Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/38302e37352e3232312e302f32342d3234203d3e20383334.roa
File: 38302e37352e3232312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: QnbzGMA+3wFh0yCWmPfnoJQ7e/Et1+7rrQKhNJR8GaQ=
Subject key identifier: 2A:5A:C3:C7:A6:25:71:E1:7D:83:C5:D2:14:26:D2:75:AD:71:FE:D5
Certificate issuer: /CN=4acd2d51922b2e1612e5f82c394f2d19800d1ddf
Certificate serial: 6E2AD503516C2A9C0C639132065E3527ECB4C957
Authority key identifier: 4A:CD:2D:51:92:2B:2E:16:12:E5:F8:2C:39:4F:2D:19:80:0D:1D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss0tUZIrLhYS5fgsOU8tGYANHd8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/38302e37352e3232312e302f32342d3234203d3e20383334.roa
Signing time: Fri 26 Apr 2024 00:02:07 +0000
ROA not before: Thu 25 Apr 2024 23:57:07 +0000
ROA not after: Fri 25 Apr 2025 00:02:07 +0000
asID: 834
IP address blocks: 80.75.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:2a:d5:03:51:6c:2a:9c:0c:63:91:32:06:5e:35:27:ec:b4:c9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acd2d51922b2e1612e5f82c394f2d19800d1ddf
Validity
Not Before: Apr 25 23:57:07 2024 GMT
Not After : Apr 25 00:02:07 2025 GMT
Subject: CN=2A5AC3C7A62571E17D83C5D21426D275AD71FED5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e9:0c:96:88:d0:07:52:9c:54:0b:cc:50:c0:
40:79:06:49:b1:99:51:91:cf:9e:32:e9:42:ce:c3:
0c:8b:b6:89:0b:88:8d:fe:5e:e9:d6:55:c6:7e:6d:
a4:02:d6:90:4f:bb:63:78:ba:2b:57:51:69:40:cc:
c3:3f:04:d1:73:2a:b3:a4:35:b7:20:65:4f:5a:b0:
28:ed:b0:96:74:e9:eb:d4:81:b4:f4:12:49:97:e8:
8b:47:17:b7:fe:ca:e4:d5:63:9f:fa:8a:66:cb:e4:
4e:61:56:1a:4e:9b:c4:c2:b2:e7:7f:61:06:9b:34:
24:74:d3:b7:b3:2a:db:0e:c4:d4:83:b5:8b:e6:bb:
2f:82:bf:19:26:ab:3d:ee:11:a3:3d:a1:c1:42:98:
e4:40:f5:91:7b:5a:f6:fb:e4:b8:29:11:37:38:5e:
e3:df:37:f9:cb:f7:4f:f2:21:9e:4d:28:37:be:01:
9e:24:a1:e1:0f:8e:1c:8f:b8:30:fd:47:93:7f:f7:
22:22:18:3f:be:c9:d7:8e:b9:c1:ef:a5:26:79:cf:
e7:22:45:20:ad:b5:35:cb:6d:68:7c:af:79:b9:13:
5f:73:e7:93:21:e8:40:bc:a3:68:36:df:06:fa:36:
5e:4b:a8:ae:3c:85:44:fb:c3:01:13:a6:d3:81:f8:
91:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5A:C3:C7:A6:25:71:E1:7D:83:C5:D2:14:26:D2:75:AD:71:FE:D5
X509v3 Authority Key Identifier:
keyid:4A:CD:2D:51:92:2B:2E:16:12:E5:F8:2C:39:4F:2D:19:80:0D:1D:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/4ACD2D51922B2E1612E5F82C394F2D19800D1DDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss0tUZIrLhYS5fgsOU8tGYANHd8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/38302e37352e3232312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.221.0/24
Signature Algorithm: sha256WithRSAEncryption
55:29:2a:b8:96:75:c7:71:f5:13:72:20:5b:1f:ad:d6:42:02:
a3:ad:ad:62:c6:64:fe:91:7d:6f:44:c0:71:7c:fb:fd:2e:83:
68:83:af:34:64:0b:ba:c8:02:6e:bb:fd:fa:b9:86:b8:81:05:
fd:0c:07:10:de:88:fa:c1:88:82:54:b4:f9:9f:4d:21:67:dc:
c2:fa:62:63:e7:ff:69:28:70:10:36:80:13:8d:70:01:94:27:
3f:1e:fc:49:ee:d7:1a:39:ff:2a:a3:83:06:cc:4f:01:1a:36:
55:24:0c:fd:b1:10:0d:82:39:b6:90:f8:89:78:2d:2d:24:05:
d2:36:44:cd:ae:a7:37:7c:26:96:da:19:bd:d0:43:e9:6c:7e:
89:b4:b4:20:e3:80:49:ba:61:0c:8f:64:a3:2b:70:f0:fd:66:
03:b7:72:0d:62:5d:30:d3:86:19:ad:f0:cc:4a:78:a4:01:2d:
15:72:ba:76:c2:27:b5:05:7c:98:f9:37:eb:cf:15:cd:e5:e5:
05:05:84:ac:69:46:c5:d6:87:19:2a:4b:bb:c5:9e:56:aa:98:
c7:e0:24:68:d4:6a:cb:43:4c:39:52:58:2a:f8:36:0e:fd:61:
ee:a9:b0:a4:2c:13:ee:c4:ad:34:ae:f3:a9:f8:42:f7:90:4a:
3a:5a:f8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:17 2024 by rpki-client on console-fra.rpki-client.org