Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133342e302f32342d3234203d3e20383334.roa
File: 34352e382e3133342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: OkjDERgZ46l0iTORkjDn9QHp+Ea9U5X8LGAKk+hq6G8=
Subject key identifier: F4:57:7B:D8:00:40:D9:C2:54:01:EF:AC:56:00:71:7B:1E:2E:4C:B2
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 0910EE4C250CE0C72196F01CD377E359F6ACBE0F
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133342e302f32342d3234203d3e20383334.roa
Signing time: Mon 13 Jan 2025 14:38:52 +0000
ROA not before: Mon 13 Jan 2025 14:33:52 +0000
ROA not after: Mon 12 Jan 2026 14:38:52 +0000
asID: 834
IP address blocks: 45.8.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:10:ee:4c:25:0c:e0:c7:21:96:f0:1c:d3:77:e3:59:f6:ac:be:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jan 13 14:33:52 2025 GMT
Not After : Jan 12 14:38:52 2026 GMT
Subject: CN=F4577BD80040D9C25401EFAC5600717B1E2E4CB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:7a:50:a4:35:4a:79:df:42:13:dd:08:b9:
b7:bc:31:9d:7f:db:b0:c5:f4:46:71:a0:26:a6:ad:
b9:2e:55:fa:d1:29:3e:2a:e2:94:8a:85:9c:e3:c9:
88:37:a0:7d:31:4f:56:b3:3c:85:82:fb:5b:11:77:
d1:f3:42:3c:0e:a4:a7:57:4b:6d:e1:7f:f4:40:16:
3b:0d:4a:f5:bf:9e:a2:8f:8a:b6:e0:dd:22:95:b3:
3b:a2:bf:a2:75:1e:db:62:d9:84:e2:2c:d3:03:5c:
af:c6:bd:08:ad:ae:f1:3c:a3:a4:98:fa:68:e7:4d:
eb:1d:78:06:30:0e:cb:4d:68:2c:23:3c:38:db:95:
6a:a8:d6:82:d7:c4:cf:a1:2b:c8:92:a3:e1:5b:00:
df:15:8b:d4:de:46:ef:62:7c:1e:3c:a8:62:09:19:
d6:3e:18:14:fa:e9:90:42:5e:50:52:09:ff:ee:20:
76:40:6d:54:87:19:76:03:6c:7e:84:d4:64:3a:ed:
74:4d:70:9b:9f:23:ad:f4:36:1c:26:b6:9e:50:ee:
67:6a:77:9e:f9:f0:51:95:22:99:2e:0b:76:9f:0e:
31:dc:f9:c1:e9:9f:e0:f2:3a:b7:a6:8e:e5:4b:35:
fc:70:fd:23:9e:59:34:84:fd:2b:6b:2e:b2:fd:18:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:57:7B:D8:00:40:D9:C2:54:01:EF:AC:56:00:71:7B:1E:2E:4C:B2
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.134.0/24
Signature Algorithm: sha256WithRSAEncryption
79:53:13:dd:34:01:d7:dd:84:13:35:0b:98:ad:98:d3:91:0e:
5e:63:f5:6e:ec:c3:e3:8f:ae:27:78:2d:ef:c8:7c:e7:5b:7c:
35:70:29:07:12:eb:15:7b:e2:42:96:cb:6a:58:eb:3e:07:15:
59:41:6f:87:49:c0:c5:78:65:23:34:e7:82:50:0f:ee:5d:b6:
69:d8:65:2b:e4:ae:8e:69:ae:26:da:5e:38:13:1c:a5:29:36:
95:65:cf:dc:71:20:53:71:60:ce:1b:e6:1c:4b:11:ed:78:5f:
5a:90:76:63:e1:2d:83:25:f6:c3:29:0b:72:c5:a3:26:2d:0d:
a9:f5:86:56:89:46:e3:d8:3c:6f:5f:ae:b8:22:54:80:71:f5:
ee:3f:88:85:87:6f:ab:83:c2:2d:0e:2a:62:fb:76:9e:43:e0:
a3:b1:98:f6:59:0b:1f:07:8d:15:e4:a7:ce:e6:86:89:67:66:
3f:ea:7e:ec:75:d3:1b:cf:3b:f6:ea:fa:6d:5c:a9:b1:75:c9:
1a:fd:37:76:df:9b:15:3b:a5:db:6a:09:d7:48:82:21:f9:e3:
c6:dc:93:40:47:69:d1:e1:7a:a7:71:0f:47:cb:52:e0:cd:a6:
bd:d9:79:55:74:47:b8:d8:2b:04:1b:53:5e:62:ef:b8:72:bf:
cf:92:73:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:06:14 2025 by rpki-client