Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34362e302f32342d3234203d3e203437353833.roa
File: 34352e3135322e34362e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: Us8ZYNMFJZHmAMryuEvlTaM5rYS0QYoQW8I1m18AeB0=
Subject key identifier: 65:C3:36:2A:F7:6E:8B:94:15:2E:6E:5D:2D:88:65:6D:25:DE:43:14
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 19CC9BF0EEE1227C2CAD227EB92EF4DF8D1EC469
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34362e302f32342d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:44:57 +0000
ROA not before: Mon 27 Jan 2025 09:39:57 +0000
ROA not after: Mon 26 Jan 2026 09:44:57 +0000
asID: 47583
IP address blocks: 45.152.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:cc:9b:f0:ee:e1:22:7c:2c:ad:22:7e:b9:2e:f4:df:8d:1e:c4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:39:57 2025 GMT
Not After : Jan 26 09:44:57 2026 GMT
Subject: CN=65C3362AF76E8B94152E6E5D2D88656D25DE4314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:23:a8:d6:cd:bd:33:44:91:d3:93:05:13:
99:39:e9:91:9d:2d:c4:29:f7:85:be:c5:8f:e4:23:
40:14:88:51:93:44:31:9b:ff:13:fe:21:42:3b:fc:
a7:24:12:45:1e:cf:bd:3a:63:66:5a:44:ad:86:6c:
9b:36:90:41:4b:17:f7:18:76:30:32:71:54:04:e7:
ed:0b:d6:5f:9b:74:96:4b:79:1f:eb:2c:49:2f:f0:
eb:ba:bb:4d:c4:97:67:dd:04:6a:b2:fd:db:1e:7f:
ed:23:f3:81:9a:e4:7e:d4:50:80:fa:e1:bb:60:16:
d6:3c:ac:d7:e3:e4:a4:8e:58:d7:32:c4:87:d1:a5:
44:b8:a4:d4:ea:90:4f:79:33:cc:90:99:fc:e1:1f:
0c:4b:7c:98:fd:b1:7a:f2:3b:f2:46:37:4d:ed:4e:
e0:79:5a:83:1b:91:a8:cb:73:4f:bf:d4:a0:6c:f4:
40:f9:e5:57:c7:2f:dc:73:a7:99:28:35:89:f1:79:
b1:47:7f:bd:1f:1d:53:72:3a:72:c4:3d:21:16:0a:
1c:df:74:6b:f7:05:61:47:5c:9c:d4:5a:b5:02:88:
20:56:c5:b9:99:d0:d8:28:b6:cd:a9:d3:70:07:7b:
7d:5b:80:57:39:d9:e1:16:d4:c8:a9:07:5e:75:b6:
74:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C3:36:2A:F7:6E:8B:94:15:2E:6E:5D:2D:88:65:6D:25:DE:43:14
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34362e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.46.0/24
Signature Algorithm: sha256WithRSAEncryption
85:80:88:a0:44:35:3e:71:86:da:ec:d3:0d:74:9c:cb:7d:2e:
93:82:29:ec:13:dd:45:5d:24:2d:ef:30:e5:60:85:4c:cb:66:
f4:95:04:30:47:b9:ab:9f:ce:d3:78:4e:6e:86:a8:26:cc:84:
6f:1f:cb:69:9f:ab:53:49:a4:e7:fa:21:13:ac:90:92:14:ff:
a8:25:75:33:a6:a2:d9:02:af:68:ce:96:4c:36:9e:44:a0:cd:
85:e9:99:34:5e:36:91:8a:49:49:67:71:ca:15:d6:03:27:9b:
ac:b2:c4:99:5b:73:77:1f:7b:65:6e:f5:27:ab:bb:e6:63:99:
57:6d:3a:ba:a9:be:12:11:83:1a:a1:73:39:c3:91:28:d3:af:
b2:59:00:81:bc:a4:77:40:20:8b:1c:da:55:90:fd:7d:b5:6f:
20:74:a9:15:13:be:92:82:db:57:84:27:1c:fa:1c:21:25:e5:
98:4e:bc:ac:fa:fb:9c:8a:6a:98:a3:6d:9a:a5:b2:d1:5b:c5:
7f:6f:68:ad:37:1f:fe:71:4a:99:43:79:49:b0:06:85:57:0b:
a9:d9:76:aa:8c:52:ed:15:fb:2f:56:ca:25:a1:50:9c:cd:db:
41:40:3e:86:02:1a:f4:48:a4:ea:24:83:5e:5c:c0:95:f5:90:
56:89:89:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:03:00 2025 by rpki-client