Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135352e302f32342d3234203d3e20313336373837.roa
File: 34352e31302e3135352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 5MSLZ2PHQ0yTDWFIQbPGvhGKe0zYJ+5kSKTv+etf1ts=
Subject key identifier: 39:56:62:B8:05:97:54:89:E8:E3:16:1A:69:49:73:D0:CD:70:D9:F3
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 03F6932CD74C8462AB69D8D92F9643D1B4F37552
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:07 +0000
ROA not before: Fri 27 Dec 2024 11:42:07 +0000
ROA not after: Fri 26 Dec 2025 11:47:07 +0000
asID: 136787
IP address blocks: 45.10.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f6:93:2c:d7:4c:84:62:ab:69:d8:d9:2f:96:43:d1:b4:f3:75:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:07 2024 GMT
Not After : Dec 26 11:47:07 2025 GMT
Subject: CN=395662B805975489E8E3161A694973D0CD70D9F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:90:d0:bd:dc:11:db:ac:a3:b5:44:4e:12:
9e:e3:bb:74:2c:7a:02:a7:39:92:3b:d5:ca:c6:0e:
14:6e:53:c1:8f:14:ac:7f:95:5c:69:6c:6d:db:ec:
d6:13:ca:22:04:13:f8:7f:7c:81:1e:10:09:b0:51:
d0:71:b4:67:98:49:5c:76:b9:94:f3:e4:22:74:87:
46:cb:26:18:7e:46:5d:42:b8:9c:04:bf:b7:04:7c:
8b:ad:5b:36:e8:6d:85:01:6d:8c:ea:8c:87:24:e6:
e8:2d:e4:f3:e7:e3:78:05:53:fc:46:dc:2b:06:31:
e6:56:73:2b:d9:71:d2:30:48:81:32:10:24:be:cc:
f9:d9:7a:3f:9a:26:98:37:bc:41:76:2d:e1:d3:fd:
45:c9:01:34:48:70:b5:9d:c2:29:11:44:45:f0:af:
30:bd:eb:0e:cc:b9:54:78:3f:50:84:fe:94:3d:b7:
5a:dd:f6:c7:59:43:dd:6a:00:1a:00:93:1d:26:3d:
72:04:1c:b4:e6:71:e9:2d:dd:bd:5d:be:fb:a4:e6:
74:a7:1a:64:8c:d6:35:2e:e4:47:67:f0:18:ec:f1:
a1:aa:26:da:6a:af:b6:2c:41:74:82:90:b4:21:fa:
20:84:6a:94:47:95:da:4f:a0:04:71:dd:0d:b6:04:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:56:62:B8:05:97:54:89:E8:E3:16:1A:69:49:73:D0:CD:70:D9:F3
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.155.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:77:a8:2a:75:6b:58:35:91:62:13:a0:61:a9:ba:22:b6:89:
ba:1e:ac:b4:fe:6f:4a:95:ba:77:2a:c9:d7:c6:d1:86:39:1a:
16:90:ec:40:26:39:38:dd:19:4a:96:55:07:b7:4f:38:5d:74:
75:9f:6c:ca:56:2e:f9:41:98:fa:ba:98:81:c9:2e:3d:b5:99:
bb:14:2f:47:dc:ea:6c:01:e7:99:f6:2a:01:02:96:e7:3d:d4:
f8:9f:82:3d:64:a5:3d:10:12:06:69:57:bd:51:19:0b:ab:4b:
0f:16:a7:5d:f7:37:c5:74:9d:68:52:6a:8a:55:0d:4a:39:3c:
0c:bc:9d:61:ac:7a:20:21:20:a5:e4:90:09:88:c3:a5:ad:2d:
21:ad:a4:f9:c3:68:d6:a5:41:2a:08:ae:83:1c:42:7c:b0:9e:
75:01:50:d1:ea:56:e9:31:6d:c4:33:55:95:9a:a3:f8:74:08:
93:ee:21:68:c7:cf:74:ae:62:e3:99:3a:80:32:3c:ec:39:74:
b4:17:fc:7c:e2:ea:1b:57:00:8c:67:ed:6b:4e:85:3c:f1:9e:
2f:b5:c1:a7:16:c9:c8:3f:9b:bf:21:99:bf:dc:75:ae:f6:1c:
49:bf:a2:09:1a:77:3f:28:4b:ec:9d:11:bf:b4:ef:1e:06:f0:
0f:d6:5d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:49 2025 by rpki-client