Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e38382e382e302f32342d3234203d3e20323031393439.roa
File: 34352e38382e382e302f32342d3234203d3e20323031393439.roa (raw, json)
Hash identifier: +dXw8VciIuDgoUKSx0jdrYVMiDUSe7SXGUN6aD0am+Y=
Subject key identifier: 78:87:15:39:D6:8B:A4:F3:C9:B0:C3:00:47:B5:B3:70:13:CE:B0:9C
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 55C030336261F3F9D82E6F65766CC314EBE81647
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e38382e382e302f32342d3234203d3e20323031393439.roa
Signing time: Wed 22 Mar 2023 07:00:06 +0000
ROA not before: Wed 22 Mar 2023 06:55:06 +0000
ROA not after: Wed 20 Mar 2024 07:00:06 +0000
asID: 201949
IP address blocks: 45.88.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c0:30:33:62:61:f3:f9:d8:2e:6f:65:76:6c:c3:14:eb:e8:16:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Mar 22 06:55:06 2023 GMT
Not After : Mar 20 07:00:06 2024 GMT
Subject: CN=78871539D68BA4F3C9B0C30047B5B37013CEB09C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:72:35:e0:56:5d:11:06:04:5e:85:60:f8:
46:95:39:d4:42:9e:46:86:5f:b1:0f:49:51:14:92:
33:86:72:2c:a3:d5:78:6a:ab:a5:5d:3a:55:f8:56:
b8:93:82:57:0c:69:81:18:35:e6:fe:31:99:a3:70:
2b:8f:bc:a2:2c:25:ea:84:7a:c5:67:c6:45:12:1d:
df:df:3b:d6:fc:48:56:8f:89:3e:36:95:62:0c:b2:
16:23:d6:01:3f:09:03:5b:1e:0b:85:c1:cf:53:8a:
20:1e:13:9c:d9:e1:3a:ed:e7:79:94:6a:c6:85:ee:
9c:26:3e:df:cd:9e:1f:ba:8d:9c:f6:09:5c:20:51:
4c:3a:c2:e2:99:67:68:2c:af:11:f6:e6:95:44:2f:
97:4b:68:4c:1c:42:b7:5d:e5:b5:cc:40:70:f4:dc:
2e:71:1a:d6:bf:d9:d1:f3:41:1e:c4:e2:94:ba:ae:
d4:de:8e:d6:25:84:74:23:1d:f2:7f:c0:94:2a:70:
46:6f:ff:05:84:77:e1:35:6b:e1:a9:a6:65:a3:87:
78:df:b9:9a:28:2e:eb:be:f2:e1:dd:ff:f4:48:c9:
92:03:24:13:08:f2:32:20:1f:6a:98:d0:ae:99:53:
07:8f:89:f7:4a:a1:c6:99:23:c4:68:aa:43:77:e2:
69:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:87:15:39:D6:8B:A4:F3:C9:B0:C3:00:47:B5:B3:70:13:CE:B0:9C
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e38382e382e302f32342d3234203d3e20323031393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.8.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ee:ff:ed:1a:71:b5:52:be:89:34:4c:96:1d:78:dc:57:4d:
2e:f5:01:37:bf:3a:b2:c0:38:a2:82:6e:57:e3:ec:49:57:c5:
cd:63:5f:ee:35:11:8c:f8:3f:c6:8d:fc:8a:22:28:80:fc:32:
79:6b:0d:26:fa:35:5f:9f:ec:85:21:52:28:46:c2:fb:ba:79:
0d:7e:a3:35:5d:b4:52:a8:10:c8:46:b2:99:7e:aa:b5:b7:48:
21:8e:b3:a3:b5:4d:de:0a:1e:e5:86:3d:c8:2b:28:57:cf:53:
b7:d2:ed:b3:96:e9:62:8e:e6:de:bc:23:17:cf:fc:10:f0:27:
36:e6:b4:90:12:e9:32:ee:cf:8e:76:05:dc:f8:5e:05:b4:55:
af:3a:1c:a2:a6:91:78:d1:89:68:9d:f1:5d:b5:2b:ff:e8:e1:
9c:9c:9a:86:d1:2b:c3:97:5f:6e:d7:7c:42:45:84:9b:77:32:
bb:92:85:d3:c7:cb:40:a6:9b:bd:07:e8:c7:93:d1:bf:40:39:
1b:50:39:10:4b:a7:ae:b6:70:d4:85:a3:85:63:2d:35:c2:43:
0b:67:3d:57:b6:c8:3e:8f:b9:60:74:9d:a6:27:32:1f:c2:5d:
de:00:57:ff:85:c5:66:1b:12:3c:55:c1:03:8e:96:27:86:5c:
5e:fd:46:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:05 2025 by rpki-client