Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39332e3130302e302f32322d3234203d3e203437353833.roa
File: 34352e39332e3130302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: QPx80nGyryVYJvMj39U3nsExPvThcFPo6gY1sUTURag=
Subject key identifier: 2E:06:B0:7C:F6:0F:83:6D:0C:37:BA:5D:F3:8A:F2:10:89:50:41:3B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2BC24CB12C1836F8A8CB630844958AEAAF435B7D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39332e3130302e302f32322d3234203d3e203437353833.roa
Signing time: Mon 27 Jan 2025 09:44:56 +0000
ROA not before: Mon 27 Jan 2025 09:39:56 +0000
ROA not after: Mon 26 Jan 2026 09:44:56 +0000
asID: 47583
IP address blocks: 45.93.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c2:4c:b1:2c:18:36:f8:a8:cb:63:08:44:95:8a:ea:af:43:5b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:39:56 2025 GMT
Not After : Jan 26 09:44:56 2026 GMT
Subject: CN=2E06B07CF60F836D0C37BA5DF38AF2108950413B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:bd:b6:a3:ee:83:b2:b6:30:f2:81:a9:16:
c8:42:1f:6f:2e:c3:76:fb:03:e4:4f:b0:02:9b:bb:
71:3d:ee:53:74:ab:4c:3b:0d:20:69:11:7e:5a:4e:
d5:02:9b:c3:d1:3a:4c:e2:a7:70:d3:9d:dd:83:57:
38:50:32:a9:dc:46:85:41:4e:f2:76:e6:54:21:d6:
ea:87:b2:5d:84:23:aa:28:7a:8b:dc:18:0d:fd:4e:
57:69:72:72:f8:f2:95:34:c8:dc:dd:8c:c5:f7:a2:
d5:26:6d:25:ae:86:21:81:2d:fc:63:c0:42:39:68:
fc:2b:73:19:d3:f3:46:a1:62:29:de:be:b0:68:3c:
53:82:ac:7b:9b:27:eb:56:fa:0d:da:37:55:5f:f4:
90:c6:d3:f9:42:26:01:1e:2b:85:39:41:cb:b3:b9:
75:32:61:ab:7c:0a:88:71:bc:94:7c:2f:9c:c5:90:
b3:71:51:96:48:e8:32:b3:21:dc:09:55:95:67:98:
6c:78:ca:42:28:79:7d:8d:57:cd:85:5c:94:6e:1a:
94:1a:0d:ea:fe:eb:c9:bd:a8:55:07:f3:44:a3:43:
86:54:b3:03:c5:79:a1:ee:8f:eb:c9:30:f9:0a:7d:
0b:2d:ef:f3:65:57:7a:70:61:98:9c:bf:e1:60:76:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:06:B0:7C:F6:0F:83:6D:0C:37:BA:5D:F3:8A:F2:10:89:50:41:3B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39332e3130302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.100.0/22
Signature Algorithm: sha256WithRSAEncryption
34:0f:2d:c7:83:ba:e0:7e:71:4d:a5:fc:8a:70:ec:a7:90:81:
b0:e0:01:31:dd:4c:cc:31:da:e8:6b:74:90:6b:d6:d1:df:45:
8b:0b:c4:bd:c6:0d:91:2d:c8:2d:5d:25:a2:36:c6:25:cf:47:
8d:51:66:f3:1a:3f:5a:22:f9:05:df:8f:74:9d:67:b2:b0:19:
44:ac:3a:3c:93:3c:dd:02:be:6e:6e:32:9e:cb:9a:8d:cf:18:
75:d1:84:85:ce:44:50:62:ed:86:9c:6f:3f:27:6b:61:1b:36:
f2:8d:f9:e1:a5:b4:5b:58:4e:7a:93:1e:85:26:cc:0b:07:4b:
42:f1:61:e8:40:43:2c:a6:be:5a:77:b5:ed:94:87:bd:0e:42:
4b:dc:c8:ca:44:35:9a:13:28:80:52:c7:08:5d:87:7c:69:34:
a3:18:c3:8b:b2:2f:46:ee:67:3c:6e:df:78:59:52:2b:6e:4c:
84:ab:cd:49:8d:f0:a7:6f:76:53:12:30:77:08:82:76:a6:39:
80:56:ea:dd:3f:d4:27:28:e0:fe:7a:d6:4c:4e:8e:98:93:99:
38:94:68:54:ac:6d:7d:50:8a:ca:4e:d6:bd:1d:e2:56:3b:db:
d5:d4:6e:0a:0a:46:83:fc:4d:2d:da:ab:fd:da:c3:e9:b1:35:
36:a3:d5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:02:41 2025 by rpki-client