Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e3138302e302f32322d3234203d3e203437353833.roa
File: 34352e38302e3138302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: jtgcTNnhQtv4yGT+WgjsIJdI08T0Dt5ZMxKnh+82t50=
Subject key identifier: 51:65:85:03:A5:56:9F:58:8A:85:E3:67:25:05:ED:0E:65:86:12:28
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6F200CDCFE6C52B33096D3EB28B65D43862F0800
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e3138302e302f32322d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:05 +0000
ROA not before: Mon 27 Jan 2025 09:40:05 +0000
ROA not after: Mon 26 Jan 2026 09:45:05 +0000
asID: 47583
IP address blocks: 45.80.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:20:0c:dc:fe:6c:52:b3:30:96:d3:eb:28:b6:5d:43:86:2f:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:05 2025 GMT
Not After : Jan 26 09:45:05 2026 GMT
Subject: CN=51658503A5569F588A85E3672505ED0E65861228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bf:ae:9c:5d:0d:b0:93:f6:b6:6f:1f:83:3e:
7f:a0:d9:aa:53:86:1e:95:ff:90:09:db:3d:e5:cf:
5d:33:3c:e1:f5:30:94:b6:9b:db:c0:da:50:83:29:
05:9b:71:96:b1:bc:5e:7a:f2:c9:e1:76:47:49:15:
1e:84:fe:dc:49:d4:1c:8c:f0:0d:ec:b8:b4:3f:3e:
64:34:2c:64:fa:4c:0f:ae:07:82:ab:5f:28:1f:d6:
22:64:da:8c:cb:56:b0:16:d8:b4:a7:04:c3:7c:75:
a5:f4:86:53:a1:49:d8:16:db:bf:95:23:7c:80:c9:
85:10:dc:14:72:4f:6b:bf:77:25:8f:c2:62:8e:95:
51:62:bf:e3:f3:78:78:8f:cd:89:7a:b6:72:a0:44:
57:a8:fa:56:f7:db:43:0a:f2:70:16:58:2d:c8:b8:
1a:98:8a:03:d3:da:3f:8a:c3:81:39:bb:81:87:43:
05:e3:2f:3f:85:d5:eb:91:e7:d6:3e:6a:63:a8:58:
ac:68:f3:fd:ca:27:01:57:74:02:55:e6:fe:ce:07:
7b:0a:f9:c7:e3:44:f5:64:5d:19:42:38:95:3f:fd:
98:95:3d:31:60:c8:de:a1:2b:75:ca:07:63:3a:2a:
44:b5:07:a5:e7:58:7f:18:26:aa:bb:58:bd:fd:26:
d1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:65:85:03:A5:56:9F:58:8A:85:E3:67:25:05:ED:0E:65:86:12:28
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e3138302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.180.0/22
Signature Algorithm: sha256WithRSAEncryption
07:68:f8:c9:11:07:65:1a:23:1d:8f:62:3c:cb:f2:ff:ab:17:
06:f2:4d:6b:8a:ec:9e:e2:63:02:f2:a7:b1:dc:18:68:23:f7:
7e:94:23:6d:f6:3a:2f:6c:03:f1:60:81:a1:14:a8:50:8c:18:
b0:49:fb:b0:c4:dc:56:78:c0:75:d3:be:25:c9:e4:9b:40:6e:
59:b8:1a:ea:c5:ad:ec:df:8f:1e:b3:5b:2d:53:25:10:ba:e1:
61:53:2c:57:79:24:75:f2:c4:ee:b4:15:0d:ae:f0:23:c8:8c:
09:16:4a:0c:de:7e:9e:8d:5c:45:f2:6b:4b:e7:df:f8:f2:74:
85:2c:4a:59:d6:86:c4:3f:e6:bd:28:32:c7:51:f9:cd:b8:d5:
73:3a:ca:ed:dc:08:88:f5:b6:57:2c:2d:8a:38:41:45:3c:22:
17:ea:fe:23:f3:91:7b:a1:b0:8c:f6:cf:86:e9:8b:48:e1:79:
1c:c6:82:52:18:c8:37:62:9c:57:5b:5d:82:29:94:04:b7:60:
da:8a:8c:1b:4a:de:ac:49:09:da:c5:4f:c4:d0:95:d4:d0:ea:
26:a6:0b:12:b2:4d:59:4b:05:7a:7c:df:7f:92:4a:68:1d:c3:
6e:d6:5a:00:33:ab:4a:13:bb:7e:ec:c1:53:53:35:3d:15:16:
84:ad:30:5a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUbyAM3P5sUrMwltPrKLZdQ4YvCAAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTQwMDVaFw0yNjAxMjYwOTQ1MDVaMDMxMTAvBgNV
BAMTKDUxNjU4NTAzQTU1NjlGNTg4QTg1RTM2NzI1MDVFRDBFNjU4NjEyMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLv66cXQ2wk/a2bx+DPn+g2apT
hh6V/5AJ2z3lz10zPOH1MJS2m9vA2lCDKQWbcZaxvF568snhdkdJFR6E/txJ1ByM
8A3suLQ/PmQ0LGT6TA+uB4KrXygf1iJk2ozLVrAW2LSnBMN8daX0hlOhSdgW27+V
I3yAyYUQ3BRyT2u/dyWPwmKOlVFiv+PzeHiPzYl6tnKgRFeo+lb320MK8nAWWC3I
uBqYigPT2j+Kw4E5u4GHQwXjLz+F1euR59Y+amOoWKxo8/3KJwFXdAJV5v7OB3sK
+cfjRPVkXRlCOJU//ZiVPTFgyN6hK3XKB2M6KkS1B6XnWH8YJqq7WL39JtGbAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUUWWFA6VWn1iKheNnJQXtDmWGEigwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzgzMDJlMzEzODMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1Q
tDANBgkqhkiG9w0BAQsFAAOCAQEAB2j4yREHZRojHY9iPMvy/6sXBvJNa4rsnuJj
AvKnsdwYaCP3fpQjbfY6L2wD8WCBoRSoUIwYsEn7sMTcVnjAddO+Jcnkm0BuWbga
6sWt7N+PHrNbLVMlELrhYVMsV3kkdfLE7rQVDa7wI8iMCRZKDN5+no1cRfJrS+ff
+PJ0hSxKWdaGxD/mvSgyx1H5zbjVczrK7dwIiPW2VywtijhBRTwiF+r+I/ORe6Gw
jPbPhumLSOF5HMaCUhjIN2KcV1tdgimUBLdg2oqMG0rerEkJ2sVPxNCV1NDqJqYL
ErJNWUsFenzff5JKaB3DbtZaADOrShO7fuzBU1M1PRUWhK0wWg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:52 2025 by rpki-client