Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134342e38322e302f32342d3332203d3e20313336373837.roa
File: 34352e3134342e38322e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: LQRbBYVeqj+2sVBmDIetzW2gceR773r9MoUWGVe+R00=
Subject key identifier: D9:FC:0C:DE:AB:20:B2:EF:8B:92:40:60:41:35:0B:9F:97:E9:01:EB
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 4F54EC98D6E2D4D45AE21C629F18CE17E6A05A72
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134342e38322e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:44:48 +0000
ROA not before: Mon 27 Jan 2025 09:39:48 +0000
ROA not after: Mon 26 Jan 2026 09:44:48 +0000
asID: 136787
IP address blocks: 45.144.82.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:54:ec:98:d6:e2:d4:d4:5a:e2:1c:62:9f:18:ce:17:e6:a0:5a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jan 27 09:39:48 2025 GMT
Not After : Jan 26 09:44:48 2026 GMT
Subject: CN=D9FC0CDEAB20B2EF8B92406041350B9F97E901EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:8c:d1:88:d7:ba:38:d2:77:c3:98:b9:70:
f9:15:0f:30:ff:e1:1b:ed:67:0a:56:51:03:37:df:
f4:81:e2:ed:2d:60:65:a5:50:e0:9f:4e:2f:5c:5d:
bf:52:d1:44:1e:74:11:e4:ee:ef:80:30:1c:74:97:
80:2f:3a:8d:5d:82:22:dc:a0:8e:27:26:ce:51:f5:
2d:78:b5:43:bc:df:5c:c7:33:c2:4d:68:5f:84:a7:
27:04:66:8a:8a:9d:60:7d:71:79:ba:8e:c8:11:96:
d3:97:0a:83:29:6f:dd:8f:26:d7:eb:29:d3:d5:eb:
8c:d0:bc:02:fe:5c:64:b1:f9:b7:3e:62:a3:6c:aa:
93:52:14:12:84:ca:cf:5b:87:f1:21:79:1b:5e:41:
ea:c1:b0:fb:96:da:4d:8f:30:d3:09:61:c2:a7:eb:
67:8c:ba:61:02:c5:f4:82:a2:b2:7d:d3:fc:67:72:
25:08:a6:60:8c:cd:47:8c:67:59:c3:8d:9f:e4:55:
fd:db:99:24:2c:1e:cf:ef:a3:05:81:11:5f:73:9f:
52:6a:b7:d9:2a:c2:c0:fe:70:da:85:5c:2e:1e:a0:
0f:7d:71:74:a9:41:5d:20:06:6b:72:3d:32:34:6f:
0b:16:c6:f3:81:1c:a0:4e:d2:b6:19:c4:68:ab:d6:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FC:0C:DE:AB:20:B2:EF:8B:92:40:60:41:35:0B:9F:97:E9:01:EB
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134342e38322e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.82.0/24
Signature Algorithm: sha256WithRSAEncryption
af:9c:f8:a7:14:95:7d:ad:a6:bf:2d:79:62:41:35:e5:38:97:
a4:97:cb:89:55:f0:6f:29:9b:0f:4c:52:2b:9d:eb:e1:ab:d7:
cb:25:a4:45:60:5e:55:ca:17:72:ac:06:c0:3f:5d:af:7b:86:
b3:11:8f:db:61:2b:a2:44:e2:fb:f9:01:b8:7d:33:a9:23:22:
32:c4:68:ce:b2:e7:46:0f:18:8e:64:cf:30:f6:84:a0:c4:b8:
67:8b:fb:c4:a6:93:88:3f:c4:f5:79:5a:54:7e:57:12:3d:bc:
c7:07:aa:e8:97:23:e8:a8:74:ad:93:3f:3d:82:d7:f3:3c:f2:
17:ef:94:23:00:15:80:c2:9a:e6:ce:a8:81:94:b6:72:ab:01:
67:82:83:02:5f:b5:b6:a9:ce:31:c0:f2:ee:6c:ea:cc:b0:db:
e5:1b:be:5a:7c:a9:bb:13:af:40:40:c5:55:d6:d1:9b:d6:4a:
bb:d8:a1:f1:a8:da:b0:01:90:e3:33:9e:70:bb:1d:51:08:47:
66:c4:3e:fc:97:28:01:84:5f:57:e9:3f:f4:63:ab:8a:cb:1f:
22:5b:5c:59:6c:71:a0:14:8d:3d:50:fc:88:dd:e1:ca:01:c4:
bf:40:a8:1e:7a:8c:42:f5:a1:8b:1f:d9:c2:98:26:c7:e2:fc:
56:de:78:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:35:52 2025 by rpki-client