Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133372e302f32342d3234203d3e20323730333533.roa
File: 34352e39312e3133372e302f32342d3234203d3e20323730333533.roa (raw, json)
Hash identifier: qO5Aa7nr2p4+Ztpk7Cq/sJhRTlx7NsQZqhE3mSYbYpo=
Subject key identifier: F9:E5:9D:8C:59:2D:50:46:83:A4:E4:39:D3:87:8B:59:C7:42:65:73
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 6EBE7D71A95AF5910D52F90AC0D3540EDE2DEF59
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133372e302f32342d3234203d3e20323730333533.roa
Signing time: Thu 28 Nov 2024 12:43:28 +0000
ROA not before: Thu 28 Nov 2024 12:38:28 +0000
ROA not after: Thu 27 Nov 2025 12:43:28 +0000
asID: 270353
IP address blocks: 45.91.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:be:7d:71:a9:5a:f5:91:0d:52:f9:0a:c0:d3:54:0e:de:2d:ef:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Nov 28 12:38:28 2024 GMT
Not After : Nov 27 12:43:28 2025 GMT
Subject: CN=F9E59D8C592D504683A4E439D3878B59C7426573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f4:9c:28:e9:01:3d:71:df:0c:49:b7:cb:29:
1f:f3:ea:04:f0:c3:2f:99:7a:53:26:35:9d:0d:03:
51:af:34:39:a2:a4:eb:a0:6a:80:17:39:ce:da:a1:
ac:ed:2e:b2:ed:fa:43:5b:2a:a7:8f:4e:58:69:1c:
3a:78:be:ba:1f:07:07:3c:df:bb:de:d6:12:b5:37:
ee:4d:fc:ed:61:03:82:75:82:7b:a6:61:d7:8f:7b:
84:9b:3a:51:33:a8:6b:02:7e:e0:84:1a:4d:30:ab:
b9:62:15:aa:97:f3:53:b6:17:c8:97:7c:ca:44:51:
58:b5:94:20:45:88:de:e2:f8:e6:45:8e:af:9c:7a:
45:76:0b:fb:4c:4b:ce:27:a9:38:0a:9e:59:df:c9:
01:da:f4:a6:d0:ca:1b:7f:26:0c:c4:38:df:d7:62:
6c:76:47:0b:a5:0c:0a:ea:7a:cd:74:56:08:73:41:
ad:69:dc:19:73:b4:45:58:34:e3:6a:e5:04:f7:e1:
19:ac:82:83:06:7d:3b:c4:67:27:98:3e:eb:79:f6:
db:33:93:aa:73:ce:91:10:9d:8b:36:d8:27:2e:5e:
2b:5b:d7:51:e2:83:ee:c4:3f:23:74:65:c7:02:b6:
4a:de:ff:00:1e:8f:4c:af:ed:67:81:3d:17:48:b7:
94:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E5:9D:8C:59:2D:50:46:83:A4:E4:39:D3:87:8B:59:C7:42:65:73
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133372e302f32342d3234203d3e20323730333533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.137.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:39:62:ff:32:fc:92:03:ba:55:bc:b3:2f:4f:9b:59:68:f9:
e3:0a:07:89:a7:72:5f:78:fb:ff:47:13:a2:e8:ec:ea:2f:cf:
5d:62:3e:ff:85:a0:00:cf:9f:e6:f7:d5:8b:69:5b:c2:1c:df:
67:a3:e2:9d:f3:50:14:bf:6a:21:a3:69:fc:ba:95:b1:a4:37:
41:90:e5:f7:37:1d:ac:75:6e:59:65:41:aa:2a:c7:cf:53:c5:
eb:7b:0f:5d:58:d7:a4:44:6e:ac:7b:a2:33:14:17:b5:b1:96:
4a:7b:71:17:8f:cc:15:1c:3d:ef:26:b4:c0:51:04:9a:eb:49:
f3:75:67:0a:24:5a:be:9f:eb:b8:d8:ec:0e:52:b7:50:56:e6:
da:c2:00:25:fc:51:71:b7:4f:79:df:52:7d:74:57:25:46:0d:
92:49:7c:d0:3f:89:eb:54:68:04:d0:af:82:54:75:fe:19:cc:
e5:f6:b4:e4:93:85:0b:9a:55:77:56:ba:28:d9:f4:71:1c:0d:
c9:ea:f4:e2:00:7b:53:02:01:6e:b4:3b:f2:bf:e9:91:d0:96:
4b:15:2a:2e:49:c5:a2:38:b3:d6:c3:5d:bc:78:83:8c:59:73:
12:42:56:c2:f8:13:fd:19:f4:b6:e7:90:5a:51:5e:bd:27:cb:
08:e9:04:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:11 2025 by rpki-client