Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38332e302f32342d3234203d3e203230343733.roa
File: 34352e31322e38332e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: enVOTz0qK6UvPgU06Zi8oxFUy7um09yumYBf2gS1jR4=
Subject key identifier: A1:F9:12:84:6E:B0:5B:B9:8D:26:C0:A7:FE:2F:D6:EA:38:57:43:E7
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 5E1B0521C686176483F3C48015597D221E8E9C04
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38332e302f32342d3234203d3e203230343733.roa
Signing time: Thu 06 Mar 2025 06:24:06 +0000
ROA not before: Thu 06 Mar 2025 06:19:06 +0000
ROA not after: Thu 05 Mar 2026 06:24:06 +0000
asID: 20473
IP address blocks: 45.12.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:1b:05:21:c6:86:17:64:83:f3:c4:80:15:59:7d:22:1e:8e:9c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Mar 6 06:19:06 2025 GMT
Not After : Mar 5 06:24:06 2026 GMT
Subject: CN=A1F912846EB05BB98D26C0A7FE2FD6EA385743E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:04:98:72:0f:d0:b1:a3:8a:a2:88:c8:69:
5e:f7:52:e0:15:5d:45:f9:25:8f:e8:b4:4a:ec:43:
dd:3d:29:d4:61:97:94:3d:37:66:9c:a6:6d:09:3f:
1e:6b:ab:2a:c3:00:aa:6e:be:2e:ef:49:ec:ab:c1:
a6:23:34:22:f4:ac:62:e3:6d:fd:0d:4d:44:e3:47:
e2:c8:d1:08:aa:7d:db:a9:a3:8f:9d:97:e4:bb:14:
45:a3:ec:89:f7:74:e5:d9:a6:fd:0d:f5:1c:65:f1:
1e:30:2f:78:4f:c1:4a:3f:b0:64:48:48:7b:3a:b0:
a0:0f:cf:e2:6c:ba:eb:cc:67:5f:e2:4d:13:c2:22:
1d:c7:dc:87:3a:4d:ae:25:98:b5:59:d0:d8:43:ef:
61:a8:1e:09:d6:3c:6f:e5:17:4e:d9:18:be:2e:23:
1c:7e:90:73:e4:be:77:95:4f:05:c9:34:61:fd:12:
fd:4d:1b:91:ac:ba:c6:4e:b0:90:be:b9:88:08:92:
45:32:a4:f9:12:68:e6:61:ba:3e:f2:14:09:4c:34:
14:ec:e5:f9:86:00:d5:ff:88:80:a0:e0:77:b1:e3:
9c:1a:72:14:3c:35:52:1f:d4:05:f8:ea:56:33:e3:
2c:08:f6:f5:ba:84:cb:97:5e:cd:e4:5a:72:28:ef:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F9:12:84:6E:B0:5B:B9:8D:26:C0:A7:FE:2F:D6:EA:38:57:43:E7
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38332e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.83.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f3:d4:66:c8:3f:27:2a:96:6f:d0:b3:12:e6:f9:be:02:f8:
a4:77:d2:2c:ff:b4:2d:60:ae:94:bc:2c:50:d5:c4:eb:f8:e4:
ca:31:f4:6c:8c:86:88:ad:d6:b6:78:38:dd:4f:46:d7:a0:5a:
87:e4:d2:b5:62:aa:6a:4f:c2:8a:88:bd:ff:6c:69:32:96:71:
85:b8:eb:a6:24:8b:78:08:79:9f:e8:af:fd:7e:1a:c1:60:3c:
3e:9d:45:5c:bc:a6:a1:00:87:de:ba:ff:8e:63:7e:b5:d7:f0:
46:36:1b:0e:d9:09:ee:66:24:49:0e:aa:f7:4a:39:b2:1b:b5:
77:2a:1f:c9:f2:a7:4f:7a:3a:bf:ec:b3:c9:85:cf:d3:54:43:
13:c5:aa:12:a2:f9:8e:f4:5a:78:9c:d3:3e:f7:d1:5d:7a:49:
50:94:40:16:8f:82:57:88:7a:65:7e:1b:05:a8:9f:1b:9d:9e:
28:5e:b1:8d:95:6d:f3:3d:60:1b:fd:fa:d0:c8:42:3f:31:03:
72:20:23:9a:60:7c:eb:b3:d8:9c:e1:50:b4:32:e1:fb:a3:4e:
db:2a:f2:2e:12:d3:f1:24:fa:8b:cd:8d:80:a4:c3:2e:d4:36:
ba:3f:a6:ac:22:ab:3b:19:cc:91:31:b0:70:7a:98:bf:e5:f8:
0b:28:c3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:34:14 2025 by rpki-client