Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20313939383239.roa
File: 34352e39352e36362e302f32342d3234203d3e20313939383239.roa (raw, json)
Hash identifier: Rt39JBoVCyR/UAjruWtcOpIMkgGdZ80ayuJi8rSqBUA=
Subject key identifier: 17:30:B6:B5:4B:64:7C:29:1E:53:46:FE:B5:93:43:2A:86:95:06:8D
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 6826925EB15E6D9F6A705BE536187E16DBFFA2E9
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20313939383239.roa
Signing time: Mon 03 Feb 2025 01:27:24 +0000
ROA not before: Mon 03 Feb 2025 01:22:24 +0000
ROA not after: Mon 02 Feb 2026 01:27:24 +0000
asID: 199829
IP address blocks: 45.95.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:26:92:5e:b1:5e:6d:9f:6a:70:5b:e5:36:18:7e:16:db:ff:a2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Feb 3 01:22:24 2025 GMT
Not After : Feb 2 01:27:24 2026 GMT
Subject: CN=1730B6B54B647C291E5346FEB593432A8695068D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b5:d7:0d:e8:35:5e:9e:63:21:0e:71:03:c0:
6f:b1:70:10:06:53:21:b6:80:dc:5f:a3:08:df:e2:
ea:a1:c1:69:65:4e:e7:e5:70:88:25:39:9c:61:80:
47:17:9f:73:92:d0:f9:1d:8f:7e:c0:b4:ba:0a:91:
30:ec:10:b0:f8:8f:69:80:e1:7c:4f:c0:ae:ab:90:
26:1a:00:27:35:80:6b:da:20:a4:c6:1d:a9:59:af:
06:a1:6e:09:0d:0f:f5:bf:1d:3c:cb:fe:40:ac:ed:
42:29:fe:8e:40:c6:7c:3d:67:36:c8:bc:3e:3b:2f:
ce:a3:fb:02:f4:aa:8f:ea:7f:40:25:42:69:af:dc:
6d:1b:75:83:14:42:cc:1f:1c:7f:99:42:6c:31:ea:
6f:46:a5:62:5c:26:e7:fc:e0:76:e8:2f:c4:9b:08:
9e:55:68:35:89:a8:34:be:e4:00:10:09:6d:c3:8c:
58:0e:f5:4d:4a:54:1d:5e:e7:70:55:76:aa:bd:b1:
0e:9a:e6:5d:5a:b3:5c:f3:f4:6a:b1:0c:0a:f0:9c:
05:ea:42:d8:05:34:fd:fd:18:bf:ed:cb:37:08:c4:
3f:ad:8c:16:b7:ba:fb:b9:a5:5b:49:3c:8d:d3:55:
6e:c8:0a:08:e9:5b:e9:d0:27:3c:91:60:8e:90:84:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:30:B6:B5:4B:64:7C:29:1E:53:46:FE:B5:93:43:2A:86:95:06:8D
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20313939383239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.66.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:3b:00:14:fb:63:9c:de:9b:e1:a2:b5:62:e5:5e:75:15:d1:
f4:75:6b:d2:fa:32:c7:9c:f2:ca:19:97:6c:07:fe:b0:e8:b3:
dd:0c:26:31:2d:fc:09:67:c0:6a:d9:92:b1:99:12:83:45:a6:
95:81:29:69:4e:7b:3e:13:b6:56:95:ad:78:f8:b9:d0:80:35:
7a:c3:bd:75:e8:f4:bc:93:dc:b4:78:0a:d0:1f:58:e7:55:d4:
cc:d9:a7:4e:7a:be:ef:3b:39:27:30:9b:4d:6f:d8:90:cb:24:
31:e6:39:41:f6:20:75:0e:74:87:39:55:f5:64:b4:04:4c:b5:
f1:1f:82:b8:bf:ba:a0:39:42:ae:52:53:15:65:fa:b7:eb:be:
ad:32:f1:94:4f:74:8e:d0:0c:94:e8:3d:85:61:ad:08:8f:45:
25:b2:29:59:4d:7d:64:34:3a:b8:f1:06:8b:bb:db:20:e7:76:
4b:99:75:4b:3c:a7:4b:48:94:ad:22:7e:8b:c0:58:85:25:7d:
66:f3:5f:70:9a:30:80:9f:c7:ac:35:dc:e8:1f:0b:c7:26:b1:
64:bb:2a:1b:4b:2a:8d:11:be:98:02:ec:8e:e8:91:4b:54:15:
4d:0a:67:48:a5:ad:be:0f:5e:ac:f0:26:08:7d:7e:99:16:1b:
d6:10:d4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:55 2025 by rpki-client