Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137332e302f32342d3234203d3e20383334.roa
File: 34352e382e3137332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 9gNEewNSIOvI6hrJ6gue8pE2wQuPb/ZV8cbQLfwY+68=
Subject key identifier: 09:F0:B0:65:16:1C:49:AE:70:80:D8:19:15:A3:2B:97:24:42:BA:DE
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 347A8ED01FE5B9F90917418F5DDBCDCC49491AC7
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137332e302f32342d3234203d3e20383334.roa
Signing time: Fri 17 Jan 2025 08:09:12 +0000
ROA not before: Fri 17 Jan 2025 08:04:12 +0000
ROA not after: Fri 16 Jan 2026 08:09:12 +0000
asID: 834
IP address blocks: 45.8.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:7a:8e:d0:1f:e5:b9:f9:09:17:41:8f:5d:db:cd:cc:49:49:1a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jan 17 08:04:12 2025 GMT
Not After : Jan 16 08:09:12 2026 GMT
Subject: CN=09F0B065161C49AE7080D81915A32B972442BADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:e1:f6:ae:8b:63:c1:5b:f5:bf:39:86:97:
7e:d3:6f:24:57:95:d8:43:8c:83:a6:36:cf:63:c2:
b9:21:ee:6d:4b:f8:a1:de:a0:55:2b:c6:91:11:c4:
06:4a:84:c3:10:ac:52:48:e1:af:41:9c:61:32:d6:
5d:5b:8b:c5:5f:f8:09:af:0d:2f:25:0f:e6:d1:df:
4f:73:99:37:17:e8:39:18:6d:f3:09:47:85:45:6d:
f6:34:f6:8c:e6:55:99:b7:b1:e2:d8:98:62:92:06:
29:2b:0c:c1:dd:f1:29:08:65:c6:5c:e5:6a:2c:9d:
36:84:43:12:b0:84:c1:4e:9d:8d:e1:5c:60:2e:2c:
d1:1f:8a:e0:27:61:c3:a4:db:32:fc:24:d1:9f:72:
a8:5e:f7:31:82:b8:9f:33:b5:37:1c:35:90:b3:9c:
bb:b4:b4:e6:73:7f:43:9f:c8:cb:84:00:8e:02:9c:
0f:3f:91:93:52:ef:e6:27:8b:25:b0:72:a1:9b:c6:
85:28:29:8c:4f:49:80:b5:04:12:bb:c1:0c:77:5b:
a3:a0:2e:34:97:22:fe:52:89:d8:c4:99:8d:bf:56:
77:22:2f:d6:12:58:c1:0d:09:5f:1e:66:b9:43:65:
9a:27:34:6b:c6:7a:0f:b3:c0:ee:ee:34:41:8a:14:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F0:B0:65:16:1C:49:AE:70:80:D8:19:15:A3:2B:97:24:42:BA:DE
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.173.0/24
Signature Algorithm: sha256WithRSAEncryption
58:11:0e:da:bf:76:9f:a9:65:91:ff:a6:4f:d6:ca:70:c3:4e:
2f:b9:69:1c:7a:53:80:0d:0b:03:09:84:36:f0:41:a9:c9:c7:
7b:2e:cf:74:0b:6f:b9:bd:b6:34:0a:bc:78:eb:9b:e4:fd:76:
bc:8a:98:6c:fe:01:1c:0f:fa:ff:41:57:70:59:d5:3d:a2:d6:
b0:41:50:bb:3d:b9:28:08:71:67:ec:08:80:21:64:8f:5c:2a:
72:72:e9:5e:f1:a9:08:26:18:c2:34:a6:f1:41:f3:d6:17:09:
93:8e:c4:b8:88:00:a3:4b:c2:7e:24:d5:c3:2a:1f:8c:70:42:
f7:e0:22:1f:af:b1:f0:b9:fe:a1:a3:28:f4:c6:69:1e:08:fa:
3e:2e:02:82:2d:71:6e:4f:c9:2f:1f:64:61:58:23:67:0e:02:
89:59:7b:34:92:c0:07:01:d6:4c:80:85:d4:95:6f:87:13:3b:
98:e0:8e:98:1e:b3:b0:53:7b:a6:f5:a3:8c:d9:06:21:2f:c0:
74:ae:bd:77:e2:09:78:f2:19:bd:7f:45:1e:44:9d:be:93:f5:
75:fc:f8:3b:e2:84:c2:23:bf:8a:50:ea:c3:fb:70:4a:18:e3:
90:ae:c2:ff:ef:b1:fe:3b:91:a4:1e:e2:12:3c:ad:86:80:23:
31:6c:20:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:19:17 2025 by rpki-client on console.sobornost.net