Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36352e302f32342d3234203d3e20323135373130.roa
File: 34352e39352e36352e302f32342d3234203d3e20323135373130.roa (raw, json)
Hash identifier: 8Xo7TKDKqWeSzHtH76yIitxMG6UvxuF9WLjtqxFns0U=
Subject key identifier: CA:84:28:D0:FF:F7:AA:76:FE:50:EE:DE:F1:D8:31:80:C6:1D:41:C8
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 57D1AD440A0D3464B6F589DDC4FD16B051BBAA38
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36352e302f32342d3234203d3e20323135373130.roa
Signing time: Mon 13 Jan 2025 12:53:51 +0000
ROA not before: Mon 13 Jan 2025 12:48:51 +0000
ROA not after: Mon 12 Jan 2026 12:53:51 +0000
asID: 215710
IP address blocks: 45.95.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:d1:ad:44:0a:0d:34:64:b6:f5:89:dd:c4:fd:16:b0:51:bb:aa:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Jan 13 12:48:51 2025 GMT
Not After : Jan 12 12:53:51 2026 GMT
Subject: CN=CA8428D0FFF7AA76FE50EEDEF1D83180C61D41C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:39:c0:9d:aa:cb:ea:d0:a2:da:2a:48:45:ae:
88:43:54:c5:46:8e:3e:1a:20:42:7d:47:d4:ac:f5:
5b:ac:05:9c:67:b7:59:58:c3:41:4d:cd:ac:e4:ff:
e3:c5:75:b4:03:23:a6:54:80:4a:07:7a:35:f7:93:
ce:65:7f:8b:df:b4:29:54:3a:85:55:42:b5:97:99:
b0:84:ff:39:d6:dc:af:f4:8d:7c:56:68:b8:ca:07:
ec:8f:3a:ef:bd:0b:fa:d0:d9:c6:87:03:47:11:c1:
6b:4e:ea:eb:16:ed:ea:a1:69:92:b6:77:08:c7:1f:
60:da:ed:dc:7b:92:77:0b:21:cc:4c:83:1c:b9:68:
d3:21:5e:74:88:b2:0e:b6:9f:72:1d:0a:54:2f:6b:
22:4e:ab:61:82:29:1c:86:2c:27:8d:b1:b0:e3:dc:
43:fc:be:5a:d0:eb:7a:ba:8f:aa:2c:0e:f1:af:0a:
9f:2a:7e:cf:87:15:53:e0:b6:36:61:a0:7d:cc:e0:
3c:db:ec:fe:b1:08:48:b1:69:d5:a8:c6:b2:49:47:
a6:5c:33:d4:5c:97:45:4b:58:37:a2:52:81:8c:20:
69:7c:cd:16:bc:1b:be:f9:46:1f:06:ec:b4:df:c5:
7b:b8:b3:10:a3:d5:01:9f:66:37:3b:1e:7a:ed:ec:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:84:28:D0:FF:F7:AA:76:FE:50:EE:DE:F1:D8:31:80:C6:1D:41:C8
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36352e302f32342d3234203d3e20323135373130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.65.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:27:75:2e:57:ed:23:91:08:9a:cf:9e:d6:de:01:4c:b1:58:
aa:76:42:8e:2b:84:43:04:3a:2b:13:df:10:dc:5b:9e:35:9f:
26:a8:f6:f2:66:a1:72:95:f3:0b:2b:1e:b7:d8:25:4c:60:9c:
88:ba:77:90:88:3b:67:8b:2d:04:3e:d7:28:32:51:39:29:e2:
99:e1:70:b3:ab:c7:60:ac:1b:23:94:fc:81:13:1d:3a:da:15:
f9:57:60:29:bd:ac:b4:22:49:0c:48:46:1c:57:a0:bf:ba:81:
e8:29:84:9b:7b:f6:40:e8:6e:1e:b3:09:4f:ee:4b:b4:e6:d4:
be:2e:32:b7:3b:5d:36:48:ad:c1:cb:ca:a0:cd:6f:16:8f:fe:
a5:34:a5:f8:07:b4:ca:c6:d1:8c:5c:b6:fb:59:36:65:37:0b:
69:58:ac:dc:2b:e0:07:2a:ed:ed:95:ea:d8:c8:fc:61:23:9d:
92:04:37:e3:a9:bc:ca:be:3b:d8:65:a0:52:f0:69:c3:2a:70:
f4:fb:96:ec:1d:ac:f1:ee:36:7b:af:83:77:42:65:f5:b6:41:
dc:df:e5:da:88:e4:58:cf:40:ef:d1:0c:fd:ee:97:05:ed:c5:
f4:e8:de:7c:56:14:59:cf:c5:8e:6b:34:66:be:2f:47:d6:aa:
76:88:0d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:56:47 2025 by rpki-client