Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e38302e36302e302f32322d3234203d3e20323033303631.roa
File: 34352e38302e36302e302f32322d3234203d3e20323033303631.roa (raw, json)
Hash identifier: 8MZ/fk+zjGJnzh5V1p9AT29W//GTezTE0InY+TP9j6s=
Subject key identifier: ED:CC:87:4A:33:A4:AE:96:A0:02:28:37:84:34:1B:67:75:1F:4A:19
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 2A28E82EF4A840E781533A537242041D39DC179E
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e38302e36302e302f32322d3234203d3e20323033303631.roa
Signing time: Mon 27 Jan 2025 09:44:51 +0000
ROA not before: Mon 27 Jan 2025 09:39:51 +0000
ROA not after: Mon 26 Jan 2026 09:44:51 +0000
asID: 203061
IP address blocks: 45.80.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:28:e8:2e:f4:a8:40:e7:81:53:3a:53:72:42:04:1d:39:dc:17:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jan 27 09:39:51 2025 GMT
Not After : Jan 26 09:44:51 2026 GMT
Subject: CN=EDCC874A33A4AE96A002283784341B67751F4A19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e2:fa:f1:a3:80:4d:d5:cd:d9:12:aa:bc:61:
40:53:ed:dc:30:c6:e8:4b:78:b6:42:9b:88:f3:f6:
3a:5c:90:5b:41:61:3e:f8:54:94:b7:c8:04:28:0a:
a2:9b:b1:37:d7:a3:21:95:5f:f8:f5:89:a7:8a:9c:
06:be:13:2c:fc:0a:5a:ce:f6:c2:5e:64:6b:9d:97:
6b:48:e0:fa:12:61:b7:ba:77:b7:06:cb:ed:4b:1a:
18:1f:36:76:64:de:77:d2:1c:33:ae:58:cc:03:3e:
0d:cf:15:16:4d:38:e7:ed:0c:a1:ec:a5:c4:51:d4:
91:19:1a:86:3a:1e:43:13:0b:30:85:03:f3:d4:a2:
f8:b6:90:7a:9c:e9:09:04:37:2f:2d:8c:1a:1e:80:
f7:62:da:83:00:24:84:45:83:96:ac:b7:a4:99:51:
5d:f9:bc:44:4f:f4:d2:bb:08:67:ca:e1:fd:10:38:
4b:f0:51:38:1e:2a:48:6c:11:1c:40:52:81:53:46:
8b:ef:18:4c:8c:b5:27:4e:91:43:97:72:59:97:fe:
4e:ee:dd:d0:1e:07:1a:68:20:a9:5b:25:27:ee:a6:
74:81:1c:aa:68:2b:6a:74:38:6d:e3:09:eb:ec:76:
ce:fa:dd:03:2c:c1:69:f5:41:9d:d3:08:99:40:dc:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CC:87:4A:33:A4:AE:96:A0:02:28:37:84:34:1B:67:75:1F:4A:19
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e38302e36302e302f32322d3234203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.60.0/22
Signature Algorithm: sha256WithRSAEncryption
77:36:3c:ff:96:ba:88:6f:9f:5d:6b:d2:45:78:3b:52:43:a2:
1d:74:c4:b9:6c:7b:dd:c6:71:b0:d6:7e:81:cc:dc:13:f1:f7:
4b:a4:69:6f:ac:12:df:70:4e:cb:17:41:87:2c:66:03:11:0a:
26:76:80:a1:b1:d8:fa:1b:1b:e6:db:6e:a6:a5:34:66:84:80:
53:4c:48:6e:49:4e:98:95:41:d0:ac:f9:a8:2a:3d:66:3b:ff:
fa:11:0f:0f:d7:28:52:0e:28:e0:5f:94:d0:6c:26:60:8d:1d:
f3:eb:b4:7b:1a:00:45:38:a9:97:80:8f:85:7d:34:5c:4a:d8:
67:01:39:31:0a:d4:88:db:64:aa:15:5c:92:b5:d9:5a:3c:d8:
37:7d:3c:84:ff:bd:1f:a8:c9:c9:b3:a6:e4:c4:07:36:cd:fd:
19:6e:04:27:91:c4:08:a1:ef:57:ff:1f:fe:ce:6a:99:06:fa:
8c:19:ef:18:6c:0f:ad:1e:49:27:3f:ab:59:a4:85:4e:b7:65:
5a:82:45:a0:4f:ac:0d:ec:93:fe:bd:e9:b2:06:eb:28:c9:48:
c1:45:d4:a7:0a:93:34:2a:ea:3c:14:c2:90:f4:47:f8:61:eb:
37:a4:3e:e2:2a:c4:f0:73:c7:5a:80:a2:37:b9:33:7c:5f:c2:
8d:4b:45:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:27 2025 by rpki-client