Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39302e3130382e302f32322d3234203d3e203437353833.roa
File: 34352e39302e3130382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: Mk9SufrrZytbhVbRha/mm3DZj0TgEuOQRMHiyEFUgyw=
Subject key identifier: 53:4A:D0:4E:1C:47:7C:84:E1:DF:02:8E:BF:17:45:23:4E:C2:D9:F4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3F9CD5440FD886EAC7DCC321DDCE0F188A78F257
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39302e3130382e302f32322d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:45:16 +0000
ROA not before: Mon 27 Jan 2025 09:40:16 +0000
ROA not after: Mon 26 Jan 2026 09:45:16 +0000
asID: 47583
IP address blocks: 45.90.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:9c:d5:44:0f:d8:86:ea:c7:dc:c3:21:dd:ce:0f:18:8a:78:f2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:16 2025 GMT
Not After : Jan 26 09:45:16 2026 GMT
Subject: CN=534AD04E1C477C84E1DF028EBF1745234EC2D9F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:95:dc:db:b1:e8:0c:16:ff:f8:04:04:e7:
76:3a:3b:d3:d4:d8:52:ae:df:9e:7c:7d:ef:af:aa:
69:fd:03:3d:32:01:d3:12:c7:c0:34:03:4a:92:2e:
06:21:ba:d2:79:8f:59:eb:cb:4b:22:a3:2d:65:e8:
36:f9:b4:60:c0:42:ee:ed:42:a4:0a:71:57:9f:d5:
fb:5b:18:bc:b2:66:20:8b:24:90:27:84:e2:52:6c:
4d:1e:0f:89:26:75:df:35:4a:cd:12:d2:f6:26:8c:
c5:e6:44:b8:ca:47:c9:99:44:06:bf:f8:d4:96:09:
55:fc:00:3c:db:61:49:ac:69:88:ce:21:d8:b2:e5:
99:d2:8d:2f:27:47:3b:6e:f6:c2:b2:ee:93:29:f0:
3b:df:6c:1b:ee:f2:88:45:20:21:6f:29:03:8c:1c:
4e:a5:60:bc:99:05:f5:09:5f:ba:9b:9d:fa:43:0f:
e7:aa:11:c2:71:cf:38:ed:f5:12:d1:1e:7f:91:d0:
ef:36:8e:65:d5:f9:25:ba:e1:8f:a0:d5:15:c6:09:
66:91:77:18:d6:45:af:37:33:3e:8e:6e:9b:d2:08:
22:25:62:90:94:54:af:a7:1e:b3:5b:69:49:44:2a:
47:13:3c:5f:f6:50:97:ab:ba:0f:bb:cd:17:23:31:
81:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4A:D0:4E:1C:47:7C:84:E1:DF:02:8E:BF:17:45:23:4E:C2:D9:F4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39302e3130382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.108.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:a7:af:7d:39:15:83:34:63:7a:05:7e:74:19:01:02:b2:01:
f7:95:47:0a:60:22:c1:1b:f1:7b:e6:b8:e6:b3:1b:49:0d:75:
86:3b:48:59:be:be:a6:6e:4e:e0:ca:d6:61:60:63:66:20:cc:
8d:f3:0c:29:1f:ba:18:ba:f6:ea:5a:30:a0:19:f1:71:cc:99:
dc:2f:6d:23:dc:4d:b7:c7:9a:ca:dc:89:93:34:ca:18:8c:23:
af:b1:de:0d:22:98:b4:d9:9c:2f:97:25:45:dd:83:2a:86:00:
76:01:e2:c9:1d:a7:25:91:66:a1:3b:62:31:d5:d8:20:1c:dc:
87:81:89:bf:47:c5:d3:6c:f1:59:8b:e3:4b:9d:ea:77:69:f0:
0f:d2:00:c6:3f:c0:eb:3f:5a:98:35:1f:70:d1:73:6c:a7:8b:
a9:db:f1:c9:a9:b8:cc:b4:12:f2:fb:ab:07:17:b1:db:ab:68:
5a:58:d3:df:a4:88:42:55:03:f9:d6:65:b0:8c:c0:3f:d2:f3:
60:f9:c2:67:31:d9:99:1c:59:be:11:69:e0:04:56:5c:ee:11:
2c:65:1a:06:44:02:67:f8:bc:6d:e2:54:8b:ef:d9:8f:2e:2d:
2c:48:7f:a0:6e:8d:8f:63:dc:bc:12:95:72:de:04:65:93:6c:
65:44:f7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:07 2025 by rpki-client