Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e31302e302f32342d3234203d3e203231383539.roa
File: 34352e38382e31302e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: yyP7gCE47GMsjX9xAJX0bHFBviJkZqAOyjNMASsxP8U=
Subject key identifier: D8:C9:E7:32:57:61:A8:51:00:A1:E9:4F:A2:44:F4:CB:E0:22:7C:0D
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 720DE80F3F896687E2FB53CD3E05F4358806BB35
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e31302e302f32342d3234203d3e203231383539.roa
Signing time: Wed 22 Jan 2025 01:49:07 +0000
ROA not before: Wed 22 Jan 2025 01:44:07 +0000
ROA not after: Wed 21 Jan 2026 01:49:07 +0000
asID: 21859
IP address blocks: 45.88.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:0d:e8:0f:3f:89:66:87:e2:fb:53:cd:3e:05:f4:35:88:06:bb:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Jan 22 01:44:07 2025 GMT
Not After : Jan 21 01:49:07 2026 GMT
Subject: CN=D8C9E7325761A85100A1E94FA244F4CBE0227C0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:15:0c:61:ca:4e:6a:62:07:f1:f6:94:8c:
2a:98:50:fd:6f:4c:e1:24:fd:84:75:3f:b3:64:a3:
40:b9:08:86:ad:56:5b:1d:e8:f1:66:0d:a5:17:ab:
69:77:91:7e:66:50:d9:4b:fd:46:c5:31:bb:e5:94:
a7:ac:cd:4b:e5:7f:7a:f5:c9:a3:30:06:0d:32:13:
75:67:12:58:75:df:b1:c4:03:39:96:6d:b0:bc:27:
6c:80:3f:33:5b:63:d1:d0:fb:2e:dd:24:31:e8:07:
bc:e8:61:73:e9:62:7e:03:15:1f:cf:b4:3c:01:c4:
99:1c:9e:e9:c7:f8:2d:6f:42:87:76:22:3b:0e:9b:
d2:fd:22:f0:44:5c:31:30:bb:52:14:5f:45:57:54:
7b:b7:07:cf:0f:2d:d2:4c:c8:97:45:d4:73:7b:00:
0a:c0:c9:73:b1:12:b1:57:09:2a:cb:35:ac:ba:40:
22:e1:b4:91:8b:3d:4e:d2:76:ae:ca:6e:4f:b8:aa:
73:66:1c:08:dc:3e:b6:28:60:4e:0b:e6:de:52:4c:
4e:85:d9:1d:65:da:95:9e:30:f8:ab:eb:6d:64:54:
fb:5c:bc:aa:a7:de:bd:f6:2b:fc:c9:7c:99:15:93:
10:d5:63:22:8e:7e:f3:6e:40:4f:b5:14:ee:74:21:
4c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C9:E7:32:57:61:A8:51:00:A1:E9:4F:A2:44:F4:CB:E0:22:7C:0D
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e31302e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:14:7d:2b:0b:e5:42:3a:9a:2e:5a:aa:1f:11:4f:af:08:1a:
97:70:52:c9:fa:49:25:3e:db:c7:c8:14:af:b1:8d:05:87:87:
67:30:df:3a:b3:df:11:26:59:fd:20:b3:f3:1f:c3:90:a4:17:
42:5b:ba:0e:01:df:0c:70:50:23:fa:42:fb:56:c1:b5:ba:6b:
14:bd:f3:fa:0d:2b:1d:95:05:8e:b7:f6:b7:f7:e1:e9:96:a6:
45:c5:fd:de:03:8f:77:45:48:ba:4d:ae:4b:c8:91:18:e7:d5:
a4:dd:5a:2c:ef:20:62:0a:d5:c3:98:10:21:3c:b2:0f:a4:8d:
c2:6e:ca:d9:92:cf:2e:58:e3:c2:59:3c:10:03:64:ee:32:18:
f3:91:db:57:f1:a3:d2:8b:a6:95:ae:71:47:d8:89:11:7f:af:
d5:9a:fc:78:64:7f:04:cf:5b:a1:43:97:05:2d:2e:f4:68:14:
55:4c:45:eb:93:0d:4e:d9:3c:e7:68:d4:aa:7e:6e:db:80:26:
29:00:a0:db:8b:33:dd:85:83:ea:d8:f6:6b:93:37:8f:33:51:
e9:ec:f4:ac:77:64:c6:be:a0:d5:0e:f1:f1:1d:a0:6b:61:14:
14:02:d1:a3:51:fd:dd:44:f4:19:bb:00:77:52:2c:b4:32:1e:
54:3f:21:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:22 2025 by rpki-client