Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3133322e3135392e302f32342d3234203d3e203632323430.roa
File: 34352e3133322e3135392e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: UnS34dCCRGmDDEFrydc4MOBuGE0VzZD1Ek2HaS/uGfM=
Subject key identifier: BA:5E:3B:ED:36:81:8E:57:2D:23:86:AB:7E:1C:00:41:9D:E0:14:40
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 7CCCE0B4395E24982590BF7F4CAF3453E2B5B242
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3133322e3135392e302f32342d3234203d3e203632323430.roa
Signing time: Mon 26 Feb 2024 08:52:52 +0000
ROA not before: Mon 26 Feb 2024 08:47:52 +0000
ROA not after: Mon 24 Feb 2025 08:52:52 +0000
asID: 62240
IP address blocks: 45.132.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:cc:e0:b4:39:5e:24:98:25:90:bf:7f:4c:af:34:53:e2:b5:b2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 26 08:47:52 2024 GMT
Not After : Feb 24 08:52:52 2025 GMT
Subject: CN=BA5E3BED36818E572D2386AB7E1C00419DE01440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:b3:20:42:d9:9c:96:a8:7a:df:22:2b:bc:
b1:26:04:f3:31:57:9a:02:d4:3e:52:17:a9:41:0c:
21:f0:54:b5:74:1a:bf:51:89:88:81:9d:83:f7:d3:
4d:01:5c:b4:f3:72:8a:a8:9f:33:ed:c2:94:46:7e:
db:aa:72:a1:84:5c:82:69:62:6f:92:57:31:e6:d3:
66:90:62:bb:7a:22:a6:a4:74:aa:99:ad:b0:90:0b:
53:39:90:95:01:84:5f:de:0c:10:b7:16:12:95:3e:
17:4e:ba:70:1a:24:61:94:78:79:2a:13:3b:da:95:
0c:e9:c0:02:70:3a:ff:f2:0b:12:a6:92:fc:96:b3:
02:74:fd:ad:4f:bc:9c:f1:a9:31:e0:29:20:c6:26:
72:f3:1f:ed:43:df:3d:4e:a2:06:36:bb:f5:11:1a:
d5:61:20:76:ce:c9:30:18:05:c1:44:8d:85:d5:94:
1f:c1:86:cb:d6:9f:d9:85:b0:f4:22:84:54:de:e6:
89:9a:31:ce:6b:56:b5:7b:69:27:28:1f:a4:3c:41:
87:88:4b:ec:40:47:c0:b5:40:a2:41:3e:d7:e1:b7:
0b:e1:47:cc:12:01:eb:94:f8:ef:90:fb:f9:29:fe:
7f:e5:68:0e:e9:64:21:e7:fe:fe:db:ce:87:dc:62:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5E:3B:ED:36:81:8E:57:2D:23:86:AB:7E:1C:00:41:9D:E0:14:40
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3133322e3135392e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.159.0/24
Signature Algorithm: sha256WithRSAEncryption
94:2f:f4:6f:f2:a9:9d:34:11:9a:d4:18:41:1e:9e:db:ca:1d:
1b:c3:8e:d6:03:3e:d5:e3:84:3c:a2:9b:56:f5:32:41:2e:08:
b3:4d:82:e6:47:50:fd:09:40:61:64:d4:b3:90:77:5b:6b:9f:
19:ee:22:99:f6:36:aa:41:56:3e:10:ea:df:1c:51:e3:e0:c2:
0c:fa:b8:30:14:8b:e6:33:92:7f:1c:4f:d3:d5:a2:4f:87:c2:
69:ea:9f:3e:6a:9a:7c:5c:6b:17:de:5b:a8:d0:44:82:13:b2:
7d:ba:02:c8:d3:3e:40:b0:7e:3e:60:09:8d:5c:a5:bd:8c:72:
a4:bd:3d:54:63:5b:fa:57:2f:7f:29:c9:6f:50:c4:91:d5:84:
9e:75:d2:1b:17:3a:82:97:00:34:26:e6:85:1d:76:8d:56:63:
3c:81:f0:02:72:2f:f8:e6:e6:72:91:4a:49:58:2c:45:c4:f7:
e3:e4:6d:ba:e7:4b:36:dd:4b:6c:92:8c:d9:2a:e0:b7:0c:61:
a8:58:79:d8:79:a0:95:69:c9:5d:11:6d:b2:52:10:7e:56:45:
13:41:d9:0c:18:2a:d2:c9:9f:68:31:f0:43:e0:1a:1e:93:4f:
ba:da:33:f7:79:42:e9:5a:41:71:84:82:3d:ab:3f:7c:97:a5:
87:5a:8a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:30 2025 by rpki-client