Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136332e302f32342d3234203d3e20313336373837.roa
File: 34352e39352e3136332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 79a1O84MEGcflwrsmkJsqTfhrfGzH2/wnmh8xaZvISs=
Subject key identifier: 2F:65:0E:17:55:5D:B2:4C:CC:F4:6C:C3:72:95:46:9F:3F:C3:13:13
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 755FD5AAA4933065D305BF29A392759875275B08
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 19:44:41 +0000
ROA not before: Fri 27 Dec 2024 19:39:41 +0000
ROA not after: Fri 26 Dec 2025 19:44:41 +0000
asID: 136787
IP address blocks: 45.95.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:5f:d5:aa:a4:93:30:65:d3:05:bf:29:a3:92:75:98:75:27:5b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 27 19:39:41 2024 GMT
Not After : Dec 26 19:44:41 2025 GMT
Subject: CN=2F650E17555DB24CCCF46CC37295469F3FC31313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8d:c3:68:15:ab:1e:ea:cf:19:5c:0c:f3:df:
af:28:0d:94:e2:44:3a:b8:0e:2e:dc:e9:cb:ef:c7:
c7:ae:2c:8b:62:0c:13:06:84:0a:ce:38:e6:18:ae:
5c:a4:ca:1e:d1:1d:72:1e:39:66:0e:98:a6:52:75:
87:76:8a:cf:7d:da:2f:cf:90:21:05:0d:65:21:b6:
19:4d:54:28:56:98:99:5b:cd:3a:fe:a1:96:c5:dd:
ae:3d:28:51:f3:99:36:ad:ce:64:0b:8b:ac:82:3d:
c2:ca:4c:77:2f:e2:e5:4d:2d:1a:f6:61:33:e3:61:
2a:c2:4f:45:71:29:4b:c6:60:bd:0c:bd:f8:12:83:
aa:8f:0e:f1:e2:8d:64:ea:1d:a7:89:b8:7e:75:dd:
0b:b9:67:e4:bc:4b:47:20:1d:22:f4:87:74:37:7b:
11:d8:c6:67:55:54:de:c6:df:a5:a3:00:21:55:bd:
e5:90:a8:7a:ba:d6:b1:ad:2b:f5:c9:02:dc:da:f6:
8c:f5:cd:51:00:79:fb:bd:47:9e:70:bc:92:04:c2:
10:ca:a7:c5:a7:a7:f6:85:80:cc:9b:f7:dd:ec:a3:
65:60:35:60:db:2e:7d:d3:20:1a:c9:60:78:5c:f9:
c3:6e:ba:12:87:94:58:48:8f:31:5c:2e:8a:2a:52:
89:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:65:0E:17:55:5D:B2:4C:CC:F4:6C:C3:72:95:46:9F:3F:C3:13:13
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:1d:22:ba:c3:33:06:ad:7f:e3:39:5a:b2:0c:f9:82:60:d5:
56:a3:73:b3:77:d2:08:28:d0:db:19:23:d3:ac:bb:07:24:4d:
76:8c:c1:65:dc:67:02:e6:b9:f2:24:cc:29:af:e2:54:d3:6e:
4c:52:ae:f8:39:a8:a0:5b:e9:14:c6:83:86:08:c6:55:da:cd:
06:eb:2b:c9:e5:5e:8d:7b:0b:30:97:6b:7f:b6:7b:db:b2:0c:
9a:07:48:7b:bb:01:74:28:95:28:3c:7b:ee:91:3e:e6:3d:40:
a7:40:22:cc:bc:e1:8f:0e:48:c1:a5:29:1d:22:57:53:60:a0:
20:33:d4:85:ae:72:7a:d3:51:83:54:6b:2b:0b:bd:f6:12:46:
73:ea:f1:a6:d7:0d:bd:37:46:bf:77:db:4c:c6:32:8f:4f:78:
6c:55:f1:93:9d:21:e5:60:82:f0:ab:69:90:5d:10:64:0b:da:
73:f9:30:04:68:9c:dc:38:7b:f6:5f:e2:62:f6:91:c0:91:28:
b0:d4:d8:f8:8a:07:ff:32:31:30:d4:01:a1:28:34:0b:62:83:
d1:3d:52:69:a8:d0:0e:a2:78:35:3d:0d:b5:86:61:ba:69:9f:
3e:dd:9c:c5:1b:33:51:99:d0:35:95:25:fa:a2:41:5a:2a:b0:
74:99:39:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:44 2025 by rpki-client