Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38352e3235312e302f32342d3234203d3e2030.roa
File: 34352e38352e3235312e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: 3XhbutnrhBVpVuRE+X/EAmAvgLvwOdlA3t1Mt06E4Iw=
Subject key identifier: 33:AC:AB:E7:81:D6:A5:A9:FE:12:FD:17:4E:34:A6:C3:61:F4:AE:75
Certificate issuer: /CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Certificate serial: 2801DB02B88E31C961BF32CDA10834FD8A6C19CB
Authority key identifier: DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38352e3235312e302f32342d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:27:45 +0000
ROA not before: Mon 27 Mar 2023 08:22:45 +0000
ROA not after: Mon 25 Mar 2024 08:27:45 +0000
asID: 0
IP address blocks: 45.85.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:01:db:02:b8:8e:31:c9:61:bf:32:cd:a1:08:34:fd:8a:6c:19:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a9a475e7b97e1befcfce473c72a08eb471c1a
Validity
Not Before: Mar 27 08:22:45 2023 GMT
Not After : Mar 25 08:27:45 2024 GMT
Subject: CN=33ACABE781D6A5A9FE12FD174E34A6C361F4AE75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7f:8d:ba:43:03:0c:41:14:83:76:e1:f3:61:
4b:de:4a:7b:3e:af:0c:a8:d1:92:c3:a0:22:a1:8a:
4a:cd:a8:4d:4a:ce:45:e1:38:80:f9:0e:28:3c:c5:
17:f0:03:2c:42:91:68:24:2f:b8:9d:bd:61:19:2f:
8e:e0:ef:27:49:04:ca:de:aa:1a:c0:40:ed:0e:63:
27:12:70:06:71:bc:f9:88:39:89:76:78:c3:5b:9b:
ef:77:c0:b0:37:3a:c6:3c:2e:3e:50:75:6a:60:e8:
f7:a5:16:40:1d:4a:0f:c0:eb:70:db:2f:79:9c:79:
9b:d5:63:95:b2:f7:1e:ba:66:c3:43:92:9e:04:f8:
ae:f9:cf:77:1e:f4:4c:4b:38:79:f4:99:0b:61:0c:
ed:3e:47:d3:17:e2:b7:00:73:4b:fd:3d:0c:af:76:
74:16:4d:38:8c:f2:02:40:24:b8:65:aa:2d:63:31:
fd:04:fd:76:91:95:1b:b4:5e:a7:39:a6:2c:d7:4e:
a8:8e:3a:6c:99:8e:a3:e8:c5:6f:62:a2:1e:1b:c9:
58:60:ac:f9:43:39:30:ae:ed:e1:19:02:88:0a:a1:
a2:d3:4f:af:12:c5:22:21:1a:a9:22:67:c9:f9:b4:
6d:b8:cf:e7:91:d4:b5:bd:0b:61:c3:6b:a5:ae:b5:
7d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AC:AB:E7:81:D6:A5:A9:FE:12:FD:17:4E:34:A6:C3:61:F4:AE:75
X509v3 Authority Key Identifier:
keyid:DD:2A:9A:47:5E:7B:97:E1:BE:FC:FC:E4:73:C7:2A:08:EB:47:1C:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/DD2A9A475E7B97E1BEFCFCE473C72A08EB471C1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SqaR157l-G-_Pzkc8cqCOtHHBo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/108/34352e38352e3235312e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.251.0/24
Signature Algorithm: sha256WithRSAEncryption
98:22:f2:36:b8:7f:34:47:ef:0c:d8:cc:4f:8f:de:de:cf:e4:
62:b5:0e:82:97:23:d4:eb:8b:80:13:bf:28:8d:51:30:f3:49:
92:22:bf:03:d5:ab:ac:2d:99:63:a0:b5:c9:4d:7e:ae:24:b6:
7c:3e:ac:f4:7e:4f:eb:a3:1a:65:c9:27:3c:1e:60:b9:41:8d:
19:9f:1a:39:36:58:c1:fe:61:6b:b3:6a:2f:c2:f1:02:2b:a5:
d4:f9:50:63:85:61:f3:2c:95:0e:1c:d0:50:cc:fa:89:53:70:
49:08:a7:cb:fe:9f:a1:a7:85:bc:8d:f9:ac:7c:9a:a6:97:79:
29:98:a1:af:31:83:33:34:c3:b1:c3:0b:32:df:28:60:60:87:
67:76:4e:4b:67:96:c8:8e:25:52:7b:12:c6:da:b3:be:4c:f5:
a2:25:7c:13:76:87:f5:bf:74:38:bf:44:58:b2:49:9a:a1:61:
34:f6:90:27:45:fa:a4:6f:5c:0f:31:6b:5a:55:29:ba:7c:b1:
80:04:4f:2d:14:40:23:86:55:65:f7:37:64:0f:77:48:89:a5:
85:13:42:a3:4c:a4:37:da:54:de:b4:9c:13:b6:5a:7c:e9:f9:
aa:df:40:0b:c7:45:2d:ab:39:f1:c8:07:8e:7c:7d:18:e9:a8:
d7:80:43:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:00 2025 by rpki-client