Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235342e302f32342d3234203d3e20383334.roa
File: 322e35362e3235342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 9P8csaE/Gf1v1jYERlMPf/k5N49CmBTXLAmyiq9SbJQ=
Subject key identifier: 0F:8F:CB:B3:E6:49:09:EC:6F:19:CD:41:A6:A5:DC:B1:DE:D9:8F:95
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 02515CBE062114BFFA352208F38EF82068024087
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235342e302f32342d3234203d3e20383334.roa
Signing time: Thu 28 Nov 2024 07:58:30 +0000
ROA not before: Thu 28 Nov 2024 07:53:30 +0000
ROA not after: Thu 27 Nov 2025 07:58:30 +0000
asID: 834
IP address blocks: 2.56.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:51:5c:be:06:21:14:bf:fa:35:22:08:f3:8e:f8:20:68:02:40:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 28 07:53:30 2024 GMT
Not After : Nov 27 07:58:30 2025 GMT
Subject: CN=0F8FCBB3E64909EC6F19CD41A6A5DCB1DED98F95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:b3:a3:ca:e9:98:30:86:2c:05:45:5a:bf:
3e:b4:31:d1:9b:65:5a:8a:47:36:f7:84:b0:59:f3:
d8:0e:50:28:89:80:03:c9:30:1b:f2:b0:e7:ec:ad:
bf:76:ee:2e:62:47:be:b8:f0:e0:8a:c2:34:b6:77:
35:dd:00:73:92:29:91:8f:14:29:60:10:d5:ff:a4:
d6:3c:29:f3:91:40:93:87:80:fd:7d:49:87:31:4a:
38:97:08:04:72:ea:8e:60:7a:65:48:bc:60:39:fe:
9d:a7:f1:3e:6e:1a:b1:1f:27:b9:e0:62:4b:8a:d4:
2a:9a:07:55:d1:8e:df:80:51:c1:ed:68:b2:9f:dd:
10:3b:c2:71:c6:b0:93:16:d9:4d:08:c7:3d:12:c6:
89:51:db:bf:bb:0c:49:59:39:26:2f:4a:d8:a3:4c:
b1:46:64:cb:e6:44:25:f5:41:2e:12:f0:ab:f7:ac:
bb:b4:c2:b6:32:f3:66:b8:5b:f2:89:7d:c5:7c:ad:
94:56:c9:0d:8c:22:8c:54:7a:bf:a5:b9:bf:8d:59:
b4:b0:3b:01:d1:a3:22:80:e8:4e:2f:19:ca:be:5f:
b0:6e:f3:4f:60:7b:1d:27:43:26:a0:c8:ee:38:fb:
08:4f:40:34:21:5c:a9:41:ea:c0:e6:a2:80:4b:ba:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8F:CB:B3:E6:49:09:EC:6F:19:CD:41:A6:A5:DC:B1:DE:D9:8F:95
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/322e35362e3235342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.254.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c8:0b:32:12:af:60:38:65:4f:d3:2f:92:95:35:d8:fa:0d:
b5:98:73:08:17:81:b7:0f:eb:6f:f4:b9:71:72:93:80:71:ba:
45:ad:55:55:a2:d4:9b:2c:91:75:9c:41:b6:1d:d2:e9:f5:45:
58:41:c6:0a:45:31:10:1a:d1:0e:b8:63:4a:b0:e8:f6:35:46:
37:db:d4:b2:21:42:eb:a4:25:3d:5a:87:ff:f2:12:05:16:bd:
3c:d9:27:70:2e:ff:dc:af:89:cb:df:22:db:88:4e:0f:2f:2d:
2d:b4:d9:ae:c1:3f:7a:f7:3c:c8:1d:9d:a3:66:ba:91:f5:55:
dc:9d:d4:61:4d:d6:ba:46:e2:d9:e8:ba:59:ce:95:cf:21:7e:
ab:f7:44:69:ff:db:60:70:df:06:92:99:c3:36:bb:c0:c8:81:
ca:af:85:f1:1c:83:05:c8:2e:01:a3:ad:6b:60:9c:2d:87:0e:
5d:02:52:86:f8:26:a5:6d:e1:8f:fd:b1:86:e9:41:4a:75:86:
f9:c6:3f:f2:91:db:88:bf:4a:6f:b4:72:40:e6:bc:d4:38:8c:
21:c9:96:27:56:7d:41:8b:5f:67:5e:36:a4:7c:da:18:a7:1c:
f1:f3:84:e6:35:2c:62:29:b6:10:ea:2a:53:93:4f:a2:d7:b8:
35:0e:ef:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:19:10 2025 by rpki-client