Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32342d3234203d3e20323039353534.roa
File: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (raw, json)
Hash identifier: D9JHULDkg0M1wT0M8wVTfDaCTJBMJIgvLcTza5q7f5c=
Subject key identifier: 41:5C:15:EC:0B:F2:8C:A5:50:53:AF:17:93:57:A4:CE:BA:B5:05:CD
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 4CD05986AEE591A663717CEEC92FE563B2BFEEF1
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32342d3234203d3e20323039353534.roa
Signing time: Tue 24 Dec 2024 04:40:21 +0000
ROA not before: Tue 24 Dec 2024 04:35:21 +0000
ROA not after: Tue 23 Dec 2025 04:40:21 +0000
asID: 209554
IP address blocks: 45.95.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d0:59:86:ae:e5:91:a6:63:71:7c:ee:c9:2f:e5:63:b2:bf:ee:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Dec 24 04:35:21 2024 GMT
Not After : Dec 23 04:40:21 2025 GMT
Subject: CN=415C15EC0BF28CA55053AF179357A4CEBAB505CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:a7:50:11:28:2c:96:cd:d0:ca:4b:10:eb:
f1:46:74:4a:a7:c2:20:d8:ff:5e:0a:3c:e4:51:b3:
dd:0c:b0:68:19:72:92:b1:8d:b1:11:04:33:7a:62:
eb:8e:e4:dc:6f:3e:51:e7:54:a2:47:23:fd:57:02:
5b:6d:5b:9a:42:ab:7d:72:9d:08:cb:c9:2b:d6:96:
19:20:e1:16:36:52:20:59:97:2d:c8:0c:4c:48:26:
bc:ac:f5:44:56:a2:cc:79:e3:51:09:8c:e8:3f:96:
8b:e3:55:86:e7:24:1d:41:8d:00:27:a3:04:e5:c0:
78:a5:b6:34:bb:5b:9c:71:fa:a8:5e:e3:74:20:f2:
03:26:e6:57:39:b8:cd:94:fb:4d:47:a7:69:1d:f4:
c9:18:f8:46:59:99:9b:ac:a0:98:c3:d5:e4:c0:94:
ca:ee:10:08:0c:59:08:66:68:8e:7e:55:c0:f0:04:
a5:a0:b8:bd:2c:a7:a8:15:16:6d:60:0c:8a:8f:38:
1f:8f:ac:db:40:92:7b:2f:da:d3:2a:c9:6f:9d:a9:
6f:03:e8:f7:2d:d6:f8:48:ad:cc:fb:b2:ff:47:f3:
13:52:39:07:49:31:80:3b:36:e5:00:ef:12:38:b4:
c4:71:10:77:d6:6a:ad:7a:01:c4:a6:8b:57:f6:94:
e3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5C:15:EC:0B:F2:8C:A5:50:53:AF:17:93:57:A4:CE:BA:B5:05:CD
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32342d3234203d3e20323039353534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.212.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c0:72:31:e4:62:3a:8f:80:75:6c:52:fb:0c:ab:85:41:74:
80:a3:2f:19:9e:c2:e8:fd:27:e5:b5:8c:3a:95:68:20:aa:b5:
75:8b:ca:cb:25:2a:fd:5d:28:01:8d:a9:73:02:22:a2:b4:e9:
34:3f:8d:21:aa:21:38:a9:c2:77:f5:2e:7d:1b:dd:d0:a5:63:
b4:f0:c9:80:eb:85:eb:b3:d8:7c:a0:a9:2f:32:5c:76:5f:09:
25:d8:38:1b:f8:ff:60:06:c7:fc:59:5e:d6:b6:4a:44:37:5d:
de:68:03:df:80:6d:e8:bc:c5:0d:eb:14:87:10:db:78:e6:e1:
81:d9:f7:70:00:4f:79:25:54:8f:60:38:0d:50:ca:fe:74:45:
05:d0:00:86:72:d7:5f:99:63:50:4e:eb:c5:d7:1e:c7:93:b6:
e0:61:81:3e:e3:a2:70:46:e6:1b:bb:cf:08:dd:5f:68:ea:d3:
39:d9:25:58:69:97:0d:88:19:59:39:35:c1:c7:df:9f:dd:e8:
3b:49:4d:fd:d6:06:a3:d7:61:22:06:7d:1b:8d:69:ad:9f:88:
84:27:d6:c2:d6:f6:db:ce:22:85:35:fe:f5:6e:9f:a7:55:bd:
c6:7b:e1:66:8f:57:66:cd:34:fe:de:38:fe:74:a2:44:fe:4f:
18:43:fe:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:23 2025 by rpki-client on console.sobornost.net