Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137342e302f32342d3234203d3e20323134333035.roa
File: 34352e38372e3137342e302f32342d3234203d3e20323134333035.roa (raw, json)
Hash identifier: AmY3odtUFGS33DBkYuWutJtRanLxz8pL2Ewr0svth5w=
Subject key identifier: 61:A5:83:C8:D0:49:31:FE:F8:2D:EF:6E:F8:93:E1:EC:60:C9:67:5C
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 71E4DE30EC226E99F6D7476E040DE7A7674D0083
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137342e302f32342d3234203d3e20323134333035.roa
Signing time: Fri 13 Dec 2024 10:51:17 +0000
ROA not before: Fri 13 Dec 2024 10:46:17 +0000
ROA not after: Fri 12 Dec 2025 10:51:17 +0000
asID: 214305
IP address blocks: 45.87.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e4:de:30:ec:22:6e:99:f6:d7:47:6e:04:0d:e7:a7:67:4d:00:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Dec 13 10:46:17 2024 GMT
Not After : Dec 12 10:51:17 2025 GMT
Subject: CN=61A583C8D04931FEF82DEF6EF893E1EC60C9675C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1c:5d:aa:04:26:89:7e:93:b3:0c:b8:46:54:
c3:ac:9d:97:ea:ff:35:f1:52:e4:77:23:70:43:19:
7b:71:74:48:2e:bc:8a:e0:9a:76:f6:16:83:d4:04:
a6:20:dd:8a:e0:a5:c9:8a:58:1e:41:6c:7d:1b:31:
f4:f3:47:f7:20:2e:a6:0c:51:29:95:66:33:8e:d7:
5b:82:3d:29:9e:fe:73:3f:1d:9f:e4:46:14:12:c2:
8a:f9:d7:f2:62:7a:07:6a:4c:eb:4e:41:a3:d4:87:
10:d1:3c:28:b0:8d:63:76:01:0e:59:33:04:49:5e:
da:a0:1a:a2:71:26:10:18:93:e9:c2:d7:96:a6:3c:
b1:bb:ca:ad:e6:a4:7c:87:46:ad:93:53:24:1a:0c:
61:0d:37:69:37:d3:fc:c5:7f:f1:02:f6:c1:e0:bc:
de:5c:b5:0f:72:b0:3b:b9:03:eb:82:74:8d:47:a5:
1f:f4:a9:b2:3e:21:22:2d:d6:4f:5d:d6:f8:60:46:
cc:85:6e:e7:a3:77:b0:92:f5:a5:b5:3f:4b:aa:ca:
45:9b:e4:8c:b8:2d:cb:94:4c:44:f8:2f:99:5a:8f:
71:ea:48:70:6c:8b:b3:06:84:2f:c8:6c:6c:a3:e1:
99:9e:0e:84:5f:7c:c3:dc:59:89:27:29:b1:10:07:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A5:83:C8:D0:49:31:FE:F8:2D:EF:6E:F8:93:E1:EC:60:C9:67:5C
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137342e302f32342d3234203d3e20323134333035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.174.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:b3:c9:28:13:b5:20:1a:c5:67:d5:eb:a4:ba:b9:03:b9:88:
3a:60:44:72:b2:5a:ac:6b:2a:03:46:f0:13:3a:41:a7:88:68:
f8:c6:ff:2a:a7:ba:9d:ac:44:41:dd:55:d1:5e:6f:78:1a:50:
5d:e5:ab:41:df:74:6c:de:bf:7e:af:56:ea:02:d1:19:79:bd:
73:21:bd:07:26:3b:f6:88:9c:dc:5d:11:bb:8d:0b:5e:8e:e9:
67:9b:a9:c7:8b:f0:41:7c:4a:4b:d9:77:9f:22:ee:64:3b:64:
f3:6c:c3:a1:1c:d2:c0:25:fe:ad:0d:16:03:1b:ad:f5:af:a2:
e4:35:6f:1e:67:dc:ca:36:ad:f5:82:ac:7c:b8:c5:a7:af:df:
2a:e1:74:95:83:1f:a3:0d:c0:ef:14:f8:fb:ff:5f:71:de:20:
fe:a8:dc:a3:68:fe:a6:52:59:94:ed:29:bd:11:bc:8e:e8:3a:
15:07:1c:b0:cf:6c:81:f2:ae:bb:7a:f5:49:5c:4e:5b:93:98:
5e:bc:18:46:89:8c:66:c6:7b:c8:26:fa:0a:63:3f:0f:6c:f7:
e5:4e:a1:c0:2d:16:5f:70:41:1c:06:23:d3:e4:42:28:61:03:
7c:a0:18:2d:b8:91:49:c6:fe:a1:dc:d4:a2:55:c3:f1:23:1c:
98:51:35:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:32 2025 by rpki-client