Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44355.roa
File: AS44355.roa (raw, json)
Hash identifier: lSAZXPUGMEmAS1U8gU7rDfyst6bvoVT6OSGsdFfnB+w=
Subject key identifier: 6D:8A:D8:9E:EA:3C:5A:26:C9:90:89:2F:32:26:E7:13:89:11:8C:1B
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 51D624FA3D7EBBB886049A6B300174366C295B67
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44355.roa
Signing time: Mon 16 Dec 2024 16:59:06 +0000
ROA not before: Mon 16 Dec 2024 16:54:06 +0000
ROA not after: Mon 15 Dec 2025 16:59:06 +0000
asID: 44355
IP address blocks: 2a0f:85c0:400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:d6:24:fa:3d:7e:bb:b8:86:04:9a:6b:30:01:74:36:6c:29:5b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Dec 16 16:54:06 2024 GMT
Not After : Dec 15 16:59:06 2025 GMT
Subject: CN=6D8AD89EEA3C5A26C990892F3226E71389118C1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:32:56:41:8d:07:b1:7d:f6:02:e2:9f:bb:
c8:fe:18:b5:37:cd:06:2a:b8:d2:b9:b2:dd:93:de:
58:c9:75:72:e2:c8:32:95:6b:c0:29:02:c4:3f:c1:
bf:31:bd:e2:a1:8e:17:64:fd:fa:bb:bf:96:d7:6f:
3e:47:7e:29:c9:0e:56:13:1f:2a:57:8d:2f:47:7f:
a4:43:7c:b1:65:78:41:01:59:b2:b8:2a:3a:c4:5c:
e2:9d:08:23:5d:7a:45:65:a1:83:09:f7:e8:34:bb:
af:ea:39:6f:d7:da:e2:39:ad:4f:61:6d:5b:ea:32:
30:d3:b7:a3:f8:9d:b0:c0:ce:82:9b:1a:65:23:08:
62:14:1d:44:06:9a:a8:f1:f8:25:2b:82:08:bb:b7:
ca:47:e3:66:40:79:14:41:40:c0:1b:a6:13:af:b3:
a5:3d:b5:f3:d0:f5:39:bd:d6:ea:51:30:6f:02:a7:
e5:86:93:76:3e:83:f9:86:77:45:ed:6a:3e:05:0e:
7f:b0:f2:72:cd:18:81:19:85:1f:13:f8:a5:ee:d8:
c4:16:59:b4:d7:58:37:50:e5:67:c7:75:96:c1:66:
a5:fd:c4:af:d9:12:7f:a0:d5:0e:6f:da:03:97:08:
0f:b2:77:98:64:bc:b9:d3:56:d6:44:5b:31:87:bd:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8A:D8:9E:EA:3C:5A:26:C9:90:89:2F:32:26:E7:13:89:11:8C:1B
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44355.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c0:400::/48
Signature Algorithm: sha256WithRSAEncryption
dd:59:73:63:0c:01:04:02:04:d1:93:12:b4:b4:d3:96:f1:c0:
70:cc:50:3d:71:e9:9e:46:43:61:ed:db:1b:88:55:4a:40:15:
31:77:41:0f:9d:58:9a:1d:75:f9:8a:25:4c:0e:45:b8:b0:4f:
e8:36:33:98:55:8b:b8:16:2f:db:6c:2e:f0:14:c3:05:6a:6e:
da:d5:f2:ff:72:66:2c:89:00:53:ce:8e:5f:6a:87:b1:87:8e:
20:e7:3f:41:88:4a:8b:80:a5:44:6d:b0:3b:71:87:f7:be:61:
ba:8e:14:e9:61:b2:b2:42:f2:1b:33:d9:78:6a:bc:bf:e0:47:
27:1f:20:15:03:af:7c:d7:da:af:9c:b4:a7:bb:86:d3:28:22:
3d:8e:9a:61:1c:fc:e9:e3:5d:d6:17:2c:2e:16:5d:4a:b6:56:
79:11:4c:22:3a:8b:2a:83:09:16:fb:04:19:d0:10:32:12:17:
10:a7:ca:df:fe:7a:bd:b4:bb:25:a1:72:91:f6:bc:01:0d:c9:
ea:0f:59:ac:80:da:83:19:f9:10:c6:63:df:a7:d7:42:69:9b:
b3:9d:be:e9:e2:cf:7c:a0:68:ec:e7:ee:28:b5:7b:31:8f:08:
93:c2:1f:d0:ee:2a:dd:26:e7:ef:47:f5:22:fc:c5:31:fc:4e:
41:8c:a6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:47:25 2025 by rpki-client