Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/38302e37352e3232312e302f32342d3234203d3e2032393134.roa
File: 38302e37352e3232312e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: oEg/qGgf0Mz480dnIoU5P2CrQhohhynzl1N/ayk9Dj8=
Subject key identifier: 66:09:73:FD:90:C7:97:EB:FD:28:F5:11:90:0B:0A:27:74:53:2B:4F
Certificate issuer: /CN=4acd2d51922b2e1612e5f82c394f2d19800d1ddf
Certificate serial: 4245A0377916E46AC074D61A97E89B6B2C2F08DD
Authority key identifier: 4A:CD:2D:51:92:2B:2E:16:12:E5:F8:2C:39:4F:2D:19:80:0D:1D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss0tUZIrLhYS5fgsOU8tGYANHd8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/38302e37352e3232312e302f32342d3234203d3e2032393134.roa
Signing time: Wed 13 Mar 2024 12:11:45 +0000
ROA not before: Wed 13 Mar 2024 12:06:45 +0000
ROA not after: Wed 12 Mar 2025 12:11:45 +0000
asID: 2914
IP address blocks: 80.75.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:45:a0:37:79:16:e4:6a:c0:74:d6:1a:97:e8:9b:6b:2c:2f:08:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acd2d51922b2e1612e5f82c394f2d19800d1ddf
Validity
Not Before: Mar 13 12:06:45 2024 GMT
Not After : Mar 12 12:11:45 2025 GMT
Subject: CN=660973FD90C797EBFD28F511900B0A2774532B4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:e2:07:31:aa:b2:20:0f:2e:ad:5a:62:55:
ad:6a:cd:9b:8c:0f:b3:e0:21:e2:80:85:4d:59:0d:
90:93:bb:43:a7:39:ec:63:a7:3a:d9:f4:98:e9:51:
e5:5c:13:ca:6b:13:55:59:8d:b1:3f:5d:09:50:43:
44:e3:57:61:b6:ab:8f:e2:82:9d:c5:a5:55:3a:93:
07:91:b7:4d:d0:2a:ce:9a:6a:68:7c:ff:81:ae:e7:
e6:e2:ac:b4:d0:f0:e3:17:c2:40:f6:7d:cd:23:6f:
aa:07:0e:23:76:17:4b:67:a0:e7:69:70:cd:88:ac:
37:47:00:94:00:53:4c:62:99:22:55:35:01:3b:62:
17:ff:dd:e7:c0:19:eb:3f:fc:ef:b7:76:9d:c7:fb:
a6:02:b6:60:e7:ad:62:2c:52:9e:61:9b:df:bc:40:
12:9e:63:6a:75:10:82:5d:01:5a:44:71:39:af:75:
7b:3e:31:af:54:43:0f:8a:f2:c2:9f:03:de:b1:98:
04:da:b8:19:29:87:c6:b3:5d:95:5c:a5:eb:2b:28:
fb:f8:79:d7:0e:8f:7d:5c:d2:0f:00:76:d8:3b:42:
2e:1c:06:35:a7:c1:6d:33:c9:dc:0b:48:ec:84:8b:
44:ea:0c:52:b0:13:56:b0:cd:8f:92:38:fb:36:b6:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:09:73:FD:90:C7:97:EB:FD:28:F5:11:90:0B:0A:27:74:53:2B:4F
X509v3 Authority Key Identifier:
keyid:4A:CD:2D:51:92:2B:2E:16:12:E5:F8:2C:39:4F:2D:19:80:0D:1D:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/4ACD2D51922B2E1612E5F82C394F2D19800D1DDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss0tUZIrLhYS5fgsOU8tGYANHd8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/38302e37352e3232312e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.221.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c4:4a:c9:a2:2b:3b:33:d0:37:ad:51:57:62:6a:23:9f:63:
40:26:83:c6:bf:62:92:b3:c7:b3:63:b6:6f:ac:f4:c6:11:37:
75:02:cc:ec:e8:b1:a0:c1:4f:4a:69:e5:44:91:81:ea:f9:4c:
41:0d:d0:dd:48:9c:a2:01:7b:96:39:38:89:be:5a:fe:da:31:
32:90:ce:85:1b:fc:ba:ab:83:6e:8b:a2:e1:bc:5c:f3:0a:d2:
5f:ac:ac:4b:c0:85:53:be:7b:15:03:a8:aa:ee:f5:61:b8:97:
9c:4e:ee:91:4e:f4:51:89:2b:03:b8:8c:92:64:d5:59:93:81:
b9:b8:23:10:53:43:ea:5a:da:bf:09:6d:81:c5:d4:37:ac:79:
24:fe:c1:e0:17:0e:55:1b:7f:5a:f5:6a:15:f2:7d:95:e8:8f:
12:09:65:b0:70:84:11:2e:bf:63:60:f4:99:68:e9:47:4f:64:
ba:1c:64:fe:d3:1f:3f:88:e0:06:d7:a6:fb:4a:7c:0e:bf:76:
d2:a8:1d:bb:31:00:27:d6:53:a2:a5:84:2b:63:bd:78:75:a6:
18:4b:fe:83:c3:26:c5:ab:70:02:14:49:c5:9b:8f:a6:09:f7:
77:6f:9d:7f:c3:da:19:80:7e:0c:61:a1:1c:e7:f0:15:2a:c1:
e2:99:fc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:49:08 2025 by rpki-client