Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136312e302f32342d3234203d3e20313336373837.roa
File: 34352e39352e3136312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: qm2LDwAW6Z3BY8+LSEJTZryCGFwnJGdf3EKbNlKg8pM=
Subject key identifier: 50:10:C1:39:3E:A8:F3:9F:E9:BA:D4:50:14:7B:0E:90:28:2A:61:B5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 52618631CA29E9E0DC7A02CA7006B7251A374D2F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 19:44:41 +0000
ROA not before: Fri 27 Dec 2024 19:39:41 +0000
ROA not after: Fri 26 Dec 2025 19:44:41 +0000
asID: 136787
IP address blocks: 45.95.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:61:86:31:ca:29:e9:e0:dc:7a:02:ca:70:06:b7:25:1a:37:4d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 27 19:39:41 2024 GMT
Not After : Dec 26 19:44:41 2025 GMT
Subject: CN=5010C1393EA8F39FE9BAD450147B0E90282A61B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:aa:e8:da:f0:f6:74:fa:22:0c:df:0d:c6:ab:
7d:53:8c:9d:be:8c:d6:ab:b2:c3:5c:86:69:f2:fe:
d8:7f:2a:a6:b3:b6:3e:ce:51:32:38:c3:bf:1d:61:
1a:f0:85:11:4e:c0:11:b3:60:c6:b7:c4:2e:14:58:
0b:10:f7:41:9e:de:71:54:ef:a3:dc:9c:c2:ce:a1:
1e:a8:ed:f4:2e:84:e5:a6:34:a7:19:a7:55:5b:b6:
c3:0a:86:a4:08:b2:b9:d2:7c:1c:b4:da:33:39:05:
46:25:e3:ca:c7:cf:40:29:b8:f2:26:9f:25:97:58:
e6:8d:69:f4:94:c3:6a:87:da:d9:c8:c0:26:c8:49:
6a:cc:cc:07:52:57:40:dc:ac:15:70:f3:ed:11:82:
5a:2a:1a:f2:70:4d:00:c5:f5:fe:26:f9:6c:68:56:
dc:2d:08:86:9c:28:ad:6b:64:60:57:04:ca:74:1a:
7f:e4:67:1b:5c:71:83:ba:e8:45:a7:46:71:51:4c:
81:ce:4e:8c:c5:9c:99:5f:08:9c:e9:ab:de:08:b2:
71:cd:7c:03:83:0e:92:02:1f:82:e7:2c:ea:e1:42:
91:71:15:40:be:77:29:c7:9d:c9:46:b9:64:04:a1:
85:c3:1e:e5:42:1b:0b:b6:1b:64:c7:aa:59:1b:7b:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:10:C1:39:3E:A8:F3:9F:E9:BA:D4:50:14:7B:0E:90:28:2A:61:B5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.161.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:5c:1b:1d:50:b8:d1:67:bc:4f:fb:43:64:10:f5:7b:a8:d3:
35:44:38:9f:b2:29:1e:5f:93:87:c3:ed:04:84:8b:d1:f7:46:
80:dc:54:cd:49:8e:35:d6:3a:aa:06:e5:3b:18:de:01:21:a9:
d2:7c:08:5a:29:30:95:fa:1f:b1:a5:e3:ef:6d:b4:dd:8e:44:
70:42:d7:30:82:96:49:5d:8d:36:30:c3:63:33:a5:05:fb:b3:
66:72:9f:19:d4:ec:88:c1:a1:c0:95:51:3e:44:71:5e:b3:2a:
7d:f8:c0:57:d6:79:6d:27:b3:12:ac:ae:6b:3d:3f:1b:ac:22:
35:80:bb:60:66:18:d1:df:da:07:51:f5:c8:55:b9:8a:24:a3:
ad:9f:49:e2:87:a4:f6:a5:59:a5:52:f1:ca:ab:ac:22:43:60:
84:91:ed:48:06:4f:05:b0:59:4e:21:4e:14:2f:05:33:83:1e:
8e:ae:a6:e8:be:55:51:64:2a:e8:e0:72:99:1b:fa:70:bc:8e:
ce:bc:2c:9f:aa:62:16:98:48:d4:71:f2:72:5d:18:48:45:63:
09:40:e7:55:46:05:69:8c:5c:cc:cf:70:5b:7c:35:c7:47:fe:
89:aa:d3:e4:e8:63:f5:fc:7b:1c:6f:43:a5:be:92:76:16:46:
fd:aa:f3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:04 2025 by rpki-client