Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e20323030303139.roa
File: 34352e39352e3231352e302f32342d3234203d3e20323030303139.roa (raw, json)
Hash identifier: wzeW6gr5tvQD9k+nlNIhTDPCZ5f2K3GfaHBrqXWEe2I=
Subject key identifier: 0F:4E:CE:42:96:08:4C:B7:DC:79:3E:5F:49:39:E5:80:EA:15:48:FB
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 4CB777E41F2B96751B0C68F459141D8C318565DB
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e20323030303139.roa
Signing time: Wed 30 Aug 2023 13:01:09 +0000
ROA not before: Wed 30 Aug 2023 12:56:09 +0000
ROA not after: Wed 28 Aug 2024 13:01:09 +0000
asID: 200019
IP address blocks: 45.95.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b7:77:e4:1f:2b:96:75:1b:0c:68:f4:59:14:1d:8c:31:85:65:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Aug 30 12:56:09 2023 GMT
Not After : Aug 28 13:01:09 2024 GMT
Subject: CN=0F4ECE4296084CB7DC793E5F4939E580EA1548FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:37:0d:43:94:a0:eb:38:a4:a8:40:34:b1:
11:56:8c:f3:cc:10:db:21:74:19:45:c7:63:4e:9e:
10:8a:04:b5:3d:fc:71:5b:a9:b0:c3:16:8d:d4:d3:
b9:9c:e5:37:b0:7c:6a:e0:de:b7:47:d6:2c:24:34:
63:1e:94:97:49:d7:a5:5b:43:1d:6c:f3:16:a2:bf:
fa:97:86:c2:0e:c6:e8:15:14:bc:5a:d3:81:1e:c2:
5d:a2:5f:62:5f:30:45:96:a5:fb:0c:d3:d6:68:6c:
3d:b3:68:f0:52:74:d1:fc:01:ef:72:ad:d2:d4:30:
90:08:81:63:98:ed:e1:1d:b2:4e:5e:62:cc:03:86:
2f:47:6e:2f:9a:52:af:76:ee:28:13:d0:41:51:88:
bf:12:10:bc:4a:6b:65:6e:85:ce:b3:46:4c:9e:8b:
53:54:d5:c6:32:18:c3:d1:98:49:bf:66:cb:dc:d0:
a4:3f:a4:4e:d0:47:fb:67:08:e9:1a:6a:c5:f3:a0:
fe:b0:1d:3f:b4:bc:1d:01:8d:15:91:82:8d:af:3d:
3b:f9:21:c5:ad:1a:a9:e2:69:64:56:81:ef:3c:65:
1e:47:e4:97:0e:c3:4a:60:13:ca:0b:b6:ad:b5:b7:
be:bf:9f:d8:49:c3:6d:4e:be:62:c6:03:d0:7b:8d:
c2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4E:CE:42:96:08:4C:B7:DC:79:3E:5F:49:39:E5:80:EA:15:48:FB
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e20323030303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.215.0/24
Signature Algorithm: sha256WithRSAEncryption
56:7a:62:84:bf:96:25:88:fb:91:ba:01:7a:7d:b4:e4:60:1a:
43:29:c0:d9:3b:25:87:08:ec:86:1b:52:06:a9:df:62:b8:ed:
d1:fa:a0:63:3a:5a:85:30:8b:22:7a:12:7d:cd:1d:4c:0c:60:
45:a8:7b:36:58:72:78:95:e7:4a:2e:e2:d2:14:c2:a3:99:99:
9b:d6:fa:85:3a:28:df:30:9f:26:00:3b:39:33:3b:9b:18:f6:
b5:2d:4c:b4:b9:fe:0c:8e:a9:1a:9f:ea:45:0c:a1:09:58:b4:
1e:99:6c:15:e2:1f:32:fa:27:c0:bc:d3:02:69:3c:de:6a:a8:
a0:ad:d7:0a:df:98:52:a7:db:92:fc:6c:aa:de:11:bb:d2:d5:
16:5c:cc:5c:88:e4:47:a2:6b:26:81:bf:af:a5:2a:c9:f4:04:
04:89:ae:af:07:66:c2:42:82:54:11:18:92:1a:79:9b:33:b8:
4d:c9:d5:9d:3f:76:24:53:69:49:29:77:b1:a0:ec:ab:ba:4a:
a9:8c:67:b3:f4:98:f9:ce:26:42:72:fe:30:d2:46:30:92:b6:
4f:54:c6:24:15:18:ef:87:14:f8:45:df:c6:df:62:6f:bf:dd:
21:46:40:ef:a7:f9:ac:e3:7f:e5:e8:f6:61:fb:3a:4d:b7:98:
95:4c:bb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:50:16 2025 by rpki-client