Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38382e3232312e302f32342d3234203d3e2030.roa
File: 34352e38382e3232312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: S2tfjZBxSOIhC03KD4HGNOWB+j0zq+AX2NLIm4GkJ28=
Subject key identifier: C0:D3:59:B7:2F:36:67:50:F5:17:96:94:80:68:95:5B:BF:38:BC:CD
Certificate issuer: /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial: 6A4D13E479D1DB0F6927AB15C69A09EDE4F69BEE
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38382e3232312e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:45 +0000
ROA not before: Mon 27 Mar 2023 08:22:45 +0000
ROA not after: Mon 25 Mar 2024 08:27:45 +0000
asID: 0
IP address blocks: 45.88.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:4d:13:e4:79:d1:db:0f:69:27:ab:15:c6:9a:09:ed:e4:f6:9b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Validity
Not Before: Mar 27 08:22:45 2023 GMT
Not After : Mar 25 08:27:45 2024 GMT
Subject: CN=C0D359B72F366750F51796948068955BBF38BCCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6a:7a:5e:06:00:25:59:ed:81:4e:69:6c:ba:
90:49:fc:3c:62:60:a8:69:3b:dd:0d:93:ea:c0:9e:
59:e2:fa:fa:8d:98:0c:f0:15:5b:13:7a:63:a5:a3:
f0:0d:5b:cd:c1:3b:86:06:95:e7:76:38:10:3d:47:
91:2c:37:46:16:12:26:5b:5e:65:cf:8c:2b:5e:b3:
ff:26:81:81:6a:84:37:d6:7a:ae:46:a1:cd:52:39:
5f:7f:df:73:79:b1:60:29:58:d9:b8:a2:46:de:a9:
48:89:0a:b4:6d:75:3b:a5:8d:78:f9:6e:bd:1b:2a:
fd:7f:fa:fd:de:1e:d7:d9:71:2d:61:6d:59:90:1f:
07:3f:fd:98:10:aa:5e:04:4c:92:6f:05:31:56:99:
e9:14:e2:6a:ba:10:19:11:eb:14:85:7b:35:dc:7b:
60:33:35:8d:4a:bd:02:91:06:42:2b:a2:9c:74:9a:
fc:18:d8:01:30:2f:fc:4b:56:6a:5b:8b:b4:bc:95:
b0:36:ce:37:26:59:ab:64:13:42:52:39:42:dd:16:
66:3c:5a:85:6d:f5:27:57:10:65:21:45:2b:05:d6:
1d:dc:4e:f1:af:da:47:06:ba:a7:70:fe:d0:cc:6c:
fc:bc:87:61:d6:3a:22:88:ff:26:bb:d1:10:81:b3:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D3:59:B7:2F:36:67:50:F5:17:96:94:80:68:95:5B:BF:38:BC:CD
X509v3 Authority Key Identifier:
keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38382e3232312e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.221.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:2e:e8:1a:91:b1:e9:b4:35:f3:c7:0e:f6:58:68:58:94:20:
5e:3d:5d:fe:49:b0:68:55:fc:d0:b4:92:d5:f9:dc:ad:dd:88:
b9:83:02:eb:3e:e2:3f:df:35:a4:69:62:b6:88:b6:75:89:e3:
f2:44:c2:24:6c:fc:7c:5a:87:54:4c:c3:ef:5c:5d:5a:da:5a:
ec:a9:75:00:2f:ac:a6:43:cb:c7:ee:80:40:d9:65:09:1d:9b:
31:02:f8:b0:36:33:83:ad:e3:6a:2f:ca:18:16:a1:4a:a4:97:
2b:11:fd:c0:10:95:eb:d7:ee:b1:89:b2:25:e8:91:54:77:a9:
b6:8d:bb:ed:e0:cc:ba:ee:8b:a4:0a:d2:c3:78:cd:55:c8:14:
3b:f3:51:90:f4:3b:b5:14:f5:69:35:2b:c4:74:91:b3:68:34:
31:01:1a:c7:da:fb:06:fe:67:98:c6:74:34:6e:8b:74:a0:92:
40:12:e1:d9:f6:8d:bc:27:e9:0e:75:a6:da:f9:c8:bd:cf:db:
01:10:63:15:5d:26:5f:de:cd:4e:f3:4e:a5:c4:ce:cc:95:79:
87:6c:07:c3:2b:77:2d:b6:10:1c:61:38:ac:d3:46:df:f6:a7:
c6:db:e3:e2:fe:dd:4d:f2:47:3b:03:df:49:f4:03:2c:24:18:
8c:fc:6e:6d
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUak0T5HnR2w9pJ6sVxpoJ7eT2m+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGQyYTlhNDc1ZTdiOTdlMWJlZmNmY2U0NzNjNzJhMDhl
YjQ3MWMxYTAeFw0yMzAzMjcwODIyNDVaFw0yNDAzMjUwODI3NDVaMDMxMTAvBgNV
BAMTKEMwRDM1OUI3MkYzNjY3NTBGNTE3OTY5NDgwNjg5NTVCQkYzOEJDQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRanpeBgAlWe2BTmlsupBJ/Dxi
YKhpO90Nk+rAnlni+vqNmAzwFVsTemOlo/ANW83BO4YGled2OBA9R5EsN0YWEiZb
XmXPjCtes/8mgYFqhDfWeq5Goc1SOV9/33N5sWApWNm4okbeqUiJCrRtdTuljXj5
br0bKv1/+v3eHtfZcS1hbVmQHwc//ZgQql4ETJJvBTFWmekU4mq6EBkR6xSFezXc
e2AzNY1KvQKRBkIropx0mvwY2AEwL/xLVmpbi7S8lbA2zjcmWatkE0JSOULdFmY8
WoVt9SdXEGUhRSsF1h3cTvGv2kcGuqdw/tDMbPy8h2HWOiKI/ya70RCBs7OpAgMB
AAGjggI4MIICNDAdBgNVHQ4EFgQUwNNZty82Z1D1F5aUgGiVW784vM0wHwYDVR0j
BBgwFoAU3SqaR157l+G+/Pzkc8cqCOtHHBowDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xMDgvREQyQTlBNDc1RTdCOTdFMUJFRkNGQ0U0NzNDNzJBMDhFQjQ3MUMx
QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNTcWFSMTU3bC1HLV9QemtjOGNx
Q090SEhCby5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzEwOC8zNDM1MmUzODM4MmUz
MjMyMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1Y3TAN
BgkqhkiG9w0BAQsFAAOCAQEALC7oGpGx6bQ188cO9lhoWJQgXj1d/kmwaFX80LSS
1fncrd2IuYMC6z7iP981pGlitoi2dYnj8kTCJGz8fFqHVEzD71xdWtpa7Kl1AC+s
pkPLx+6AQNllCR2bMQL4sDYzg63jai/KGBahSqSXKxH9wBCV69fusYmyJeiRVHep
to277eDMuu6LpArSw3jNVcgUO/NRkPQ7tRT1aTUrxHSRs2g0MQEax9r7Bv5nmMZ0
NG6LdKCSQBLh2faNvCfpDnWm2vnIvc/bARBjFV0mX97NTvNOpcTOzJV5h2wHwyt3
LbYQHGE4rNNG3/anxtvj4v7dTfJHOwPfSfQDLCQYjPxubQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:55 2025 by rpki-client