Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e203231383539.roa
File: 34352e3134302e33362e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: YyVUin9/ePlCiGzKzRdVHWj4fVliVwxDLNmmg2QvC6c=
Subject key identifier: 9D:04:D2:5B:E5:EF:C5:88:C3:E7:E9:96:3C:0C:7F:78:59:DA:DA:F2
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 2EB3AB90BE8AF9EF893FDF041EF3B4A8F609C458
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e203231383539.roa
Signing time: Sun 12 Jan 2025 11:47:58 +0000
ROA not before: Sun 12 Jan 2025 11:42:58 +0000
ROA not after: Sun 11 Jan 2026 11:47:58 +0000
asID: 21859
IP address blocks: 45.140.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b3:ab:90:be:8a:f9:ef:89:3f:df:04:1e:f3:b4:a8:f6:09:c4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jan 12 11:42:58 2025 GMT
Not After : Jan 11 11:47:58 2026 GMT
Subject: CN=9D04D25BE5EFC588C3E7E9963C0C7F7859DADAF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:63:64:3f:8e:77:80:18:c3:81:a8:07:5d:fd:
d6:7e:78:b6:6d:fb:f4:6c:b2:1f:bb:9d:4d:ba:87:
a7:e6:c5:05:da:c3:f3:b0:39:0f:df:95:d1:53:7a:
b7:33:65:ac:cb:64:10:6a:91:4f:37:eb:03:d5:39:
b9:4c:0d:ae:03:82:7d:a9:61:cd:97:39:8e:54:80:
71:2c:aa:74:d0:bc:00:e6:46:4a:89:f2:c5:76:02:
fb:ef:a3:04:47:64:96:9c:1f:d0:be:56:c1:65:1e:
15:ce:4d:da:c4:9b:0d:15:e1:a2:9e:e4:9e:71:bd:
87:25:f6:fe:98:94:ba:a3:78:7c:1d:7f:20:bb:ab:
f9:07:83:16:6c:4d:2c:dd:f0:02:56:c1:7b:76:a0:
ae:9c:b4:46:1c:21:36:8e:f3:ee:52:a0:9b:57:8b:
e7:7a:27:f3:46:87:6a:35:04:25:f1:f2:fd:75:ce:
92:3f:a6:5d:f2:6a:f8:4b:06:ff:30:d6:a6:c7:0c:
00:fb:6d:e0:96:17:aa:05:73:b1:0e:74:3e:e7:92:
3f:93:cb:90:b6:d2:ab:1f:bc:cc:59:fd:e0:b2:5d:
d0:a6:11:9b:93:5b:17:c1:3f:5a:7f:48:96:90:f0:
9c:dd:c7:9c:23:9c:d8:30:f1:4c:ce:20:db:f3:85:
4b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:04:D2:5B:E5:EF:C5:88:C3:E7:E9:96:3C:0C:7F:78:59:DA:DA:F2
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.36.0/24
Signature Algorithm: sha256WithRSAEncryption
22:df:b6:01:28:b0:86:5c:b1:37:99:29:97:73:5c:87:2e:9c:
77:aa:a1:b8:43:ea:f2:47:22:47:00:a7:7e:c2:e2:61:61:47:
61:87:d1:a2:f7:e6:c0:57:4a:27:56:1b:e1:f3:44:33:6b:c4:
ec:96:30:cd:53:2b:6d:7f:6b:5a:b1:20:01:ca:b3:78:a6:63:
91:81:6b:10:6a:cb:40:be:92:02:b9:e5:37:5b:71:d1:fa:8b:
c5:02:e2:bd:d9:c3:fd:41:97:9e:71:d5:d6:20:cd:62:0e:42:
bc:8b:a5:10:55:52:60:d7:4b:73:43:7f:dc:9d:34:fa:b8:50:
ac:6a:2a:25:e7:6d:a0:5b:d9:20:90:7d:2c:8d:8e:08:3e:9f:
95:25:17:9c:2c:fe:16:4a:89:0a:e4:dd:73:29:81:3b:90:17:
49:00:a3:fa:83:91:54:ba:3c:26:4f:dd:a1:a2:98:0b:5c:7f:
84:8e:45:db:b7:7c:58:12:6a:4d:02:bd:e9:33:b6:c9:c7:9a:
e5:5f:89:53:3f:0b:3f:ff:a5:0b:aa:0e:0e:7b:9d:e2:bb:80:
28:b3:7a:64:f5:37:d8:b6:20:b4:b6:a2:6a:93:2e:10:06:70:
d5:dd:76:d3:4b:79:43:1c:bd:1c:43:3a:32:54:82:7b:bf:55:
cd:6c:51:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:04 2025 by rpki-client