Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135382e302f32332d3233203d3e203136313235.roa
File: 34352e31302e3135382e302f32332d3233203d3e203136313235.roa (raw, json)
Hash identifier: gvFI0WO/i8LcKyoY/v4Y0ivJh5ynoqxUnqZhWqPDLec=
Subject key identifier: 83:C8:C8:81:FE:80:E1:E1:30:5A:43:B4:D8:5B:9F:EF:18:8D:A3:59
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7C0ED624A54B243BE3E6FC97CFB5B28C9D32C722
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135382e302f32332d3233203d3e203136313235.roa
Signing time: Fri 27 Dec 2024 11:47:33 +0000
ROA not before: Fri 27 Dec 2024 11:42:33 +0000
ROA not after: Fri 26 Dec 2025 11:47:33 +0000
asID: 16125
IP address blocks: 45.10.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:0e:d6:24:a5:4b:24:3b:e3:e6:fc:97:cf:b5:b2:8c:9d:32:c7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:33 2024 GMT
Not After : Dec 26 11:47:33 2025 GMT
Subject: CN=83C8C881FE80E1E1305A43B4D85B9FEF188DA359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:df:61:b3:12:3d:d8:9c:d6:db:5e:64:46:
bb:ff:81:8e:63:a0:8c:37:6a:12:eb:dc:e3:4b:ee:
c4:9d:a3:b4:bf:cb:33:24:65:29:14:a4:f6:b9:38:
ab:ce:9c:91:2e:5d:29:38:1f:14:25:cd:4d:45:ae:
d6:bb:05:2c:4e:c0:20:84:68:57:69:35:5a:ff:fa:
43:8b:71:81:0c:f6:e7:3a:92:7a:b1:8a:eb:08:a2:
10:81:47:bb:c9:17:c5:ae:5b:bd:be:9c:13:27:43:
48:3e:7b:5c:7b:a8:5d:d6:0d:0a:76:6e:83:c3:8f:
c0:6c:bb:7d:e9:4b:dd:95:15:b6:4e:cc:c3:2e:1a:
80:f0:ba:e3:3c:97:05:0f:b1:6a:0f:03:61:dc:97:
6e:2d:83:6a:8e:7d:e4:20:81:83:51:4d:be:d1:40:
e5:8a:f3:4c:72:bd:58:d9:25:15:c6:67:8e:b6:ba:
a3:6a:79:dc:5c:54:01:b2:57:f9:68:f5:9f:4b:ea:
59:19:0b:e4:b2:87:81:ab:d0:fa:96:41:9d:0e:94:
a2:a2:d6:e7:8a:c0:35:46:63:66:61:ff:cd:95:03:
c3:22:ff:f9:9e:23:92:60:b4:cb:da:36:e8:f1:13:
51:84:2f:fd:c0:55:ac:8f:47:a9:8f:3c:c9:1e:04:
94:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C8:C8:81:FE:80:E1:E1:30:5A:43:B4:D8:5B:9F:EF:18:8D:A3:59
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135382e302f32332d3233203d3e203136313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.158.0/23
Signature Algorithm: sha256WithRSAEncryption
66:ab:7c:8d:96:fd:cf:5e:2c:2c:16:1d:92:58:eb:2b:6b:82:
e4:2e:3b:b8:60:8b:0d:52:98:13:41:9f:db:bd:3e:ef:e8:3c:
c5:c3:06:a9:6c:e8:28:90:63:f0:ff:da:36:a9:cc:18:43:78:
8e:86:27:96:79:75:19:5c:f1:13:bb:d2:eb:9e:b1:c2:7c:98:
64:eb:74:67:3f:13:f1:60:95:bd:1c:83:1e:27:61:e3:d4:a1:
5b:89:0d:5e:2f:f2:0a:16:1b:43:1c:13:5b:f2:89:93:00:d9:
91:27:d5:de:12:63:b3:f6:8d:d8:d8:1c:ff:21:36:1b:7a:cd:
3e:ef:60:53:fb:dc:a1:64:78:22:83:4f:cb:8c:3a:af:ba:d0:
bd:f4:2e:ed:71:d3:bf:0f:52:54:ac:85:f6:54:97:4e:ad:c9:
f1:7b:6e:3c:46:8a:bc:bf:bd:06:f9:a0:6a:77:df:80:f6:19:
50:a1:5a:70:0c:49:08:1e:9b:69:45:94:c9:02:db:1e:ff:42:
3b:0c:1f:37:1b:d9:a6:c2:ca:ac:f4:07:95:19:7f:e5:ad:90:
96:c2:07:8f:5d:0f:f0:2f:11:77:ab:f7:c0:b8:a8:48:b4:1c:
02:de:7e:be:a3:9a:3d:c9:b5:82:65:7d:e7:dc:26:8f:03:ac:
a4:7b:1f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:39:00 2025 by rpki-client