Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32342d3234203d3e20323135323837.roa
File: 34352e39352e3231322e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: yI+rdXy4c+Yv6CrdEYqtgvETnjm86BV1nL0uKo9J1Do=
Subject key identifier: FA:E2:63:F5:FF:18:DF:EC:ED:91:1D:3A:58:07:1F:F2:E5:77:AB:85
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 6FD9276C9256489E47ED53AEAB9EDBACD81EBEA6
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32342d3234203d3e20323135323837.roa
Signing time: Sun 24 Nov 2024 16:09:07 +0000
ROA not before: Sun 24 Nov 2024 16:04:07 +0000
ROA not after: Sun 23 Nov 2025 16:09:07 +0000
asID: 215287
IP address blocks: 45.95.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:d9:27:6c:92:56:48:9e:47:ed:53:ae:ab:9e:db:ac:d8:1e:be:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Nov 24 16:04:07 2024 GMT
Not After : Nov 23 16:09:07 2025 GMT
Subject: CN=FAE263F5FF18DFECED911D3A58071FF2E577AB85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:9b:4b:3a:2d:5e:2f:7d:55:dd:87:81:ca:
ed:22:cd:00:3a:2f:38:b7:36:9f:46:36:9b:8f:da:
98:c7:19:ce:8c:f6:f2:b6:bc:e5:d5:3c:28:3b:fe:
57:86:bf:84:8a:59:aa:c3:47:8b:6b:48:2c:4c:2e:
69:f4:bc:ed:8c:84:37:48:28:f3:74:a0:3d:a8:94:
43:3b:84:fc:44:f1:7c:b4:f5:0c:74:71:94:62:ab:
a2:01:af:e4:d0:92:a7:ad:e5:a6:95:91:ce:f3:51:
8d:4c:5a:f1:b3:41:e9:ed:15:00:ba:31:1d:5f:43:
f3:35:dc:58:af:2d:2d:0b:dd:1b:f9:4e:40:10:44:
3d:be:fc:43:b4:1b:70:8d:7d:5f:ab:6f:c3:f0:b5:
b3:b8:5f:7e:80:99:5f:3f:be:19:57:6a:a3:34:8d:
87:d0:a3:57:05:78:62:33:55:b3:29:98:65:8f:20:
0c:2e:de:3e:75:52:9f:c2:d1:06:d3:44:64:63:59:
ad:6c:a9:70:ae:3c:8e:c7:47:91:cb:12:73:4c:29:
85:fc:69:92:f1:98:66:72:0b:08:04:af:e3:c9:7e:
71:f4:7a:e8:d8:78:ba:32:f4:11:3a:ed:70:1a:14:
26:dc:11:cf:ef:36:ec:fc:9e:c5:7d:7c:b6:54:b7:
4a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E2:63:F5:FF:18:DF:EC:ED:91:1D:3A:58:07:1F:F2:E5:77:AB:85
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.212.0/24
Signature Algorithm: sha256WithRSAEncryption
25:8e:e0:fd:1a:c3:4d:fb:0a:c8:68:64:80:21:80:dd:ed:72:
e1:25:90:10:7a:c6:82:93:79:62:3b:b1:23:12:a0:6b:63:0f:
87:50:66:11:bd:94:af:63:89:91:c4:45:e7:08:8f:46:65:91:
4b:a7:44:bd:3a:7b:a7:eb:97:38:49:d8:3b:00:c8:85:87:a3:
ad:93:df:fb:ec:a9:a8:d3:97:9a:0e:4d:59:bd:39:fe:06:d6:
13:4b:9f:82:64:b9:08:8e:95:98:51:1d:83:a0:3b:d3:0b:ca:
54:bc:24:d1:38:2d:b0:bb:51:50:a1:a5:7b:e0:8c:30:80:f3:
0a:ad:3e:43:bb:1d:5d:1f:63:63:31:6a:b2:1e:eb:5b:79:e7:
46:56:18:d1:c5:5d:aa:aa:f9:4c:0f:20:98:07:35:bd:bf:bf:
98:a3:42:00:86:c2:b1:76:94:5a:36:cf:81:4e:8d:f3:f9:50:
1d:52:35:f8:15:05:89:f8:18:5b:f6:bf:a2:3b:40:b4:fd:b1:
40:e2:19:94:a8:81:f4:c8:04:7f:7c:19:11:c7:6e:95:5a:e7:
31:eb:49:73:16:37:7c:80:aa:84:17:f8:c3:45:35:4e:4b:3a:
6a:67:11:5a:0c:e2:8c:d0:c7:55:77:98:63:98:cd:c6:b7:4c:
52:6a:a8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:24 2025 by rpki-client