Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135362e302f32332d3234203d3e203631333137.roa
File: 34352e31302e3135362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: Svl/k6SdyT2IjoshOlkIpp71qNFgePNuff8HGdyJI6s=
Subject key identifier: 17:FF:18:19:C0:15:16:5A:81:36:59:EC:A4:E0:CD:BF:4E:49:2F:7D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0D470B4C6EAEC017AEA2066603BD7A600F63AFE9
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135362e302f32332d3234203d3e203631333137.roa
Signing time: Fri 27 Dec 2024 11:47:21 +0000
ROA not before: Fri 27 Dec 2024 11:42:21 +0000
ROA not after: Fri 26 Dec 2025 11:47:21 +0000
asID: 61317
IP address blocks: 45.10.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:47:0b:4c:6e:ae:c0:17:ae:a2:06:66:03:bd:7a:60:0f:63:af:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:21 2024 GMT
Not After : Dec 26 11:47:21 2025 GMT
Subject: CN=17FF1819C015165A813659ECA4E0CDBF4E492F7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:4f:74:82:dd:61:39:5b:d7:fb:b6:b2:af:
a3:4d:2f:28:ec:68:04:bd:60:2e:24:02:63:1e:f2:
ba:98:59:1b:8c:fa:dd:98:eb:36:0b:ed:55:bb:9b:
2c:ce:13:dd:df:e1:86:7b:28:7c:6a:49:3f:15:36:
6e:d8:15:6b:54:4a:f5:c1:8a:90:34:c1:f4:f6:59:
93:0b:f6:10:13:4c:7e:ab:54:0d:8d:d5:fd:c2:66:
9b:54:f4:26:ee:3d:82:b6:b5:e7:5d:bf:68:3d:6e:
b3:c9:9e:24:3e:ae:99:c1:8a:6c:51:60:33:dc:af:
90:23:d9:37:b4:bf:bb:88:40:b8:32:09:4e:51:a8:
1c:b9:db:69:a5:ae:72:41:3e:93:23:db:c5:4d:39:
ae:0c:fa:af:ec:b4:e9:56:15:fb:60:78:35:d4:54:
6a:66:d6:f4:e8:9a:e6:9c:4e:d6:a7:86:02:aa:7f:
e4:56:b1:5e:30:b7:6c:3c:27:d1:7a:ae:d4:29:91:
eb:6e:68:09:fe:2c:db:fc:1d:fa:b7:4b:fa:72:cc:
8d:18:32:a6:ec:f4:c7:c9:7e:7a:82:9d:df:c5:20:
e4:15:b6:9f:e9:c8:be:12:7b:2a:82:70:f1:8a:4c:
af:a0:52:10:b0:c9:dc:b2:e2:cc:d9:28:54:03:4c:
52:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FF:18:19:C0:15:16:5A:81:36:59:EC:A4:E0:CD:BF:4E:49:2F:7D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135362e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.156.0/23
Signature Algorithm: sha256WithRSAEncryption
07:c9:19:62:a7:d8:56:18:7b:ac:15:40:6b:a1:47:c7:2b:d4:
85:70:6a:0e:32:6c:f5:a4:4c:c9:11:c4:4d:45:ef:ba:de:5f:
a9:66:99:48:5b:6a:54:66:ed:51:60:0b:93:91:1c:f1:fa:6c:
ee:7c:94:7c:3f:89:55:62:34:00:4c:56:1f:37:57:5f:73:82:
12:fe:6c:d7:c2:bc:4a:0f:4d:b7:a9:1f:e3:52:fa:17:a5:7b:
6b:74:32:85:5e:cf:89:64:73:bc:5a:d3:31:9e:ff:45:cb:36:
9c:bf:39:c7:6a:96:f1:c8:8f:36:9e:5c:c1:ea:1f:f4:e8:22:
9f:04:41:8c:ee:b3:1a:44:90:a4:eb:af:9b:09:6e:66:cb:57:
b8:7f:37:c9:09:83:c2:31:88:d3:13:57:24:8a:d3:94:d1:9b:
19:e0:48:3b:6b:3d:9d:f9:6c:64:29:0a:c3:d2:5a:b7:75:9c:
d2:27:32:69:ab:ed:13:64:dd:ab:8a:83:f8:57:48:55:4c:02:
a0:96:53:c0:5d:a0:2d:f4:52:0e:a2:e8:df:65:bf:52:5a:52:
bd:55:de:50:00:0e:56:39:19:ca:36:28:d1:f1:10:5e:f4:4a:
4a:87:97:76:89:57:19:4b:28:0a:d4:69:be:a5:30:c0:0c:31:
05:d2:52:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:51:12 2025 by rpki-client