Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36342e302f32342d3234203d3e20323131333733.roa
File: 34352e39352e36342e302f32342d3234203d3e20323131333733.roa (raw, json)
Hash identifier: BG0Ai8CNSv7nyR7NYzV/bnCHYJKCL0QOsxcxvU46zsE=
Subject key identifier: 1E:70:90:11:94:65:18:64:63:7B:B4:03:F8:36:56:91:2E:ED:C9:CB
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 79630765224EE7447F6FE3C4CBF57B1FADB76CBB
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36342e302f32342d3234203d3e20323131333733.roa
Signing time: Wed 04 Oct 2023 11:38:54 +0000
ROA not before: Wed 04 Oct 2023 11:33:54 +0000
ROA not after: Wed 02 Oct 2024 11:38:54 +0000
asID: 211373
IP address blocks: 45.95.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:63:07:65:22:4e:e7:44:7f:6f:e3:c4:cb:f5:7b:1f:ad:b7:6c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Oct 4 11:33:54 2023 GMT
Not After : Oct 2 11:38:54 2024 GMT
Subject: CN=1E70901194651864637BB403F83656912EEDC9CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:d4:79:8f:65:57:53:6c:78:0f:3d:96:dc:
1a:b1:7a:ec:3a:78:1c:24:be:95:ba:33:da:9d:8a:
f3:3a:7b:ea:72:be:98:af:94:ec:a7:05:1b:1f:fb:
e0:92:ed:ce:28:9a:1d:ec:9e:13:f1:2c:6b:e2:36:
15:dd:57:6d:d0:f4:e7:2a:c5:e8:75:2c:d4:0d:6a:
5f:f1:9b:68:f6:1b:52:1d:5a:db:64:41:97:83:cd:
bc:a4:ba:a8:82:6a:b9:1e:07:19:b8:aa:49:c2:02:
2a:aa:8a:69:0e:df:38:ec:2e:ec:1c:23:ab:9e:78:
a7:d8:e3:fb:f9:9f:33:ed:f5:7c:64:53:9c:ea:59:
fc:c0:ac:b5:d5:67:ff:3e:64:1e:c2:bd:03:77:80:
19:35:01:c6:a2:a1:6f:25:c5:b1:c7:a7:27:81:88:
d4:62:67:3a:9c:03:58:d3:20:6b:cc:5e:ab:bd:bb:
f4:95:b4:ad:de:73:cf:5c:f6:85:f3:ab:1a:ee:c4:
d3:74:2d:c9:a6:49:61:c2:28:42:b3:d0:2b:56:a3:
3b:3c:c5:8a:03:3b:7f:45:09:6a:e3:da:44:53:1a:
8b:67:1c:4d:de:db:98:e8:d0:71:46:19:2e:e9:6e:
b0:1a:28:58:20:34:fb:db:c9:7a:35:24:a1:89:4e:
a9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:70:90:11:94:65:18:64:63:7B:B4:03:F8:36:56:91:2E:ED:C9:CB
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/34352e39352e36342e302f32342d3234203d3e20323131333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.64.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d9:ff:ac:ac:1b:3e:3e:1a:b3:fa:f8:28:ea:2e:8e:1b:e7:
36:a6:28:ed:38:3d:8f:65:b9:65:60:0a:e7:8f:d3:8e:a8:1c:
f6:ad:8c:d6:56:72:07:40:73:ea:67:dc:85:7b:89:26:62:1c:
cc:45:ab:01:9d:72:99:ec:20:02:45:d6:48:a0:e1:47:8a:12:
ac:9b:84:67:6a:d4:fc:6a:bc:72:4d:2c:3e:82:60:4b:ad:bf:
65:70:d7:fe:06:02:45:96:c1:a3:77:67:0c:59:1e:19:f8:49:
d3:d5:16:f5:54:f3:ba:88:3b:03:a6:38:8a:04:de:3d:19:e8:
24:24:71:ba:4a:6b:84:2e:d5:51:d2:b9:38:a8:b1:78:9e:fa:
df:64:93:a3:46:8f:95:96:d9:f5:9d:cc:a6:46:b3:20:60:af:
92:37:1e:82:64:70:10:dd:a8:73:98:12:c8:52:cf:8f:16:e8:
a0:71:b4:69:32:8b:c0:11:b9:b2:ef:d0:44:df:d8:30:3c:cc:
ab:23:dc:6b:d8:24:cc:85:c5:47:d8:d8:ca:cb:99:0c:88:da:
a4:2f:0b:f2:4c:99:d7:19:a6:27:75:6a:c1:1c:bf:0d:0c:e7:
92:b6:66:94:63:51:0e:72:48:66:05:97:47:12:e5:50:ba:4b:
36:f2:8f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:55:09 2025 by rpki-client