Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39392e302f32342d3234203d3e20383334.roa
File: 34352e3133372e39392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: cxK7yg25cEvZm0Egxyv1B56qCkj7y9kdgrGLeKn1FLQ=
Subject key identifier: B1:02:FC:EA:34:78:E5:8D:8A:9A:A4:0A:62:68:7E:22:18:02:A2:24
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 3C3C1E79D01C5B5EA9F1DE4D4520481EB227C06F
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39392e302f32342d3234203d3e20383334.roa
Signing time: Sat 04 Jan 2025 11:10:07 +0000
ROA not before: Sat 04 Jan 2025 11:05:07 +0000
ROA not after: Sat 03 Jan 2026 11:10:07 +0000
asID: 834
IP address blocks: 45.137.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:3c:1e:79:d0:1c:5b:5e:a9:f1:de:4d:45:20:48:1e:b2:27:c0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jan 4 11:05:07 2025 GMT
Not After : Jan 3 11:10:07 2026 GMT
Subject: CN=B102FCEA3478E58D8A9AA40A62687E221802A224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:bc:c0:6c:41:f4:fc:78:72:7a:e3:d5:e6:
2f:1c:34:c6:59:f0:c5:14:4d:e6:27:4c:eb:e0:f2:
dd:95:ed:d3:02:2b:0a:13:22:96:24:10:de:d5:e6:
14:a5:e8:9f:26:4f:3f:15:97:fc:09:df:98:96:bd:
0b:c3:38:62:1f:96:ba:d2:7b:1a:87:6f:88:56:bb:
10:f3:46:af:e7:54:60:24:60:1e:e7:46:85:9f:12:
80:df:d5:94:4a:ed:87:a7:4b:08:0a:e9:eb:a1:2f:
7e:69:2e:b7:28:41:78:77:4b:3c:02:a1:03:81:72:
b8:0c:d9:ed:66:8e:43:97:4b:c3:e0:f6:84:f5:42:
e5:4a:01:93:39:f9:0d:0d:7a:6f:0a:74:2d:46:12:
03:41:0f:5c:f4:58:31:eb:62:60:39:b7:97:03:87:
ac:68:25:54:13:c1:fd:72:f7:47:d5:8e:7f:d3:b1:
64:57:42:01:5c:a5:ba:52:52:7b:37:b9:67:aa:e1:
6d:a1:b9:83:52:62:16:f7:97:e4:b4:e5:36:58:a1:
f6:40:04:e2:f4:0d:64:d7:b6:a7:8d:ff:40:0d:b0:
66:5c:d1:3d:ff:19:82:27:92:cc:9b:8f:d2:a7:92:
f2:ea:4b:0a:0d:23:fb:20:4c:c6:92:fe:6e:46:db:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:02:FC:EA:34:78:E5:8D:8A:9A:A4:0A:62:68:7E:22:18:02:A2:24
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.99.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e6:29:48:61:da:c3:3e:6d:51:90:6a:09:02:b3:81:d0:bb:
03:64:9b:19:e5:7a:90:47:58:1e:49:b6:cc:2c:d5:28:5b:01:
57:5c:c3:bc:b6:6d:63:35:b0:a2:82:5f:07:6f:54:e7:8c:7c:
d5:5f:7c:4a:99:60:0b:38:06:93:bd:da:84:c8:fe:1a:36:ab:
e2:51:1e:d2:3f:c8:a6:e7:3b:49:26:b4:24:cc:67:f5:3b:d9:
e0:b1:63:0f:49:7b:81:10:f4:e2:7d:5d:4e:db:66:6b:95:6c:
3b:35:29:07:15:9b:19:c6:03:85:96:91:28:73:41:36:66:10:
92:12:c2:d2:c5:d3:ef:20:57:a7:30:e4:92:0a:5e:65:7d:bf:
99:18:76:c4:25:52:28:c2:26:16:82:c2:eb:46:41:ac:bd:af:
bf:f6:c5:97:96:71:38:60:b7:2f:ba:50:1c:b9:41:03:45:c0:
a1:36:a8:03:74:a3:f4:bf:73:38:b2:f3:43:44:f9:a3:a8:7d:
64:eb:d7:c3:da:e3:a6:59:99:c4:27:36:11:28:c9:8f:0a:fb:
20:46:35:8f:cd:6c:e9:33:a5:64:f6:b9:fa:e5:c0:e3:12:7c:
d2:11:33:ca:ba:f0:06:d0:fc:fe:33:e7:a0:2c:e4:57:3b:5f:
34:31:17:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:43:44 2025 by rpki-client