Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38302e302f32342d3234203d3e203136323736.roa
File: 34352e39352e38302e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: 3x0cRO+g1bZbRHut+QAG7pwDzd80m15dxHMNduCBIhg=
Subject key identifier: 6C:23:A7:1A:0D:A4:12:58:74:FD:E4:2F:06:94:3C:FB:EF:40:E7:CB
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 0F298BE336C4901C9EE21314DE17ADBD4035B1D0
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38302e302f32342d3234203d3e203136323736.roa
Signing time: Tue 26 Nov 2024 03:42:06 +0000
ROA not before: Tue 26 Nov 2024 03:37:06 +0000
ROA not after: Tue 25 Nov 2025 03:42:06 +0000
asID: 16276
IP address blocks: 45.95.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:29:8b:e3:36:c4:90:1c:9e:e2:13:14:de:17:ad:bd:40:35:b1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Nov 26 03:37:06 2024 GMT
Not After : Nov 25 03:42:06 2025 GMT
Subject: CN=6C23A71A0DA4125874FDE42F06943CFBEF40E7CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:1d:bb:23:93:3e:c2:83:8f:47:c4:88:82:
c9:50:ef:e6:21:b0:70:77:95:0f:83:88:e7:f3:00:
dd:65:c1:1b:9f:5e:06:53:cb:0d:69:c0:47:50:bd:
57:67:f0:d8:1c:a7:4f:40:4f:b5:22:92:55:ce:13:
38:d8:5d:ca:bc:8c:91:f7:b9:c6:d3:1b:53:57:36:
0f:f2:11:cc:af:eb:cd:9a:2d:87:bb:e8:f2:fa:04:
92:2d:8f:16:ba:a2:3e:50:21:93:a4:18:fe:ac:e4:
f1:ed:1f:60:bc:f8:89:8c:2c:81:b8:8d:1e:7f:b3:
f8:57:65:fa:c1:a8:8a:b1:aa:de:4b:15:f5:af:a6:
8b:61:c0:b6:b0:89:40:fe:30:33:b1:f4:81:8d:9e:
de:59:61:f3:2e:bc:36:d1:25:14:38:ff:71:0f:8c:
a5:a8:4c:76:04:11:5e:ef:35:96:a7:d8:6d:74:ee:
f5:4f:3e:e0:84:82:24:61:18:3b:7a:e5:0e:ef:d9:
f0:74:1d:fd:fa:30:3e:c3:c2:45:45:2c:73:fe:02:
d0:35:3c:32:5f:88:9e:f2:68:2a:84:80:79:6c:ab:
51:ef:ac:a7:9f:7a:94:fe:70:54:af:f7:58:33:12:
1a:88:45:80:e3:a7:c0:87:08:64:a2:e5:9d:9d:48:
94:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:23:A7:1A:0D:A4:12:58:74:FD:E4:2F:06:94:3C:FB:EF:40:E7:CB
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38302e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.80.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ee:0b:51:56:fd:00:ca:c8:e6:74:bc:b3:63:5b:aa:db:f8:
68:d9:46:50:7a:79:05:6f:2c:6c:76:66:28:c9:a9:50:3b:9b:
e0:72:7f:e5:2e:0a:df:d2:00:4a:23:d3:3c:2f:60:5b:4f:36:
a3:f6:a6:40:f8:12:a3:92:98:99:8c:2a:e1:ba:82:69:4d:05:
6b:de:f0:d1:cb:8b:39:ef:28:9b:e4:27:6a:31:d9:50:3d:77:
09:92:50:6c:46:37:8b:61:3c:39:02:2f:dc:3f:c4:d5:1c:81:
70:d5:6f:72:6a:f9:12:c8:56:d6:d6:d2:0e:36:0c:33:58:60:
46:02:ae:56:82:f5:d8:f3:e7:ab:71:c1:f0:f4:49:e5:39:3b:
41:85:9b:d1:ac:7d:47:f1:79:ee:66:86:b4:5f:ee:5f:f5:23:
b6:66:3c:17:b2:49:e3:73:e2:21:52:25:b2:5f:a7:e2:35:ae:
01:89:0a:a6:a6:c4:47:46:0e:ee:3c:7c:b5:7e:ea:3f:20:0b:
5a:a7:e5:f9:3a:3f:53:41:7e:b7:78:6a:49:d4:83:72:07:4a:
67:5e:7b:55:8f:1b:4b:4f:d6:86:1c:2d:d9:2e:44:3f:dd:6e:
57:43:51:25:f6:79:43:da:5a:2c:5e:ad:56:83:20:4f:40:a8:
b3:a8:24:ef
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUDymL4zbEkBye4hMU3hetvUA1sdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj
ZTIzYWQ4YjAeFw0yNDExMjYwMzM3MDZaFw0yNTExMjUwMzQyMDZaMDMxMTAvBgNV
BAMTKDZDMjNBNzFBMERBNDEyNTg3NEZERTQyRjA2OTQzQ0ZCRUY0MEU3Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnhB27I5M+woOPR8SIgslQ7+Yh
sHB3lQ+DiOfzAN1lwRufXgZTyw1pwEdQvVdn8Ngcp09AT7UiklXOEzjYXcq8jJH3
ucbTG1NXNg/yEcyv682aLYe76PL6BJItjxa6oj5QIZOkGP6s5PHtH2C8+ImMLIG4
jR5/s/hXZfrBqIqxqt5LFfWvpothwLawiUD+MDOx9IGNnt5ZYfMuvDbRJRQ4/3EP
jKWoTHYEEV7vNZan2G107vVPPuCEgiRhGDt65Q7v2fB0Hf36MD7DwkVFLHP+AtA1
PDJfiJ7yaCqEgHlsq1HvrKefepT+cFSv91gzEhqIRYDjp8CHCGSi5Z2dSJShAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUbCOnGg2kElh0/eQvBpQ8++9A58swHwYDVR0j
BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx
OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0
anJZcy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGJmZDY4ODIt
ZDZiMy00YWE4LWJjMGEtNzExZDY4YmQxOThiLzAvMzQzNTJlMzkzNTJlMzgzMDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzYzMjM3MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtX1Aw
DQYJKoZIhvcNAQELBQADggEBAAnuC1FW/QDKyOZ0vLNjW6rb+GjZRlB6eQVvLGx2
ZijJqVA7m+Byf+UuCt/SAEoj0zwvYFtPNqP2pkD4EqOSmJmMKuG6gmlNBWve8NHL
iznvKJvkJ2ox2VA9dwmSUGxGN4thPDkCL9w/xNUcgXDVb3Jq+RLIVtbW0g42DDNY
YEYCrlaC9djz56txwfD0SeU5O0GFm9GsfUfxee5mhrRf7l/1I7ZmPBeySeNz4iFS
JbJfp+I1rgGJCqamxEdGDu48fLV+6j8gC1qn5fk6P1NBfrd4aknUg3IHSmdee1WP
G0tP1oYcLdkuRD/dbldDUSX2eUPaWixerVaDIE9AqLOoJO8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:43:16 2025 by rpki-client