Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138362e302f32342d3234203d3e203534323532.roa
File: 34352e3134302e3138362e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier: /KfwL0xPZ3W+Ghj9TfcLMsao53qO9RPUr1GsbYuQiXA=
Subject key identifier: 8E:3B:B6:B1:D3:CC:1D:6C:6A:D5:C2:4B:6A:85:39:97:2D:1C:3B:46
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 14032F8C3EE89BDB41F441BC5044EB15E301B4AB
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138362e302f32342d3234203d3e203534323532.roa
Signing time: Mon 27 Mar 2023 08:28:13 +0000
ROA not before: Mon 27 Mar 2023 08:23:13 +0000
ROA not after: Mon 25 Mar 2024 08:28:13 +0000
asID: 54252
IP address blocks: 45.140.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:03:2f:8c:3e:e8:9b:db:41:f4:41:bc:50:44:eb:15:e3:01:b4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:13 2023 GMT
Not After : Mar 25 08:28:13 2024 GMT
Subject: CN=8E3BB6B1D3CC1D6C6AD5C24B6A8539972D1C3B46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:70:f7:f7:19:04:73:02:cf:52:b9:b8:31:1a:
af:bd:6b:49:86:ba:ed:80:57:57:1a:15:84:36:5e:
c8:eb:eb:17:3e:83:21:6b:5b:91:c7:7e:83:84:d8:
6d:b8:4d:24:c5:5b:74:c6:a2:5a:fd:65:47:de:da:
2d:b8:19:bb:0a:41:e7:4a:e9:81:60:a4:5d:ea:76:
32:25:a1:4f:d8:71:d6:ae:1b:cc:1c:c1:19:79:ef:
01:ab:cb:8b:b7:3a:91:7d:c3:8d:f1:4e:e5:5d:6e:
96:c7:e5:e3:c9:9a:7f:b7:0c:46:46:d8:4f:3d:ae:
29:99:5b:f1:e2:63:f6:d9:5a:56:a2:d3:53:0f:91:
57:44:22:21:27:d2:1a:9e:24:68:62:94:e2:16:2a:
88:5a:ac:f9:f0:c6:cb:0e:41:41:f0:82:67:d4:c4:
1c:7c:f3:78:c1:8b:ff:7f:c4:50:d3:8e:2c:f4:a3:
78:47:06:77:2b:bc:72:8b:c2:39:07:f9:c9:4c:a6:
14:21:15:4b:76:cc:a9:be:f7:eb:2b:55:6a:c9:93:
4c:83:1f:54:dc:18:d4:3c:45:8b:14:1e:af:24:de:
b2:27:37:9f:f0:3d:b9:d5:49:18:27:86:ab:bd:9c:
e3:7d:7a:90:fc:ba:9b:bc:58:b2:9c:f3:cb:e7:49:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3B:B6:B1:D3:CC:1D:6C:6A:D5:C2:4B:6A:85:39:97:2D:1C:3B:46
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138362e302f32342d3234203d3e203534323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.186.0/24
Signature Algorithm: sha256WithRSAEncryption
53:92:c7:b2:0c:32:44:0c:1b:f8:ea:b8:16:3e:bd:a8:aa:e9:
1d:44:3b:68:35:db:0b:09:e7:1e:cc:88:3e:5a:3f:5b:6b:9f:
16:db:40:83:65:1e:c7:81:8c:62:d8:d6:92:63:cb:9a:c7:47:
6d:76:dc:62:64:44:ad:0e:85:c8:06:06:da:18:d9:29:2c:9c:
7f:13:aa:65:68:5e:88:33:53:58:50:14:4b:f1:5a:64:8a:14:
fb:c4:ba:45:80:7b:15:ab:05:83:ca:eb:db:61:14:14:63:aa:
7a:39:43:4e:77:3e:fd:e9:7a:63:7a:01:e0:46:f9:25:5f:b8:
31:e2:f1:75:50:c3:c7:2a:53:ee:e1:15:4d:f1:78:5d:c9:66:
1c:b4:3d:95:12:a6:bb:81:ce:d7:bd:cc:8a:d5:25:9a:42:c4:
5e:50:cc:37:e7:62:1c:f2:cb:1b:63:be:84:bd:e8:82:cc:ef:
30:53:dc:29:53:5b:db:69:b6:25:1b:3a:0a:15:b6:bd:f9:e1:
eb:c7:e4:36:15:7c:d8:b0:c6:5f:07:40:4e:99:a2:47:c9:d6:
f5:ee:48:fe:cf:d3:fb:7f:8a:2c:43:3d:fa:e5:1c:20:fa:58:
37:ba:93:3f:7d:52:f2:f4:14:37:bb:63:c4:83:e9:45:ce:7c:
b0:a1:d1:bc
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUFAMvjD7om9tB9EG8UETrFeMBtKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yMzAzMjcwODIzMTNaFw0yNDAzMjUwODI4MTNaMDMxMTAvBgNV
BAMTKDhFM0JCNkIxRDNDQzFENkM2QUQ1QzI0QjZBODUzOTk3MkQxQzNCNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCicPf3GQRzAs9SubgxGq+9a0mG
uu2AV1caFYQ2Xsjr6xc+gyFrW5HHfoOE2G24TSTFW3TGolr9ZUfe2i24GbsKQedK
6YFgpF3qdjIloU/YcdauG8wcwRl57wGry4u3OpF9w43xTuVdbpbH5ePJmn+3DEZG
2E89rimZW/HiY/bZWlai01MPkVdEIiEn0hqeJGhilOIWKoharPnwxssOQUHwgmfU
xBx883jBi/9/xFDTjiz0o3hHBncrvHKLwjkH+clMphQhFUt2zKm+9+srVWrJk0yD
H1TcGNQ8RYsUHq8k3rInN5/wPbnVSRgnhqu9nON9epD8upu8WLKc88vnSdwXAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUjju2sdPMHWxq1cJLaoU5ly0cO0YwHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzQzNTJlMzEzNDMwMmUzMTM4
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM0MzIzNTMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LYy6MA0GCSqGSIb3DQEBCwUAA4IBAQBTkseyDDJEDBv46rgWPr2oqukdRDtoNdsL
CecezIg+Wj9ba58W20CDZR7HgYxi2NaSY8uax0dtdtxiZEStDoXIBgbaGNkpLJx/
E6plaF6IM1NYUBRL8VpkihT7xLpFgHsVqwWDyuvbYRQUY6p6OUNOdz796XpjegHg
RvklX7gx4vF1UMPHKlPu4RVN8XhdyWYctD2VEqa7gc7XvcyK1SWaQsReUMw352Ic
8ssbY76EveiCzO8wU9wpU1vbabYlGzoKFba9+eHrx+Q2FXzYsMZfB0BOmaJHydb1
7kj+z9P7f4osQz365Rwg+lg3upM/fVLy9BQ3u2PEg+lFznywodG8
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:40 2025 by rpki-client