Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e342e302f32342d3234203d3e203432383331.roa
File: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier: 702sTF4T+4tyFOCkBSwyFht2LvCuhPDht8ofZOjL5aw=
Subject key identifier: 6A:3F:3A:DA:88:10:7A:C6:50:C1:BC:B0:07:BD:84:3A:15:33:FA:85
Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Certificate serial: 74833ED4FAE64C71C77BAE47EF17012783C4D37F
Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e342e302f32342d3234203d3e203432383331.roa
Signing time: Tue 11 Mar 2025 00:57:18 +0000
ROA not before: Tue 11 Mar 2025 00:52:18 +0000
ROA not after: Tue 10 Mar 2026 00:57:18 +0000
asID: 42831
IP address blocks: 45.150.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:83:3e:d4:fa:e6:4c:71:c7:7b:ae:47:ef:17:01:27:83:c4:d3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Validity
Not Before: Mar 11 00:52:18 2025 GMT
Not After : Mar 10 00:57:18 2026 GMT
Subject: CN=6A3F3ADA88107AC650C1BCB007BD843A1533FA85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:ca:ff:e9:53:42:2b:d0:13:9c:9f:50:f3:
65:1e:b2:c3:e7:e6:73:b6:cb:dc:12:53:cf:a7:60:
5f:7c:db:f8:e0:4d:cf:85:c3:52:f2:41:68:63:0d:
69:b0:03:52:f5:90:85:55:2a:89:ce:69:6f:cc:da:
15:42:a4:ab:fc:03:7b:a5:c5:bf:bf:4a:bf:24:4f:
03:bc:ca:a6:66:d2:16:91:b3:b2:06:0e:39:15:6a:
6a:d3:9e:56:ed:d7:dc:c7:40:45:c6:fe:01:f6:66:
33:f9:8d:0f:0f:4c:1b:3d:1c:03:41:f7:e4:25:eb:
3a:ae:06:8e:63:7a:30:59:65:ef:a5:25:82:f6:cb:
aa:b9:84:3e:c0:c4:5b:21:37:e1:86:8e:82:ef:6b:
95:3a:71:14:a6:44:70:7e:4b:19:1f:bf:e4:6f:7e:
5c:33:bf:98:db:74:6d:35:b1:a9:39:9a:f6:21:c5:
05:fd:e1:0d:98:76:5b:7c:f0:54:e1:1b:b2:80:8c:
37:45:63:15:36:56:70:bb:51:9b:41:43:51:d2:da:
8d:43:cc:46:7e:d6:6f:bd:4e:65:a3:fa:61:2b:e5:
d0:b1:b7:6a:af:2b:b4:8a:d9:58:50:c9:93:a9:38:
38:ae:06:95:84:31:a2:9b:fa:10:b3:b3:dd:7c:89:
06:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3F:3A:DA:88:10:7A:C6:50:C1:BC:B0:07:BD:84:3A:15:33:FA:85
X509v3 Authority Key Identifier:
keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e342e302f32342d3234203d3e203432383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:3f:42:c5:43:5b:be:1a:28:b8:2c:2b:e8:d1:20:5b:48:18:
89:f9:10:90:0a:30:53:2d:c3:dc:ff:9f:70:4d:21:d2:b6:e5:
b1:60:02:a4:65:f9:d0:64:1a:70:33:18:18:8f:3e:d3:ae:fa:
e8:90:d9:4b:05:bc:e0:cc:4d:c7:68:b4:2d:4d:3d:2d:5f:59:
4a:b9:db:2c:70:38:a7:b3:f3:73:65:14:d2:b8:61:71:67:c1:
63:b5:75:fc:00:2b:6c:fb:41:27:3d:58:a3:7a:1d:e5:f3:05:
95:10:88:ca:ce:1e:34:e2:d6:10:d7:05:ee:4d:f2:e0:77:13:
76:f7:11:0a:bb:4c:5f:a3:40:15:ee:c5:20:a9:88:0d:2b:52:
c8:d9:7f:bb:16:8f:e6:fc:58:2d:2e:89:45:a2:1f:65:31:09:
c3:6a:06:bd:b7:93:a8:ea:40:09:59:c2:4e:93:fa:16:2b:67:
a4:7d:84:f6:a8:01:58:20:37:22:14:66:4c:94:92:59:71:2f:
89:b5:99:75:94:58:1a:25:33:27:7e:db:01:b1:9e:1f:a2:cd:
2d:14:b0:12:17:f1:fb:11:a7:aa:c3:90:a6:98:d3:5d:25:55:
96:d3:ee:63:46:f0:55:13:92:e9:35:ed:77:5b:b4:23:e0:d6:
17:b6:d2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:38 2025 by rpki-client