Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135332e302f32342d3234203d3e20313336373837.roa
File: 34352e31302e3135332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: IyaQcpAMZTbxl3JH+dA6d7M9ulM/zXaRboMONkza3Kk=
Subject key identifier: 76:02:BC:16:5D:49:98:00:0F:F4:8C:E9:D5:DF:34:71:25:2D:6F:4F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1DABB778DAE24DC4C96DD8D7C79922D1291E9D4B
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:45 +0000
ROA not before: Fri 27 Dec 2024 11:42:45 +0000
ROA not after: Fri 26 Dec 2025 11:47:45 +0000
asID: 136787
IP address blocks: 45.10.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ab:b7:78:da:e2:4d:c4:c9:6d:d8:d7:c7:99:22:d1:29:1e:9d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:45 2024 GMT
Not After : Dec 26 11:47:45 2025 GMT
Subject: CN=7602BC165D4998000FF48CE9D5DF3471252D6F4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:91:12:11:38:d4:41:f5:0b:64:3d:01:a7:9e:
05:4d:4d:95:ec:29:a8:61:77:2c:d5:19:73:ff:a3:
b3:bc:b4:42:1a:19:0e:c6:02:fe:e4:d3:ee:a4:a3:
4d:27:d0:b5:bb:24:34:79:b5:35:04:2f:43:25:95:
70:d7:a0:95:1c:d2:64:49:80:0f:76:2d:cc:36:eb:
66:80:51:f9:0f:f1:5e:99:a1:49:3f:96:7e:07:dd:
73:8d:e5:81:58:ae:cc:09:a5:a5:07:f3:06:91:66:
df:99:65:6e:88:2e:f0:a0:11:27:dd:02:d1:39:d9:
0a:b9:bf:57:ca:04:29:ca:e1:78:55:dd:30:57:7f:
f4:b8:95:20:a6:10:d2:60:8c:53:aa:49:7d:6c:84:
2c:3f:b5:a9:53:d7:76:29:14:06:1c:5f:a8:34:56:
55:37:cf:0b:21:41:fd:8a:f4:c7:a3:dd:84:5e:3b:
45:a5:7d:3c:ea:d0:c2:4d:41:49:07:15:c9:f0:d6:
8a:16:e8:64:d4:13:65:3f:ca:73:94:c0:34:35:2b:
84:6b:af:16:1a:23:38:e2:77:bf:9f:b0:d1:4b:a2:
41:c9:78:3e:60:5b:a6:63:ed:a0:9a:af:fd:1b:e9:
f8:b6:41:f1:84:98:fb:17:d9:31:6a:eb:33:eb:9b:
08:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:02:BC:16:5D:49:98:00:0F:F4:8C:E9:D5:DF:34:71:25:2D:6F:4F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.153.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c0:93:c5:df:57:d7:97:be:dc:8a:5b:aa:12:a2:5d:63:04:
88:f8:88:71:23:0d:3b:05:27:18:50:87:b2:1b:86:bf:ab:e9:
0d:48:d0:10:40:be:cc:c4:7a:56:6a:3d:0d:36:c8:7f:9d:7f:
16:ef:30:f0:d2:84:76:4b:a2:25:9b:8c:9d:01:a3:86:d4:43:
a7:28:d7:22:84:de:9c:95:80:b3:26:8b:0d:c7:fc:d6:48:ef:
a3:3e:e3:6f:90:98:d9:c8:cb:12:c8:d2:31:65:af:33:52:bd:
0b:3c:ce:73:59:1e:09:49:8d:56:ea:11:ef:99:7e:19:07:be:
ed:8f:f5:0f:61:2e:7f:db:cd:84:1c:4a:77:9f:18:a0:b7:e0:
cc:8d:d4:ad:96:a9:ac:48:1e:d1:8e:76:f6:f7:04:66:ad:f4:
22:3f:99:f3:40:96:a8:b1:91:df:1d:3f:ad:1d:60:32:ac:4c:
b5:8e:c6:d2:d5:e1:0a:15:49:ea:96:18:58:7f:a3:c2:e1:2d:
6b:75:cb:14:66:fc:61:d0:21:9f:93:6a:65:43:67:05:08:76:
bd:49:34:7b:d8:2f:09:25:cf:32:34:71:30:41:27:89:bf:95:
31:b3:92:59:c3:d5:52:eb:41:56:28:b1:02:73:29:5e:15:b9:
fa:5a:4d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:33:24 2025 by rpki-client