Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39372e302f32342d3234203d3e203434383033.roa
File: 34352e3133322e39372e302f32342d3234203d3e203434383033.roa (raw, json)
Hash identifier: BPvd6mllPGeWik8FeyrmmVN7SLaH08JPqlabf7tERlc=
Subject key identifier: B9:0B:6B:63:3B:7F:2D:A9:3B:8C:17:4A:E8:79:DC:3B:9D:82:B1:5F
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 2D7681EC7731D41539E28369A1803E97B3A9DBF3
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39372e302f32342d3234203d3e203434383033.roa
Signing time: Sun 02 Feb 2025 08:53:53 +0000
ROA not before: Sun 02 Feb 2025 08:48:53 +0000
ROA not after: Sun 01 Feb 2026 08:53:53 +0000
asID: 44803
IP address blocks: 45.132.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:76:81:ec:77:31:d4:15:39:e2:83:69:a1:80:3e:97:b3:a9:db:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Feb 2 08:48:53 2025 GMT
Not After : Feb 1 08:53:53 2026 GMT
Subject: CN=B90B6B633B7F2DA93B8C174AE879DC3B9D82B15F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:25:be:34:6c:09:3b:87:fd:d7:77:e2:19:
67:d5:d7:24:57:a7:bb:bd:f1:e4:5b:98:3c:b2:7c:
df:63:06:a4:46:79:2a:5b:c6:3d:97:1d:f8:bd:c7:
86:4f:3a:c6:68:20:f7:ae:bd:c8:20:f9:8a:6e:1b:
d2:60:95:b0:27:c5:7e:b7:9f:05:cf:79:78:54:30:
0a:99:33:b1:3a:e2:58:25:2e:9a:ab:d2:fb:a4:52:
a7:04:ff:c0:a1:6f:53:2b:a2:95:bb:03:e8:bb:8d:
95:21:95:29:a0:0d:1a:4c:d6:b5:49:c3:ff:f2:84:
b3:19:92:7e:fd:fd:ba:a8:36:08:6c:02:a9:9a:71:
d1:6e:49:ef:c2:f2:80:48:af:b7:3e:42:dd:2e:fc:
fe:28:13:c8:87:9d:de:98:fd:a7:e4:7c:db:0f:f7:
2f:9d:c2:8b:c8:bc:dc:2d:4d:cb:37:5e:e9:ee:52:
89:84:b6:ac:7c:62:29:75:45:a8:fa:dc:90:e4:42:
fe:30:47:11:f8:f5:17:7f:bf:87:63:9a:07:81:a4:
43:86:4a:11:70:ab:52:c0:4e:30:f5:9d:07:0f:27:
b5:ec:a8:c6:e4:eb:5f:83:f4:52:fb:8b:16:8d:0f:
45:a0:a2:fd:e0:be:2b:9a:34:70:9a:21:56:b5:c3:
22:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0B:6B:63:3B:7F:2D:A9:3B:8C:17:4A:E8:79:DC:3B:9D:82:B1:5F
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39372e302f32342d3234203d3e203434383033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.97.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:0a:e3:a2:a1:11:60:be:31:45:2e:0a:b7:51:f6:c7:64:a2:
6f:ed:88:13:97:76:64:52:24:e1:64:f0:02:85:97:46:6d:38:
2a:1e:74:ac:73:05:a0:8e:e9:ac:03:09:f3:77:3b:93:19:5f:
e0:b7:10:32:e3:0b:a4:1b:4f:e5:d0:9c:8d:08:fc:94:65:ef:
09:9b:60:d1:37:4a:54:ff:24:8d:2b:8f:ec:53:e7:f1:54:42:
93:6d:55:f2:8e:56:29:ef:29:58:13:2c:d5:ea:01:d3:62:72:
fb:42:0a:c0:55:af:9c:c2:d2:99:12:70:28:7e:84:50:a0:a3:
5c:a9:d1:ad:af:90:ba:a1:a2:b7:68:35:f8:24:e4:bd:53:6f:
12:75:4e:36:98:46:cf:05:d3:bd:18:2f:a1:52:c9:d7:74:4a:
a1:ee:7e:cc:f2:54:43:98:08:10:61:b6:bd:e6:96:8f:27:ae:
8e:91:50:be:65:c2:38:13:b6:32:4e:22:29:99:cc:86:34:cd:
7d:d5:6e:2c:47:52:dd:69:c4:74:1c:81:07:a6:5d:37:b7:95:
5a:aa:9b:26:0f:c6:c3:0c:39:b4:50:e8:8e:7a:59:1a:c7:92:
6d:21:49:f6:38:89:b1:9a:1b:e4:c3:07:30:42:c4:dc:cc:0b:
46:57:bb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:45:35 2025 by rpki-client