Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20323732353437.roa
File: 34352e39352e36362e302f32342d3234203d3e20323732353437.roa (raw, json)
Hash identifier: dwoKJ5y9xMkRq/+CESyNzvt8c2Aqwnhv/hzKffWNtE4=
Subject key identifier: C5:5D:F0:A1:A8:68:6F:5C:25:BC:67:91:2A:E2:ED:1C:5C:55:5D:58
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 5844BBFE329F796AF53429CC5DB68C891899AB16
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20323732353437.roa
Signing time: Mon 10 Feb 2025 15:21:03 +0000
ROA not before: Mon 10 Feb 2025 15:16:03 +0000
ROA not after: Mon 09 Feb 2026 15:21:03 +0000
asID: 272547
IP address blocks: 45.95.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:44:bb:fe:32:9f:79:6a:f5:34:29:cc:5d:b6:8c:89:18:99:ab:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Feb 10 15:16:03 2025 GMT
Not After : Feb 9 15:21:03 2026 GMT
Subject: CN=C55DF0A1A8686F5C25BC67912AE2ED1C5C555D58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:61:4a:1f:2d:99:54:be:62:b0:ef:78:8a:f3:
08:2c:9c:7d:f4:18:13:ba:4b:e4:73:02:e1:d7:ed:
f1:d4:e5:9e:3e:37:e0:84:c2:f7:97:bc:7b:d4:e0:
18:41:1c:2b:21:84:25:95:30:75:e5:d5:24:5f:b4:
40:be:61:5c:92:30:7e:98:9e:3c:eb:98:ab:6f:ca:
c8:fc:0e:4e:7c:7a:7b:1a:7e:29:e8:08:97:6e:bd:
54:b9:92:33:45:81:f8:3b:1f:1d:f6:49:c7:35:be:
a6:89:7e:2e:9f:2e:d9:66:1d:c7:e0:87:b5:39:21:
7f:0b:60:42:9d:9e:84:8d:ab:ef:fb:e9:14:4b:9c:
a4:36:df:c3:80:44:5f:3d:31:c2:6d:d3:3c:a9:03:
0b:e6:46:da:ad:91:99:06:ac:3c:cd:71:5c:01:c7:
90:e7:54:86:77:5d:92:6b:61:9f:4d:d7:63:b7:8d:
d2:08:43:25:44:95:01:13:b1:72:54:b2:0f:12:39:
4a:d0:41:36:11:97:9c:27:fa:93:b6:ef:4c:c1:f2:
5c:2f:6b:0e:44:d8:93:d3:8d:f6:06:ff:ce:59:f7:
06:d4:98:3c:f7:53:4e:33:10:fb:44:92:4b:98:a5:
ab:ac:63:d2:61:4a:45:20:56:b8:a7:61:81:3f:9a:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5D:F0:A1:A8:68:6F:5C:25:BC:67:91:2A:E2:ED:1C:5C:55:5D:58
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20323732353437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.66.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:3a:cc:05:60:60:36:8b:b8:a6:9c:ea:11:9d:6a:f0:64:ff:
e8:92:8f:1c:aa:c1:cd:95:28:b3:00:ef:a8:0c:07:cf:ad:ab:
b2:e6:ac:c1:a3:13:84:87:94:8b:3a:fb:06:d7:68:f7:bc:ef:
f9:d7:d0:57:ec:e9:ba:55:ca:06:57:e0:1f:92:3a:ec:de:5c:
33:95:fe:1c:90:2c:4e:c1:19:51:f5:86:9a:61:ce:0c:50:67:
19:7f:f4:81:b7:a4:60:26:59:3d:a4:bd:21:66:bd:11:85:c8:
e3:35:95:b6:8a:d4:e5:bf:87:2c:c7:82:ce:eb:fb:4f:15:bd:
c8:bd:d2:5e:4b:f5:5b:11:9c:cb:65:b6:30:d7:a7:16:bd:06:
39:16:1b:9d:b1:12:0b:57:9c:d0:cb:8c:d5:72:35:07:1f:e9:
15:cd:f1:7f:74:62:9e:2d:52:e5:ff:d1:46:df:41:49:6f:de:
5f:79:0b:03:f2:7c:e1:d2:f7:e2:50:be:39:5b:49:7c:f9:cc:
52:19:d8:19:ef:e8:a3:93:91:e7:49:69:e1:b5:58:7e:56:14:
1e:bc:32:42:9c:bc:f0:10:00:7e:4a:8c:57:5a:0f:a2:52:e7:
cc:e4:0c:d6:61:58:17:d6:e3:81:32:09:74:d4:dc:c6:38:38:
b1:45:d4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:57:05 2025 by rpki-client