Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/11/34352e38302e3137342e302f32332d3234203d3e203230343733.roa
File: 34352e38302e3137342e302f32332d3234203d3e203230343733.roa (raw, json)
Hash identifier: Tj/XWRruKwZ/QP3rFOesVOQz//CgnqDl9rp8W0o5CsU=
Subject key identifier: 57:C3:8D:B2:EC:01:CC:87:59:1F:25:E5:F3:60:BF:2E:A0:9E:97:4F
Certificate issuer: /CN=7b2e27402d917baf52b4a3c57b75a4f77dd23562
Certificate serial: 6C0A13145C8A0561039743B9C68276BD75005C59
Authority key identifier: 7B:2E:27:40:2D:91:7B:AF:52:B4:A3:C5:7B:75:A4:F7:7D:D2:35:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ey4nQC2Re69StKPFe3Wk933SNWI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/11/34352e38302e3137342e302f32332d3234203d3e203230343733.roa
Signing time: Thu 28 Dec 2023 21:36:25 +0000
ROA not before: Thu 28 Dec 2023 21:31:25 +0000
ROA not after: Thu 26 Dec 2024 21:36:25 +0000
asID: 20473
IP address blocks: 45.80.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:0a:13:14:5c:8a:05:61:03:97:43:b9:c6:82:76:bd:75:00:5c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2e27402d917baf52b4a3c57b75a4f77dd23562
Validity
Not Before: Dec 28 21:31:25 2023 GMT
Not After : Dec 26 21:36:25 2024 GMT
Subject: CN=57C38DB2EC01CC87591F25E5F360BF2EA09E974F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:79:04:86:5d:9c:2b:5a:d2:09:0a:9c:ca:60:
89:f8:2f:68:bd:57:4c:84:26:35:10:2c:56:d2:a6:
39:b5:ff:3d:30:79:e5:27:fa:fb:e5:c3:14:61:fe:
c3:b3:36:7d:51:c4:81:bf:ee:0d:b1:72:44:9e:ce:
f6:fc:26:78:74:8c:9f:29:90:70:3a:91:49:50:ca:
d6:09:3a:16:d3:a2:c5:6b:bb:89:49:2e:d6:95:84:
51:8e:37:7b:91:c0:53:79:f8:4d:ff:b2:46:25:57:
a0:35:66:52:82:9e:f1:3c:49:77:ed:04:0f:99:79:
0a:e1:6a:1b:11:be:46:db:57:4a:0e:eb:88:d6:b4:
30:0f:41:14:d5:37:06:8c:ea:0f:0d:2c:a3:7f:80:
9b:07:ed:13:f1:ea:2c:70:c4:8c:f2:25:d4:53:0b:
09:6f:b9:23:5f:0e:82:88:a6:f7:e1:67:d0:52:3e:
22:57:47:07:d3:fe:89:ca:f8:8c:e4:eb:7b:02:b6:
b4:1c:e8:df:7e:00:49:da:a9:e9:a5:e4:2a:30:46:
aa:f3:0c:78:4d:21:e5:0c:85:c3:34:c0:e7:fa:a5:
97:3b:34:66:dc:8e:48:fb:dd:58:f0:ad:d8:bb:8a:
c7:c0:0b:d7:5d:bb:0a:a5:71:1d:bf:ef:7b:62:91:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C3:8D:B2:EC:01:CC:87:59:1F:25:E5:F3:60:BF:2E:A0:9E:97:4F
X509v3 Authority Key Identifier:
keyid:7B:2E:27:40:2D:91:7B:AF:52:B4:A3:C5:7B:75:A4:F7:7D:D2:35:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/11/7B2E27402D917BAF52B4A3C57B75A4F77DD23562.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ey4nQC2Re69StKPFe3Wk933SNWI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/11/34352e38302e3137342e302f32332d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.174.0/23
Signature Algorithm: sha256WithRSAEncryption
18:45:4b:f6:1d:cf:2d:69:c8:61:66:e5:39:d9:bf:b2:1c:0b:
fe:1b:f5:b9:e1:f7:c2:77:33:a8:c5:c0:13:44:ef:45:25:bf:
93:79:ce:52:57:9e:f9:b7:9f:f3:26:5f:3f:42:62:e8:3c:b9:
1f:73:11:47:c3:13:25:e7:28:76:82:bd:62:af:ad:7d:b5:6e:
bc:e5:77:93:15:67:23:89:f8:83:28:e8:5e:39:15:64:c3:2e:
83:36:8b:a5:0f:f3:ee:94:c9:e3:9c:12:62:de:b6:24:43:c5:
82:73:51:ce:0d:31:24:7c:99:93:83:ad:9f:02:a6:ac:02:f5:
a2:2e:07:4f:88:80:69:02:48:3e:d9:9c:2d:79:1d:84:3e:da:
34:64:fe:eb:99:f2:1a:42:89:d4:22:25:91:02:31:39:f8:53:
70:a2:7d:f5:b8:76:c3:df:ef:e9:34:5a:74:2d:ff:bc:70:37:
ed:b5:2b:04:c7:18:96:fe:00:31:84:56:6a:01:a9:4a:cd:55:
a6:14:0f:14:07:d1:c2:ff:aa:dd:53:80:45:1d:f2:70:9f:ce:
8a:50:d8:0e:51:37:d0:02:b5:76:17:a1:9b:91:2b:b1:4c:a0:
1a:0a:08:0f:99:3f:8f:87:91:b1:72:c6:5e:7b:ce:44:98:7a:
fb:1a:3c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:53:26 2025 by rpki-client