Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ad69136-57cf-4b86-a4e4-95bd8f8be304/0/34352e39332e3138342e302f32332d3234203d3e2033333230.roa
File: 34352e39332e3138342e302f32332d3234203d3e2033333230.roa (raw, json)
Hash identifier: hRrO6pWbskHlq0YlfK1+k+fwncCNjKbTFtbUKIcFp3Y=
Subject key identifier: 84:53:B5:DC:1E:4E:59:4C:F5:6E:76:C1:0E:03:3A:2F:CF:F2:F3:D0
Certificate issuer: /CN=cab05cd7fe658bba47f3f17724f8318158cb9103
Certificate serial: 25BE14B2F0EB164FA365306BD4BD3B43A2845AE9
Authority key identifier: CA:B0:5C:D7:FE:65:8B:BA:47:F3:F1:77:24:F8:31:81:58:CB:91:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrBc1_5li7pH8_F3JPgxgVjLkQM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ad69136-57cf-4b86-a4e4-95bd8f8be304/0/34352e39332e3138342e302f32332d3234203d3e2033333230.roa
Signing time: Mon 03 Apr 2023 17:22:55 +0000
ROA not before: Mon 03 Apr 2023 17:17:55 +0000
ROA not after: Mon 01 Apr 2024 17:22:55 +0000
asID: 3320
IP address blocks: 45.93.184.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:be:14:b2:f0:eb:16:4f:a3:65:30:6b:d4:bd:3b:43:a2:84:5a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab05cd7fe658bba47f3f17724f8318158cb9103
Validity
Not Before: Apr 3 17:17:55 2023 GMT
Not After : Apr 1 17:22:55 2024 GMT
Subject: CN=8453B5DC1E4E594CF56E76C10E033A2FCFF2F3D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:dd:5f:cd:7f:ff:b3:1b:3b:42:63:a5:f5:
8e:8d:80:fd:ba:81:3a:e0:0b:42:75:3c:11:6c:c8:
f1:f4:d5:f1:b0:21:09:71:69:5e:76:79:7f:ad:e7:
39:6d:d4:b9:8f:40:54:1e:c1:8a:1b:bf:2c:84:f6:
13:09:ef:9f:2f:c6:dd:15:19:08:dd:29:db:e0:92:
ff:0c:3b:13:1c:c2:90:05:86:47:1f:7e:2a:a0:0b:
3f:6d:ee:59:34:53:96:4f:41:c5:f2:44:46:67:13:
1b:60:c9:d2:41:42:d5:b1:fa:31:ef:fd:6f:57:c4:
5d:48:08:15:e7:89:b9:47:77:31:c1:a9:f6:47:c5:
32:4d:91:df:1b:11:aa:6c:f6:3a:ff:9d:66:eb:60:
f9:5c:87:32:02:f7:cc:0e:59:83:e5:e9:0b:be:e1:
ff:e4:58:86:62:61:aa:ea:80:7d:e5:ff:77:43:f3:
6c:93:d2:46:75:2d:28:b4:ad:60:6a:e7:35:d2:89:
a9:25:90:c7:e8:d7:09:dc:a6:b5:07:a6:dc:2e:5e:
c2:fa:24:66:99:80:13:d1:96:c0:8f:89:ab:c4:e2:
fd:85:78:44:5a:ce:17:4c:d4:3e:3c:fd:86:1c:1d:
0c:c6:52:02:20:ff:ba:62:85:ed:c2:8a:13:33:5e:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:53:B5:DC:1E:4E:59:4C:F5:6E:76:C1:0E:03:3A:2F:CF:F2:F3:D0
X509v3 Authority Key Identifier:
keyid:CA:B0:5C:D7:FE:65:8B:BA:47:F3:F1:77:24:F8:31:81:58:CB:91:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9ad69136-57cf-4b86-a4e4-95bd8f8be304/0/CAB05CD7FE658BBA47F3F17724F8318158CB9103.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrBc1_5li7pH8_F3JPgxgVjLkQM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ad69136-57cf-4b86-a4e4-95bd8f8be304/0/34352e39332e3138342e302f32332d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.184.0/23
Signature Algorithm: sha256WithRSAEncryption
37:e5:5c:08:8d:a9:b8:b6:65:cf:11:6f:a7:d5:f8:80:87:6b:
0d:6d:fd:07:32:96:2d:16:28:bb:e0:d4:98:b5:de:c2:af:96:
c6:f1:d0:0e:20:e2:5d:ac:3f:fa:ee:e7:69:9a:db:fd:b4:21:
68:cb:70:88:70:23:07:21:33:ef:de:48:3a:6d:3d:07:b0:51:
28:8e:8a:68:49:44:0f:87:40:76:8b:d9:71:2f:20:51:69:72:
3f:f0:8d:3b:5e:93:cd:9e:d0:bd:ed:fc:c7:1c:1e:50:82:b0:
2a:96:3f:1c:db:43:c9:3c:c3:79:53:2d:86:99:5d:58:0f:dd:
a3:dc:02:27:e6:4f:9d:bc:24:88:48:ff:d9:4e:a3:4c:f0:8b:
ea:b5:75:20:55:42:36:50:1e:01:e1:db:78:01:ae:36:63:00:
ca:7c:9c:71:ae:71:f2:05:f1:05:d1:12:d0:28:d6:8a:25:91:
d4:7f:b2:e8:fa:8e:22:68:b9:48:eb:91:86:fa:82:11:42:00:
ac:13:cf:bc:50:8a:a9:8d:ea:28:d6:ae:66:05:f8:c4:d4:04:
9b:ae:8f:18:28:a7:2e:1f:68:ea:65:a4:58:1a:12:b8:c4:fa:
86:46:df:9f:99:89:b8:12:4a:ec:3b:31:35:27:14:96:ed:5a:
83:a2:54:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:49:57 2025 by rpki-client