Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39392e302f32342d3234203d3e20323134333832.roa
File: 34352e3133372e39392e302f32342d3234203d3e20323134333832.roa (raw, json)
Hash identifier: 1nLqathtikytpn4TPJ/kAAqskQe3ShZzTaQYm6FPUkQ=
Subject key identifier: 26:3A:F0:DA:62:0B:68:C1:00:79:B0:88:87:A6:5D:99:89:33:1E:28
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 15FDF3624ACA0C6B1D76F18103E16C4E247636D5
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39392e302f32342d3234203d3e20323134333832.roa
Signing time: Fri 03 Jan 2025 19:10:02 +0000
ROA not before: Fri 03 Jan 2025 19:05:02 +0000
ROA not after: Fri 02 Jan 2026 19:10:02 +0000
asID: 214382
IP address blocks: 45.137.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:fd:f3:62:4a:ca:0c:6b:1d:76:f1:81:03:e1:6c:4e:24:76:36:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jan 3 19:05:02 2025 GMT
Not After : Jan 2 19:10:02 2026 GMT
Subject: CN=263AF0DA620B68C10079B08887A65D9989331E28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:00:4e:cc:d9:ca:bb:04:60:b0:02:cb:99:
3f:f1:88:08:4a:20:06:b2:f9:72:fa:9d:4f:c8:cb:
9a:23:0f:2f:d0:9a:1b:27:68:49:ff:a8:3f:9d:e6:
f4:ea:17:f0:a6:53:ea:4c:0b:81:79:d9:6f:9c:0d:
3a:7a:02:f4:57:54:b6:1c:52:ff:4e:5c:3d:6e:df:
b1:38:6c:06:98:11:6a:fd:55:c2:c6:52:06:fb:0c:
da:2c:47:1e:63:77:62:1c:61:73:9d:62:68:54:5b:
79:0e:71:0d:31:5d:7d:c8:17:a7:16:f6:7d:53:e2:
98:62:e0:f9:b3:ef:f3:f8:d0:e2:a5:de:7d:30:ac:
a2:4a:e6:5a:86:a2:aa:38:0a:b8:e7:b5:f6:ad:38:
d6:08:ab:1a:50:83:96:2b:6a:bb:a1:fd:1c:fb:27:
83:f1:7d:c1:5c:92:2f:c2:66:17:37:53:f0:45:61:
9c:5a:44:d9:70:36:e5:f3:18:df:ca:70:97:fc:e6:
1f:a7:49:fe:af:7f:69:93:52:ff:af:a5:41:f9:ef:
4c:38:c9:9c:e0:70:6f:d0:5c:71:ba:97:49:1e:da:
14:72:67:bd:c5:19:68:3e:4d:a6:07:40:bd:da:d4:
5a:86:b6:ba:13:11:a4:74:9c:e7:45:ef:a2:1d:7b:
a8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3A:F0:DA:62:0B:68:C1:00:79:B0:88:87:A6:5D:99:89:33:1E:28
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39392e302f32342d3234203d3e20323134333832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.99.0/24
Signature Algorithm: sha256WithRSAEncryption
27:79:90:b8:d1:31:4d:92:c3:57:58:cc:bd:b0:f9:25:e2:4b:
d7:d1:34:d8:d9:16:3f:b9:27:77:cd:fb:34:d1:ae:bd:05:0e:
5b:3c:c3:a9:f8:9e:3c:0e:8d:ca:cd:19:ef:c7:ed:3c:f5:4c:
9f:2d:20:74:88:df:91:07:77:ff:71:9f:b2:31:c7:9e:bc:1b:
45:c8:b0:92:83:8f:86:18:1f:6e:9a:73:55:e2:b6:26:36:72:
19:a0:b0:6c:a8:c4:77:aa:01:7e:bc:85:ac:5e:70:cf:1f:91:
5a:c6:10:cf:70:9c:e4:09:55:30:ab:80:03:c1:18:01:ac:fc:
4a:53:dd:1f:3d:c0:f1:3b:1a:25:29:33:48:25:4f:a5:15:5c:
b2:b7:18:69:24:94:41:7d:ef:a8:20:1e:31:2a:d5:15:5d:a1:
98:3e:04:a3:3c:a9:08:1a:00:0a:a8:fd:b3:ac:43:12:5f:ca:
0f:6a:fd:9f:dd:f4:16:04:1c:27:36:3a:47:77:72:bf:57:04:
3d:e6:f4:eb:0b:26:4b:db:39:d1:fa:70:98:a5:7c:ec:6f:e6:
83:d6:79:55:47:29:69:48:e4:c5:14:a0:0c:d2:70:42:d9:ca:
71:1d:83:08:11:d3:4e:be:6d:ae:78:b3:e1:9f:6f:9b:ba:78:
bc:7d:56:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:08 2025 by rpki-client