Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36372e302f32342d3234203d3e20383334.roa
File: 34352e39352e36372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ONtnG+0EvEL6nyZ0iolkcbGrxK9WBB/PKA7o0pMAEPw=
Subject key identifier: 8D:48:50:7A:90:46:93:13:44:61:62:AE:51:C5:78:A1:45:81:A1:19
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 661EE67D369BC6385E6669D355835EB87BDBFC72
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36372e302f32342d3234203d3e20383334.roa
Signing time: Sun 16 Mar 2025 13:55:46 +0000
ROA not before: Sun 16 Mar 2025 13:50:46 +0000
ROA not after: Sun 15 Mar 2026 13:55:46 +0000
asID: 834
IP address blocks: 45.95.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:1e:e6:7d:36:9b:c6:38:5e:66:69:d3:55:83:5e:b8:7b:db:fc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Mar 16 13:50:46 2025 GMT
Not After : Mar 15 13:55:46 2026 GMT
Subject: CN=8D48507A90469313446162AE51C578A14581A119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:7f:1f:c0:56:b6:2e:bd:af:78:92:3d:fa:
5c:3b:1d:a6:78:90:a0:2b:e9:07:ae:26:8f:88:7b:
1f:6d:cd:1a:b9:8c:57:3c:11:d0:4d:e8:b9:1c:c3:
ff:61:5e:91:04:f9:6e:2c:08:36:bf:9a:d9:cc:8c:
af:bd:b4:41:4b:15:22:33:51:e4:33:ed:b8:d0:1d:
eb:03:2e:d6:d1:1d:2c:04:12:05:41:2d:0d:e6:4c:
3d:a6:df:61:15:25:6b:37:7b:d6:3e:7b:9e:c4:13:
fe:71:c3:73:59:5e:08:26:40:f2:7e:a3:55:16:6e:
c1:e0:74:c9:26:60:3b:57:50:2e:02:69:dd:6c:b0:
c1:d8:bd:b1:0c:7b:79:89:e7:a8:45:94:dc:3d:60:
96:6e:0c:db:c9:59:03:5c:47:5e:bf:be:a9:59:13:
f1:9c:21:5b:68:6b:83:1c:db:12:1e:f5:05:52:e3:
c3:88:b5:6c:46:e0:ae:a3:5d:6b:49:dc:fd:10:75:
ed:1b:3c:51:1c:72:be:a1:b6:8f:68:30:46:06:3e:
08:c7:26:d1:ea:d0:72:9a:41:b6:51:7f:0d:6e:29:
68:05:43:1a:53:09:53:59:36:f0:4b:e2:df:80:41:
d6:a4:96:a4:19:05:67:aa:34:c3:90:1a:6f:ab:78:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:48:50:7A:90:46:93:13:44:61:62:AE:51:C5:78:A1:45:81:A1:19
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:e5:5b:2f:d3:ce:ed:6e:0f:e7:9c:4a:71:5a:7e:08:d3:b0:
b6:7a:4f:07:03:05:29:8f:9f:43:1a:f2:79:43:7c:e6:01:1b:
02:0d:32:63:51:33:94:0f:33:38:dd:51:13:4b:2c:cc:2a:0c:
9f:ec:f2:08:db:6f:33:bc:32:b4:85:60:6a:a4:28:10:7f:88:
ee:a2:38:fb:81:11:07:d7:41:9e:d4:c3:2b:41:50:3e:a5:24:
0d:d6:b2:46:aa:cc:ff:2d:a2:8d:07:c0:a9:f3:27:9d:35:f4:
b5:40:38:88:27:d1:3d:0f:1b:4e:57:08:95:ae:d4:d0:9d:96:
14:06:ed:2b:f7:0b:ee:6c:39:80:3d:7c:ea:55:0b:b0:ac:bc:
b1:71:3e:ce:07:4b:91:f4:e4:82:1e:99:32:e2:d3:80:31:87:
29:be:69:93:d8:cb:f0:bc:53:8f:d6:7f:39:89:f9:4b:da:98:
94:5f:42:05:db:c0:d8:6e:60:f5:44:47:de:ca:be:b8:4c:ea:
74:e7:e2:0c:6d:80:68:b6:24:d2:e7:c0:11:31:04:d0:8b:17:
69:1e:d2:d5:6f:a2:a4:70:d6:98:49:53:cb:9e:5c:0a:0b:3d:
17:50:84:58:53:7b:80:8b:90:5e:85:a8:78:ca:c4:8c:32:78:
c6:45:99:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:55 2025 by rpki-client