Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136322e302f32342d3234203d3e20383334.roa
File: 34352e3134362e3136322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: bwDiL4a/vBGGTnoySfa2JLp74RvOnZ+bqFJHWVV1+pQ=
Subject key identifier: E3:28:AE:8B:55:5C:BA:D2:86:ED:A3:AE:6F:AB:25:98:B3:AD:AE:B3
Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Certificate serial: 494648535C75226956F573A4C4B5CEC1ED11A010
Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136322e302f32342d3234203d3e20383334.roa
Signing time: Mon 13 Jan 2025 00:04:07 +0000
ROA not before: Sun 12 Jan 2025 23:59:07 +0000
ROA not after: Mon 12 Jan 2026 00:04:07 +0000
asID: 834
IP address blocks: 45.146.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:46:48:53:5c:75:22:69:56:f5:73:a4:c4:b5:ce:c1:ed:11:a0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Validity
Not Before: Jan 12 23:59:07 2025 GMT
Not After : Jan 12 00:04:07 2026 GMT
Subject: CN=E328AE8B555CBAD286EDA3AE6FAB2598B3ADAEB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:fc:e6:95:15:f1:8f:51:f0:b6:2f:dc:83:
b9:14:7e:1c:19:44:1b:e9:9f:6b:da:d9:d4:f2:35:
71:6f:aa:ba:24:0a:4d:8f:d2:4b:cf:8a:f5:b8:79:
dd:6f:94:be:46:cc:82:00:61:eb:e0:82:01:57:05:
9d:9c:12:65:bf:3f:d8:b7:7d:f0:8e:ca:6d:8d:21:
95:47:c8:c2:37:26:2b:ef:ef:5c:84:4d:c7:68:aa:
02:dc:8e:6d:fe:a5:8b:ca:79:8a:e0:8a:0c:cb:2c:
58:6c:57:f9:69:71:32:77:8f:2a:16:71:70:f8:1d:
12:70:49:62:4d:66:49:bb:a1:1f:07:bf:3b:0e:97:
8a:3b:ca:a0:68:de:76:40:13:fa:00:33:56:1d:78:
a4:1c:cd:b2:a0:1b:be:74:81:29:20:3f:5e:80:f2:
70:e3:c0:29:43:46:7f:5b:67:bc:2e:08:43:33:0c:
95:5d:bc:04:04:f9:5d:f4:1d:24:08:39:a8:11:d3:
52:a0:0a:25:54:bc:af:94:11:5b:2a:8d:0e:98:17:
ac:f6:4d:98:25:3e:d1:e6:a3:9b:4d:b4:b5:f0:02:
fa:7e:9c:26:db:80:31:d1:8a:23:b0:15:5b:b6:0f:
88:90:94:a5:d8:0e:d6:1e:3f:ee:47:46:fb:fa:86:
9c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:28:AE:8B:55:5C:BA:D2:86:ED:A3:AE:6F:AB:25:98:B3:AD:AE:B3
X509v3 Authority Key Identifier:
keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.162.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:5c:51:fb:f0:95:60:a6:7f:d1:2a:14:f0:c2:6c:14:ed:6f:
b5:48:05:82:ff:23:c0:42:85:ca:5c:27:3b:ec:cb:2d:45:d2:
7c:d3:1c:98:0d:88:14:3b:db:4d:f1:08:37:35:a5:9f:e3:da:
25:66:85:ab:13:eb:76:87:9c:be:c8:c1:4c:a2:b5:ae:51:97:
61:7a:cd:c6:6c:6d:a7:6b:e2:2e:27:d0:74:d1:cb:2f:44:30:
71:48:8d:30:ef:8b:17:55:7f:86:ab:f6:61:e7:91:16:d7:13:
76:62:71:7d:c8:a5:d4:b1:3e:b4:60:c8:33:19:ee:6a:1b:ab:
e8:8c:02:16:48:16:fe:fb:4d:c1:8b:1d:09:9b:df:82:04:16:
19:43:17:bd:5a:dc:7e:0d:d0:6a:db:68:4a:13:b6:91:15:05:
02:f6:7e:a1:9a:d5:c0:1a:11:5d:92:ab:41:c9:f7:7f:da:05:
00:98:12:9d:fd:ae:70:df:28:bc:57:70:70:06:a6:46:1c:c9:
2f:4b:1d:9f:b1:e1:a5:70:dd:bf:e1:00:76:56:cf:c8:23:65:
7c:91:4b:fd:b4:89:cd:39:8b:6d:4d:39:d2:d0:7c:86:e6:96:
98:98:51:70:58:5c:38:3b:c4:8e:25:14:ca:67:63:cc:b8:f7:
6c:b6:a6:1b
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUSUZIU1x1ImlW9XOkxLXOwe0RoBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm
MjYwNzNjMzAeFw0yNTAxMTIyMzU5MDdaFw0yNjAxMTIwMDA0MDdaMDMxMTAvBgNV
BAMTKEUzMjhBRThCNTU1Q0JBRDI4NkVEQTNBRTZGQUIyNTk4QjNBREFFQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTXPzmlRXxj1Hwti/cg7kUfhwZ
RBvpn2va2dTyNXFvqrokCk2P0kvPivW4ed1vlL5GzIIAYevgggFXBZ2cEmW/P9i3
ffCOym2NIZVHyMI3Jivv71yETcdoqgLcjm3+pYvKeYrgigzLLFhsV/lpcTJ3jyoW
cXD4HRJwSWJNZkm7oR8HvzsOl4o7yqBo3nZAE/oAM1YdeKQczbKgG750gSkgP16A
8nDjwClDRn9bZ7wuCEMzDJVdvAQE+V30HSQIOagR01KgCiVUvK+UEVsqjQ6YF6z2
TZglPtHmo5tNtLXwAvp+nCbbgDHRiiOwFVu2D4iQlKXYDtYeP+5HRvv6hpw/AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU4yiui1VcutKG7aOub6slmLOtrrMwHwYDVR0j
BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz
NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K
Z2M4TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmZlMmIyN2Et
MWVjNS00YWI3LTk3OGUtNmRhOWNmOWYzNzkwLzAvMzQzNTJlMzEzNDM2MmUzMTM2
MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtkqIw
DQYJKoZIhvcNAQELBQADggEBALRcUfvwlWCmf9EqFPDCbBTtb7VIBYL/I8BChcpc
Jzvsyy1F0nzTHJgNiBQ7203xCDc1pZ/j2iVmhasT63aHnL7IwUyita5Rl2F6zcZs
badr4i4n0HTRyy9EMHFIjTDvixdVf4ar9mHnkRbXE3ZicX3IpdSxPrRgyDMZ7mob
q+iMAhZIFv77TcGLHQmb34IEFhlDF71a3H4N0GrbaEoTtpEVBQL2fqGa1cAaEV2S
q0HJ93/aBQCYEp39rnDfKLxXcHAGpkYcyS9LHZ+x4aVw3b/hAHZWz8gjZXyRS/20
ic05i21NOdLQfIbmlpiYUXBYXDg7xI4lFMpnY8y492y2phs=
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:18:49 2025 by rpki-client on console.sobornost.net