Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e362e302f32342d3234203d3e203538303631.roa
File: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (raw, json)
Hash identifier: 739QQ1kzpbqPlY0J1CHiMuvjqJmn7ot6gs3zEY3jdHw=
Subject key identifier: ED:04:D9:A1:F6:F5:D7:99:BF:89:BD:38:F2:5E:4A:75:C3:F1:B0:94
Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Certificate serial: 7D1EF27569ADF0ADAC10F92E1CB7D51DEBA3BFCF
Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e362e302f32342d3234203d3e203538303631.roa
Signing time: Tue 18 Feb 2025 11:53:55 +0000
ROA not before: Tue 18 Feb 2025 11:48:55 +0000
ROA not after: Tue 17 Feb 2026 11:53:55 +0000
asID: 58061
IP address blocks: 45.150.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:1e:f2:75:69:ad:f0:ad:ac:10:f9:2e:1c:b7:d5:1d:eb:a3:bf:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Validity
Not Before: Feb 18 11:48:55 2025 GMT
Not After : Feb 17 11:53:55 2026 GMT
Subject: CN=ED04D9A1F6F5D799BF89BD38F25E4A75C3F1B094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:95:bf:75:cb:42:f3:27:70:91:09:d2:57:
aa:13:4e:80:68:5d:cd:86:f7:12:89:cc:1c:a1:d7:
bb:e2:49:52:70:61:a8:a1:ad:14:26:c2:63:9a:90:
a5:c8:19:25:20:f6:62:ce:25:00:d2:3d:6c:c8:4f:
79:df:0f:c4:fe:0b:af:eb:29:61:12:3f:53:82:94:
a2:26:9c:3d:65:d6:89:43:ae:39:4e:e1:3d:32:d0:
bc:f2:ae:ea:1f:90:ad:9a:84:55:34:22:f1:09:40:
71:f7:46:34:65:d3:87:d1:a4:da:37:1e:c2:26:29:
9f:c3:6a:4a:aa:01:14:ed:a8:ab:5c:b3:08:ba:5b:
2d:aa:0f:b7:d0:48:82:67:b4:9c:cc:45:d8:ae:48:
1c:41:05:68:7a:fc:9e:10:f6:65:89:32:13:ff:84:
1e:48:19:37:2c:1d:bf:7a:f3:e8:ff:27:86:b2:57:
ff:21:6b:04:12:af:54:73:54:76:32:84:9f:48:17:
da:b4:94:06:a7:18:f2:32:cc:94:5e:b3:b3:54:c3:
ff:44:eb:dd:ff:3e:80:3c:32:e0:fd:39:70:a5:94:
30:a4:73:d4:4f:da:17:44:75:98:5b:e5:03:6d:47:
f0:8d:66:b6:fd:7c:10:4c:e0:25:2c:41:83:56:90:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:04:D9:A1:F6:F5:D7:99:BF:89:BD:38:F2:5E:4A:75:C3:F1:B0:94
X509v3 Authority Key Identifier:
keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e362e302f32342d3234203d3e203538303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.6.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:dd:dd:00:e9:bc:84:f8:73:21:77:10:fb:32:5c:eb:2d:4e:
1a:33:db:fe:3e:b7:cd:56:3b:4d:96:9f:3f:cf:46:b7:17:75:
31:f9:bf:1c:51:21:ca:38:a2:66:3e:4e:29:25:74:39:88:82:
15:21:c6:6e:b9:c5:ea:0e:f2:c8:ea:15:00:1b:bd:7a:09:fc:
b7:dd:d8:5c:e8:71:fb:b5:c5:0a:9e:da:a0:3c:7b:b7:29:ac:
64:77:7d:5b:e7:a1:d4:a9:e0:d5:19:a5:4d:83:ed:4e:09:cd:
92:71:39:5a:f1:91:d5:f0:4a:90:11:68:48:60:1e:b2:07:7f:
0a:43:ae:f4:0b:39:22:52:ee:83:f3:23:f4:a4:44:29:d8:9b:
7d:68:d7:58:5f:06:cb:fa:69:f2:72:25:36:b3:5a:b7:15:2f:
a7:73:ae:92:4f:24:5c:4a:3a:4c:70:f1:6f:7a:7e:a0:d6:46:
1b:1a:3a:0b:98:2e:b3:62:b3:56:73:0b:cb:62:22:fb:fb:78:
60:9a:ea:20:87:64:45:f4:b8:1f:29:cf:9b:70:ec:da:ba:96:
19:82:db:41:a4:39:07:69:8e:f7:78:54:e1:30:3f:8d:d4:10:
0e:37:2b:d4:88:f2:42:8a:13:21:08:cb:dd:f5:e7:7f:81:26:
4b:85:58:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net