Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133372e302f32342d3234203d3e203536313036.roa
File: 34352e39312e3133372e302f32342d3234203d3e203536313036.roa (raw, json)
Hash identifier: MNuGMmV3Jq7xwO5T99e9vjcSNuiUwrftHhnUE1Yx2YM=
Subject key identifier: 55:F8:7B:41:EF:AB:9C:1B:89:CB:71:57:A7:3C:40:79:5A:34:4A:F5
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 6A13D30061FDEB26440432B2874099F8CF6578D9
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133372e302f32342d3234203d3e203536313036.roa
Signing time: Thu 23 Jan 2025 03:04:12 +0000
ROA not before: Thu 23 Jan 2025 02:59:12 +0000
ROA not after: Thu 22 Jan 2026 03:04:12 +0000
asID: 56106
IP address blocks: 45.91.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:13:d3:00:61:fd:eb:26:44:04:32:b2:87:40:99:f8:cf:65:78:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jan 23 02:59:12 2025 GMT
Not After : Jan 22 03:04:12 2026 GMT
Subject: CN=55F87B41EFAB9C1B89CB7157A73C40795A344AF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:7a:eb:42:ee:3b:2c:78:c3:39:c6:c0:5f:
fa:47:dd:47:38:d4:0e:56:2c:19:4a:23:b3:b3:fb:
fe:e3:4c:a6:85:d9:b6:94:c8:7d:0e:16:32:a3:14:
a1:62:18:d6:c3:25:dc:0a:fc:3c:1f:2e:18:a6:47:
4f:48:7a:cf:fe:c1:83:42:36:a1:7a:ee:65:9e:ea:
1c:2b:18:a3:60:8d:d3:ba:db:94:9e:cc:35:62:ed:
fc:00:ee:ef:87:ee:cb:ee:59:09:81:b3:2d:0a:8e:
3b:5b:24:fb:dd:93:a8:07:db:99:45:56:dc:b5:47:
27:6b:7e:c7:39:4e:38:72:60:17:94:30:b1:6b:70:
ca:fe:72:09:26:b8:73:38:eb:a5:f7:e7:2d:b9:66:
76:9a:a3:0a:ac:a0:69:9c:ca:18:a2:6b:f3:3c:43:
0a:e5:fe:39:19:1f:2e:62:d6:4d:f0:d5:eb:81:bf:
97:6b:ba:61:76:ea:cf:ec:21:76:ee:de:f3:5c:9b:
3e:6a:f1:ab:4f:c5:71:6c:3f:48:66:df:ab:f0:38:
8a:29:13:ff:b1:4e:7f:a3:94:a3:9d:01:29:42:d8:
26:20:a5:dd:ce:01:20:d8:e5:15:fa:63:fe:9e:8d:
40:68:20:ac:35:42:a9:dd:82:e1:0d:f8:9d:aa:a4:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F8:7B:41:EF:AB:9C:1B:89:CB:71:57:A7:3C:40:79:5A:34:4A:F5
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133372e302f32342d3234203d3e203536313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.137.0/24
Signature Algorithm: sha256WithRSAEncryption
77:31:2b:2c:46:86:32:b5:cd:c6:17:9c:d1:3f:0f:e9:49:12:
fd:e0:73:54:a0:0f:48:05:6b:31:1e:7a:50:d3:e8:b4:a7:5d:
57:60:6d:f3:c0:1b:79:ab:32:9c:1d:b3:c6:cc:95:ba:f7:8c:
8c:b3:d3:b2:e5:e2:a4:d4:53:78:7b:1c:a9:97:c0:da:21:12:
04:a3:70:fa:e0:3a:ce:69:8a:c3:95:69:0d:3b:8f:1d:84:f7:
10:61:f3:29:56:b1:29:66:85:98:77:69:14:5e:07:a0:e0:c5:
67:1a:9d:7a:78:e3:7a:73:3c:55:5f:ba:6a:24:e3:88:d0:f7:
14:7f:9d:6c:7b:af:d0:17:f2:eb:44:7f:72:93:ac:ce:47:b2:
54:d2:36:32:99:a9:53:cc:df:9f:6f:76:8d:a6:49:d5:af:d4:
1f:6a:f1:d6:c4:e1:1d:fb:15:86:23:13:a6:c8:22:20:33:3d:
e7:a9:b2:bd:c9:a0:f3:68:88:03:f2:7c:31:88:f3:57:ec:07:
0d:f9:99:74:98:e9:e6:32:1e:b8:c1:02:c2:8f:40:a8:31:03:
55:b4:b3:41:18:9c:6b:d7:cf:19:69:87:5a:0c:12:33:50:dd:
cf:24:07:fd:0b:33:20:fb:5c:3d:80:a9:fa:ca:e8:5d:a5:a2:
71:b3:a5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:10:22 2025 by rpki-client