Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/34352e36362e36322e302f32342d3234203d3e20323131323237.roa
File: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (raw, json)
Hash identifier: imRIoujslgfIw1o5CZvn1r7w9Uct08AIqiMVjfiL8o4=
Subject key identifier: E6:9A:CC:45:82:F1:DB:44:EB:C6:D2:D8:98:0F:6F:78:E8:D3:2B:76
Certificate issuer: /CN=2e2674263aecd572673f87614919ca492c79faea
Certificate serial: 07088E22AB888AD87EAB42EB02E09060B38C1FE6
Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/34352e36362e36322e302f32342d3234203d3e20323131323237.roa
Signing time: Fri 28 Mar 2025 02:20:44 +0000
ROA not before: Fri 28 Mar 2025 02:15:44 +0000
ROA not after: Fri 27 Mar 2026 02:20:44 +0000
asID: 211227
IP address blocks: 45.66.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:08:8e:22:ab:88:8a:d8:7e:ab:42:eb:02:e0:90:60:b3:8c:1f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2674263aecd572673f87614919ca492c79faea
Validity
Not Before: Mar 28 02:15:44 2025 GMT
Not After : Mar 27 02:20:44 2026 GMT
Subject: CN=E69ACC4582F1DB44EBC6D2D8980F6F78E8D32B76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:9e:8d:5b:ef:47:db:6c:41:fb:a2:ec:68:
52:43:8b:4c:a2:73:59:8f:e4:4b:41:9d:db:41:97:
d7:32:42:93:d6:32:da:1d:ef:04:07:c9:c6:5b:c0:
9b:9d:62:26:1b:a6:de:ec:09:16:1d:27:15:6f:18:
0f:cb:c6:50:d4:e9:bd:af:fd:76:fe:77:c3:14:1c:
34:4b:59:75:54:ba:c0:ac:5f:d8:04:69:e9:c9:60:
c7:0a:d0:2e:d9:c5:31:1c:b3:ed:e5:ce:df:ce:8b:
48:6d:ab:41:82:b4:d2:91:07:58:57:a4:96:a7:93:
7d:9f:e7:b3:3b:22:c1:66:16:9d:93:f4:f3:34:13:
e0:87:cb:c0:fd:0e:b6:08:d1:61:16:9f:d9:7b:85:
ee:d4:bf:ae:8f:d9:4e:58:79:85:4a:9a:a4:a2:ee:
5a:bb:80:19:98:d6:d7:75:89:79:ba:cd:de:65:f5:
70:85:84:16:09:c7:27:fe:ca:a9:10:3e:84:88:96:
e0:ba:6b:e6:ee:f9:cd:f2:68:98:2f:84:3d:db:e0:
68:ea:67:51:57:79:f3:e4:d1:f8:42:37:2a:63:25:
a0:73:30:f1:b1:19:d4:e3:31:ee:bb:23:e0:d0:d8:
70:02:9c:d4:e5:d6:39:e7:7b:5d:d5:c1:18:b9:e6:
1e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9A:CC:45:82:F1:DB:44:EB:C6:D2:D8:98:0F:6F:78:E8:D3:2B:76
X509v3 Authority Key Identifier:
keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/34352e36362e36322e302f32342d3234203d3e20323131323237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.62.0/24
Signature Algorithm: sha256WithRSAEncryption
32:95:f4:fa:ca:c9:27:dc:bf:a9:c6:97:53:a3:cd:5e:bc:4a:
f6:db:46:90:b5:fa:32:5d:05:9a:a7:77:28:65:66:c2:df:65:
ce:c8:eb:de:87:5c:4a:43:c5:d1:53:98:bd:e2:87:47:84:48:
60:3d:ea:da:b8:0e:80:6d:9b:11:6a:68:b8:06:85:78:92:f5:
b5:8f:4d:32:bf:59:b3:ac:d8:fa:56:a8:99:48:cf:03:56:38:
5d:1c:7a:cc:78:c1:9d:72:3b:38:42:2b:a2:9b:c4:ea:3f:ff:
31:fd:92:99:90:a5:66:9e:16:a8:a2:a7:62:4b:4a:35:43:5c:
85:66:26:c1:27:1b:29:ff:1a:fe:9c:bb:7c:29:4c:8b:dd:fc:
40:a5:4d:dc:9f:f3:22:7a:44:eb:5f:6d:b0:d6:60:55:e5:ab:
f4:b0:a5:58:10:3e:98:fe:50:ed:e4:7b:eb:ea:67:17:1e:71:
b5:aa:ee:69:93:ac:d6:a7:ae:d3:b3:97:15:36:0b:25:4f:02:
fb:cd:25:3a:0b:0e:a2:e5:63:0e:cc:ec:cd:c7:bb:94:3f:f4:
37:5a:72:8d:ef:e5:e1:ee:ac:42:f0:74:a9:e4:7a:c1:f2:27:
9c:d3:04:cb:a8:34:a4:87:49:c8:67:98:15:30:0d:27:f1:fe:
6d:42:80:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:39:42 2025 by rpki-client