Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136382e302f32322d3232203d3e20383334.roa
File: 3132382e36352e3136382e302f32322d3232203d3e20383334.roa (raw, json)
Hash identifier: vtO/D00cXcd+EVFnX4iWDy7uTwH8S5EwNUNVTKvo7Dk=
Subject key identifier: D1:C9:BC:EF:84:A0:C3:D8:92:B1:94:16:50:CA:72:EF:5C:1D:78:F0
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 7D07E27361789CAA1B3F3DEAEDD99D7B5EAAE390
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136382e302f32322d3232203d3e20383334.roa
Signing time: Tue 25 Mar 2025 06:19:38 +0000
ROA not before: Tue 25 Mar 2025 06:14:38 +0000
ROA not after: Tue 24 Mar 2026 06:19:38 +0000
asID: 834
IP address blocks: 128.65.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:07:e2:73:61:78:9c:aa:1b:3f:3d:ea:ed:d9:9d:7b:5e:aa:e3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Mar 25 06:14:38 2025 GMT
Not After : Mar 24 06:19:38 2026 GMT
Subject: CN=D1C9BCEF84A0C3D892B1941650CA72EF5C1D78F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:72:d8:c9:cf:5b:14:99:fa:0f:01:23:15:
c5:73:5a:8c:8c:b2:88:5b:a4:98:5e:cb:71:ce:e0:
4c:ba:30:ae:81:91:55:60:93:79:2b:ca:29:59:d6:
0f:da:5c:33:a1:7f:69:a7:90:49:1a:85:7a:77:e5:
b0:69:34:d4:f2:1c:6a:5b:e3:84:21:39:06:f2:e4:
d9:f2:46:f1:b1:77:01:32:b2:16:8f:cd:6e:70:c7:
f4:19:f2:64:82:b5:f1:32:33:36:9f:3b:65:24:7e:
41:5b:86:3e:2b:09:c6:d5:6e:70:00:ff:45:da:a1:
bd:c7:5f:b4:7d:0d:db:ea:8d:bb:1d:df:5f:68:6e:
b8:9f:4a:cd:34:e3:3d:cb:96:bc:75:61:aa:2f:7f:
54:dd:62:83:c7:fd:56:6b:e2:1d:bd:6b:ab:93:46:
8a:21:82:e4:a2:4b:10:b0:0e:58:79:14:e0:0d:a0:
cf:db:3b:67:b0:50:64:16:2f:97:b4:27:55:7f:9b:
0a:76:a8:e3:00:a2:74:34:6b:94:e3:26:1d:f1:da:
58:23:61:15:dc:2e:83:81:b4:71:5d:05:0c:dc:e6:
7c:d8:ba:98:2b:12:0d:4e:37:06:89:71:f0:3c:7d:
c6:1b:91:7a:36:8e:8c:89:4b:78:64:a8:65:16:da:
88:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C9:BC:EF:84:A0:C3:D8:92:B1:94:16:50:CA:72:EF:5C:1D:78:F0
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3132382e36352e3136382e302f32322d3232203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.168.0/22
Signature Algorithm: sha256WithRSAEncryption
26:d3:41:db:a2:a9:62:0b:c6:06:23:18:3f:87:62:54:11:ee:
37:b2:ae:ac:a6:04:3c:43:c9:28:86:8f:e8:cf:8b:4f:49:7c:
1b:44:5f:0e:d6:53:8c:95:ed:bd:1a:c7:72:01:cb:51:a9:85:
6c:7a:4a:cf:8c:2c:00:1b:ab:f4:64:cf:96:d6:79:19:eb:ca:
a8:01:1d:cc:f9:84:f2:cb:72:c4:c6:94:46:ac:44:41:d6:79:
f1:c4:1a:2b:ec:4b:95:a7:43:87:eb:91:aa:7b:df:95:3c:c0:
1a:17:91:c1:9f:4d:fe:cf:ac:2b:53:aa:c4:bb:53:02:b7:40:
d7:7e:0a:cb:db:d0:5e:29:27:b2:c6:fd:93:92:df:af:11:9b:
f1:12:c6:e8:c1:0b:b7:2d:96:38:e4:5f:7a:58:c6:23:44:2b:
6d:f3:c9:68:98:be:80:a7:a2:02:57:6d:0c:2a:41:28:51:16:
b6:06:2e:87:44:ed:e2:71:45:99:93:78:50:5e:c2:d2:0d:56:
e2:94:0a:23:b2:d4:ca:52:f5:ff:a6:47:ba:a6:d7:56:00:16:
15:d6:c3:22:31:5c:ad:12:b0:e8:98:1d:1b:82:21:77:7d:57:
f1:79:8e:1a:32:73:22:0d:97:8e:96:a1:5a:2c:49:cc:55:98:
96:01:58:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:11 2025 by rpki-client