Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135342e302f32342d3332203d3e203531313637.roa
File: 34352e31302e3135342e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 3HbdazBS/a+7NQIZGVrT1YK5TWg7bmFVfKPihIbe9/o=
Subject key identifier: AB:9E:97:16:04:C3:B6:C7:2B:17:62:4E:FF:2A:6C:EB:4C:36:4E:24
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 048E1438D477841E5D192A870A203614DBC651B1
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135342e302f32342d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:30 +0000
ROA not before: Fri 27 Dec 2024 11:42:30 +0000
ROA not after: Fri 26 Dec 2025 11:47:30 +0000
asID: 51167
IP address blocks: 45.10.154.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:8e:14:38:d4:77:84:1e:5d:19:2a:87:0a:20:36:14:db:c6:51:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:30 2024 GMT
Not After : Dec 26 11:47:30 2025 GMT
Subject: CN=AB9E971604C3B6C72B17624EFF2A6CEB4C364E24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9a:09:82:46:78:3a:cc:81:eb:f2:53:98:2e:
f2:19:01:c4:38:11:93:c6:c6:64:0a:12:c7:ab:54:
6e:1c:09:b0:2b:75:d3:4a:fc:8c:b2:62:84:2a:ae:
74:e8:4a:3d:eb:8a:92:f5:3c:ac:99:ee:0b:44:5f:
b9:3a:48:8f:3f:4b:78:82:59:0a:d3:14:5a:97:47:
dc:dd:0f:bd:7a:47:ce:85:e1:a9:fd:5b:15:46:9d:
35:eb:6e:c4:6a:8b:84:dc:39:e2:2f:01:a2:0a:2a:
3a:6b:b3:54:21:2c:71:27:f9:15:84:c5:ba:b5:bf:
9d:ef:b9:e2:09:a7:3f:aa:ab:13:50:99:2c:56:22:
55:a4:74:74:69:d8:18:07:10:59:6f:a3:09:d9:66:
dd:ed:ef:d4:95:84:c9:8d:7c:85:0a:61:83:2d:d3:
42:90:94:8a:83:75:bc:7a:38:31:49:9e:ef:d2:0f:
ab:49:c9:7b:4a:02:53:cb:43:0c:f0:c0:c4:57:81:
f1:89:2e:29:7b:6f:e7:e2:6a:b4:c7:2e:de:00:92:
b8:43:2c:ad:ea:1b:84:b2:3b:6e:13:d4:d2:a4:fa:
17:c2:7a:fe:56:15:16:aa:35:e0:e5:80:3f:1b:0b:
d3:08:c0:d5:bc:7c:94:18:6b:2f:f5:4d:5c:e8:47:
a5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9E:97:16:04:C3:B6:C7:2B:17:62:4E:FF:2A:6C:EB:4C:36:4E:24
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135342e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.154.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d7:04:33:b5:ee:0f:eb:87:e3:53:f4:70:90:87:b8:68:ad:
2c:73:da:66:91:84:2d:21:ad:2b:6f:e1:78:a7:76:f0:e7:13:
f7:15:d8:16:8b:1d:df:3d:75:56:34:65:38:ab:a4:c3:5a:92:
cb:de:29:ec:dc:53:e7:33:e5:94:b3:ba:45:df:4d:b7:cb:41:
7d:c7:0d:30:5f:a6:09:c0:b7:cc:13:96:15:ee:b4:71:20:f2:
f4:1c:b7:92:9a:f0:9f:13:b5:0d:e7:75:10:24:5c:5d:06:e1:
9e:f8:d6:5b:1b:98:bb:8c:45:11:9d:b0:f0:13:85:31:33:59:
f4:35:b1:48:ea:ac:75:93:dc:c0:e0:34:c2:c4:b6:12:6f:05:
d1:9c:3b:16:e4:a7:c3:30:a9:ba:db:2f:47:bc:92:ff:de:5b:
f9:58:8d:43:66:7d:a7:c3:f3:ee:cf:a6:f3:d7:09:47:31:6f:
71:d3:fe:7c:e1:7a:06:7c:5f:01:19:14:4b:d8:b7:5e:5a:85:
60:ca:5f:0e:22:34:b8:e0:88:80:3a:b6:3d:32:d0:d2:a4:9d:
3f:24:7b:33:bc:8c:78:f0:d3:52:cc:2c:0e:24:a0:68:d3:35:
bc:ba:8c:a0:26:ae:3b:ee:64:db:a6:9f:bf:17:35:2e:9f:3e:
99:10:db:a8
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUBI4UONR3hB5dGSqHCiA2FNvGUbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMzBaFw0yNTEyMjYxMTQ3MzBaMDMxMTAvBgNV
BAMTKEFCOUU5NzE2MDRDM0I2QzcyQjE3NjI0RUZGMkE2Q0VCNEMzNjRFMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTmgmCRng6zIHr8lOYLvIZAcQ4
EZPGxmQKEserVG4cCbArddNK/IyyYoQqrnToSj3ripL1PKyZ7gtEX7k6SI8/S3iC
WQrTFFqXR9zdD716R86F4an9WxVGnTXrbsRqi4TcOeIvAaIKKjprs1QhLHEn+RWE
xbq1v53vueIJpz+qqxNQmSxWIlWkdHRp2BgHEFlvownZZt3t79SVhMmNfIUKYYMt
00KQlIqDdbx6ODFJnu/SD6tJyXtKAlPLQwzwwMRXgfGJLil7b+fiarTHLt4AkrhD
LK3qG4SyO24T1NKk+hfCev5WFRaqNeDlgD8bC9MIwNW8fJQYay/1TVzoR6U/AgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUq56XFgTDtscrF2JO/yps60w2TiQwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMwMmUz
MTM1MzQyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQALQqaMA0GCSqGSIb3DQEBCwUAA4IBAQCN1wQzte4P64fjU/RwkIe4aK0sc9pm
kYQtIa0rb+F4p3bw5xP3FdgWix3fPXVWNGU4q6TDWpLL3ins3FPnM+WUs7pF3023
y0F9xw0wX6YJwLfME5YV7rRxIPL0HLeSmvCfE7UN53UQJFxdBuGe+NZbG5i7jEUR
nbDwE4UxM1n0NbFI6qx1k9zA4DTCxLYSbwXRnDsW5KfDMKm62y9HvJL/3lv5WI1D
Zn2nw/Puz6bz1wlHMW9x0/584XoGfF8BGRRL2LdeWoVgyl8OIjS44IiAOrY9MtDS
pJ0/JHszvIx48NNSzCwOJKBo0zW8uoygJq477mTbpp+/FzUunz6ZENuo
-----END CERTIFICATE-----
Generated at Thu Apr 3 05:12:20 2025 by rpki-client