Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38332e302f32342d3234203d3e203136323736.roa
File: 34352e31322e38332e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: rf1GNanK6UP63ciIO9E/ML+XtTgZf08EErFYKFbHIHU=
Subject key identifier: BC:B3:8E:41:2E:77:F8:6F:99:4F:F3:9E:E6:34:0B:02:66:37:C2:FC
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 3FBC06FA1A94363EACD09D2D4DD088840687154A
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38332e302f32342d3234203d3e203136323736.roa
Signing time: Tue 18 Mar 2025 04:14:37 +0000
ROA not before: Tue 18 Mar 2025 04:09:37 +0000
ROA not after: Tue 17 Mar 2026 04:14:37 +0000
asID: 16276
IP address blocks: 45.12.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:bc:06:fa:1a:94:36:3e:ac:d0:9d:2d:4d:d0:88:84:06:87:15:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Mar 18 04:09:37 2025 GMT
Not After : Mar 17 04:14:37 2026 GMT
Subject: CN=BCB38E412E77F86F994FF39EE6340B026637C2FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:63:0e:69:db:4f:ba:de:20:90:d5:0f:c4:
c1:a8:6f:37:25:b8:e4:19:3d:8d:54:e1:1e:50:89:
64:d0:ac:f3:e3:c0:ce:2a:e3:94:1d:29:a0:5c:07:
85:63:67:41:78:02:bb:7d:2e:46:9e:16:ef:7e:9a:
f4:06:ad:e0:13:d7:39:e0:12:3d:ca:48:ec:bd:e9:
b3:bd:e9:8d:e6:4e:8a:db:23:29:ba:31:f9:42:43:
6c:66:d4:56:ee:d3:b8:48:7c:10:c3:1d:3c:1f:9b:
36:ef:bc:b3:e2:4c:ae:69:45:77:83:5f:0c:e4:2e:
e4:34:31:f0:67:a6:2f:72:6f:95:0c:23:2d:09:0f:
f1:bc:16:02:97:d1:bd:cb:6b:86:61:f1:e9:39:33:
d1:f7:a2:15:6b:f2:f6:f5:2f:b5:13:a5:dd:79:3c:
b1:8f:16:1b:e5:cd:7f:e2:23:15:64:18:e1:c5:f4:
1a:b3:8d:b6:10:08:e4:7d:07:7e:be:3f:c9:06:ac:
30:22:1d:08:14:7a:43:c6:12:e9:21:c2:73:2a:84:
6c:33:7a:2d:ba:f0:cd:0d:c0:f7:70:9f:16:44:86:
7f:3a:db:d6:54:fa:1e:87:5b:59:bd:bd:2b:63:75:
1e:30:22:0a:a1:37:16:e0:4c:29:0e:f1:16:1d:fc:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B3:8E:41:2E:77:F8:6F:99:4F:F3:9E:E6:34:0B:02:66:37:C2:FC
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38332e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.83.0/24
Signature Algorithm: sha256WithRSAEncryption
14:4c:f1:0f:4c:b9:04:1e:9d:f0:a9:af:7f:cf:24:f4:c8:a5:
82:94:68:1a:c5:0c:86:20:0c:41:22:4f:52:13:e5:9a:d9:1a:
16:19:d3:77:32:ea:00:95:74:08:c6:33:13:c2:84:7b:7d:7f:
f1:a5:7c:c6:31:52:5d:4d:0f:ab:04:34:31:27:23:1e:f8:b2:
c9:18:d2:1a:fb:e6:c2:c0:77:b1:e1:91:03:48:65:8b:2a:4c:
64:76:a9:f8:e4:9e:bf:13:e6:9b:66:85:15:cc:8d:00:4c:97:
af:b6:6d:05:b0:64:04:ec:fa:99:de:3f:a4:5c:17:6e:f6:d9:
63:c6:4f:ac:ca:d3:02:cf:6b:51:68:e5:17:00:f5:b7:94:8b:
cc:34:eb:56:26:4a:34:f0:b3:f3:fd:fd:c9:a5:f5:2a:5d:eb:
b0:f8:3f:09:b6:72:f2:75:f3:b0:74:a7:5a:68:74:7e:0e:41:
e8:9a:54:67:46:14:bf:df:7c:56:31:1b:71:aa:93:c3:2a:e5:
fd:96:2e:59:c7:5d:6d:3e:d1:b9:d6:b0:f0:36:e1:ac:cf:8d:
22:b3:08:1f:17:5c:87:fe:56:2c:c1:b7:16:61:a8:10:c0:a8:
15:da:9b:0d:79:e0:de:6e:89:87:73:71:c1:8f:69:29:23:8c:
78:32:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:41:36 2025 by rpki-client