Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38312e302f32342d3234203d3e203239383032.roa
File: 34352e39352e38312e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: RSLVUL+AislPXW7KHmpbzgP/rzQAkGuHFrgP4qIPD94=
Subject key identifier: D0:F0:E5:D7:10:C7:85:85:A7:E7:23:83:6A:D1:17:B7:95:94:DA:1E
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 55D19D3FCC4993743EEE0C2FD8ED0E2BAF315382
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38312e302f32342d3234203d3e203239383032.roa
Signing time: Sat 04 Jan 2025 06:09:24 +0000
ROA not before: Sat 04 Jan 2025 06:04:24 +0000
ROA not after: Sat 03 Jan 2026 06:09:24 +0000
asID: 29802
IP address blocks: 45.95.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d1:9d:3f:cc:49:93:74:3e:ee:0c:2f:d8:ed:0e:2b:af:31:53:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Jan 4 06:04:24 2025 GMT
Not After : Jan 3 06:09:24 2026 GMT
Subject: CN=D0F0E5D710C78585A7E723836AD117B79594DA1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:f0:ab:15:6d:b2:d3:fe:6d:4b:05:0c:b6:
fe:d6:d1:d3:1d:6c:2f:c9:b8:92:7e:f9:8b:fe:88:
74:b6:5b:01:a1:69:32:02:5d:db:eb:2e:bf:a4:72:
bc:f5:2a:f9:ff:72:ff:4b:c0:a9:4e:97:f2:c7:6a:
a1:20:5e:cd:90:94:1e:46:76:48:9b:d8:c9:55:83:
d3:78:8d:2b:f4:ec:f5:4c:6c:5e:6d:79:2e:f7:cb:
8c:ca:85:04:ca:ac:3f:71:7f:4d:0e:e4:1a:c8:7d:
08:50:62:b7:f4:a8:2f:ee:6a:42:09:13:62:e3:46:
25:56:af:6a:52:15:43:51:01:e7:a9:55:2b:df:68:
76:02:55:0c:65:df:49:d9:e1:e0:8c:36:c5:69:f3:
8c:34:40:30:c8:4d:50:0e:89:3a:7c:15:9e:51:a2:
f1:7a:7e:5c:f7:12:69:b6:92:a9:b3:61:1d:67:b2:
9e:76:0a:57:77:db:59:ee:13:f9:1c:02:ec:f0:69:
2e:ba:17:0f:b5:e5:88:a4:9c:de:6e:a5:87:9f:d1:
7f:94:42:f1:ff:d5:84:75:af:8f:6d:aa:d1:f2:da:
44:9c:36:82:a6:76:e9:75:40:dd:93:b8:60:98:7f:
27:17:9b:be:77:f3:6b:bb:a9:94:db:97:94:42:17:
d1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F0:E5:D7:10:C7:85:85:A7:E7:23:83:6A:D1:17:B7:95:94:DA:1E
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38312e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.81.0/24
Signature Algorithm: sha256WithRSAEncryption
83:67:d8:11:7f:e7:4d:b5:1c:be:4e:f8:87:aa:09:91:7b:85:
c7:fe:c8:db:53:17:03:67:d2:1d:ea:72:31:c5:3f:47:81:fa:
a8:8f:89:9b:d9:40:4d:bf:58:ae:ca:b5:f5:02:23:7e:07:ad:
27:49:fb:01:74:a1:eb:62:05:94:ab:57:1a:c1:19:3e:3e:a2:
96:ab:1f:b8:b3:07:42:f1:3b:a9:15:af:19:a7:eb:9d:98:81:
fe:4c:95:4c:b4:38:ce:a4:3f:31:f1:ba:13:95:5a:bc:74:e6:
fb:11:5c:ac:c1:63:82:04:dd:33:63:4c:db:86:8e:a6:d3:24:
aa:71:b6:01:6a:06:28:f8:45:23:34:b5:83:b3:16:d3:71:63:
57:29:de:10:de:b1:39:ab:ac:0f:56:01:be:3c:77:90:99:b2:
b0:2a:0c:c9:ba:49:7e:e3:ea:5a:3c:41:78:18:14:bd:04:fc:
f6:11:46:26:89:18:dd:98:43:7d:85:98:3e:40:57:37:47:04:
f0:9d:00:03:ec:d3:f6:b9:f1:3c:2b:3d:4a:c6:a6:08:fd:94:
d3:81:27:d6:23:8f:b2:05:07:56:3b:10:8e:01:59:49:90:8c:
45:ce:7c:d0:7b:42:d7:ce:7a:30:b4:2a:86:2a:cd:ba:41:db:
fd:a0:8c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:35 2025 by rpki-client