY2U0NzNjNzJhMDhl
YjQ3MWMxYTAeFw0yMzAzMjcwODIyNDZaFw0yNDAzMjUwODI3NDZaMDMxMTAvBgNV
BAMTKEZGQjRFRTEzN0MwQjczN0UxRDNEQURGRjY4OUM3NDg3MjYwQUVERDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYuuUimg2laZ5e7MM39qF4G6mp
KHc3cMqYLyYrKQ33aJTJcSZh90EKAz2lOOjUZhvFhplc8dnauMzkmcBxS/BUuF22
mMFpW6jNyNgnYJsZLHkM449aDooaCCZnz5Cq1SoDXqPj+WvKXxlFKdRdo9YfFqxN
V5qfNHhVbrDm89S20PQqUUahQOm7W8RPg/O84XAsm3dywJKD5LHeGJF7goPlM8YE
CcEJxhqQRolXi1c2NzcKtpPYY3hdxftb9jVPWn2COiUp81IdZB7bDELkJq3ZqbUo
plYTIgPX2MXYyUKrF6Fx5UKHGCvRWt5x9Gacxa3TtifVmi+SFxfiSKPkq0v3AgMB
AAGjggI4MIICNDAdBgNVHQ4EFgQU/7TuE3wLc34dPa3/aJx0hyYK7dEwHwYDVR0j
BBgwFoAU3SqaR157l+G+/Pzkc8cqCOtHHBowDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xMDgvREQyQTlBNDc1RTdCOTdFMUJFRkNGQ0U0NzNDNzJBMDhFQjQ3MUMx
QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNTcWFSMTU3bC1HLV9QemtjOGNx
Q090SEhCby5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzEwOC8zNDM1MmUzMTM0MmUz
MTM5MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS0OwDAN
BgkqhkiG9w0BAQsFAAOCAQEAR+Fxgls8acnc+NYCOpEs7TaWITq81loGkGqe1LpC
PiMU728YBr0CCLGY2DucZMtCQ1t0z6aLe3XcJiYtcwUXy8WHvkw+1UnzQtl7BZRu
roqA+uMbtZChC4q8iwpCl0vWd388clDLYaiYOXaiCRknyxMm2e764aJQd7FTMfnZ
LGBCVmZ0OPlimfoyYv4iK6Et15XMsv9SyKiyqhaOsvcDuPwgPM5vRcUru9/IHsAz
8gxplhPc6eZz4fWkVMUtLFi8a1ylvnsHc6bQBApWzmu9p7t5JLsrN1rwhCod5lXA
v8aG9vLaRQt1Y47NYeiTUAhfFF0DVJm34Z4nggzomr41bA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:30 2025 by rpki-client