Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33322e302f32342d3234203d3e20313336373837.roa
File: 34352e3132392e33322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: xbizaFiFeNWsA5bVJFdqb1ZrSCXXKWhgG5djwqu812c=
Subject key identifier: DF:9A:81:38:4E:51:D0:5F:30:63:41:89:BB:11:23:58:6E:01:B2:C3
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4F6FF48E04309864AC75AD0A8346894162696C94
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:45 +0000
ROA not before: Fri 27 Dec 2024 11:42:45 +0000
ROA not after: Fri 26 Dec 2025 11:47:45 +0000
asID: 136787
IP address blocks: 45.129.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:6f:f4:8e:04:30:98:64:ac:75:ad:0a:83:46:89:41:62:69:6c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:45 2024 GMT
Not After : Dec 26 11:47:45 2025 GMT
Subject: CN=DF9A81384E51D05F30634189BB1123586E01B2C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:6f:61:91:c4:41:39:4a:07:4f:23:2a:65:
4d:f7:12:e1:2b:53:d2:0b:d8:26:a0:94:51:da:a1:
09:60:e3:4b:09:98:82:60:f4:e6:9a:80:7e:2b:90:
ca:74:a3:ca:12:09:45:99:0e:c8:03:e6:55:19:be:
8b:42:42:57:73:89:0c:02:43:b6:bf:92:2f:8c:54:
c7:f2:13:18:04:10:84:0b:45:78:af:f4:75:40:b9:
11:d4:e8:67:88:2f:67:89:88:96:03:5e:06:ad:1b:
ff:37:62:82:5d:a2:6a:db:22:3e:5e:07:a5:cf:d2:
d9:6e:d5:3d:c7:75:0c:da:2e:0f:ea:cc:3e:ff:8a:
79:6b:fb:49:f1:f8:21:66:91:96:04:9f:a5:8d:1b:
ca:5f:c1:1e:4b:9f:48:61:ee:b8:0a:ca:da:2c:89:
41:a6:9b:6e:e8:f1:43:1b:bd:9a:82:ee:e2:19:77:
63:7a:c6:db:2b:9a:93:9d:50:2c:79:f0:31:db:20:
a7:a0:89:38:f2:34:6c:fe:4a:a1:39:d4:90:56:b7:
3f:a4:5c:1b:fb:9d:1b:8a:f1:ff:5d:47:44:13:57:
af:4d:40:81:78:18:6b:cb:70:cf:72:06:16:fa:71:
f1:27:c6:e6:03:71:e0:e4:ce:2a:a5:69:f7:b6:c0:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9A:81:38:4E:51:D0:5F:30:63:41:89:BB:11:23:58:6E:01:B2:C3
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.32.0/24
Signature Algorithm: sha256WithRSAEncryption
00:42:06:c8:f0:e0:27:c4:2c:a2:b7:af:36:9c:c7:28:de:b9:
4a:60:63:9c:df:91:0b:5f:90:17:fa:b2:71:31:20:76:95:8f:
db:da:59:c8:ee:24:83:40:a5:2d:00:99:18:fb:d8:41:c5:0f:
55:47:c7:a6:62:ac:09:1a:ab:10:b3:b5:4b:31:3a:42:89:72:
29:95:eb:28:0d:b8:4a:f4:0c:fa:5c:17:09:5c:ed:8c:22:44:
1d:84:c3:73:dd:0f:b4:16:65:23:ed:fd:fa:22:c5:7a:28:57:
b3:a5:6f:64:c2:dd:61:be:a8:d8:94:27:c2:46:45:e0:c1:34:
08:bc:cc:19:26:61:8b:ed:e0:e3:8c:24:f4:2e:4a:92:5b:b2:
15:8f:b9:10:98:af:e8:cd:cc:27:a3:cb:b3:2e:cc:98:e1:e0:
5c:c1:e0:c3:93:93:24:13:fa:e3:1a:1a:ce:c6:98:b0:df:67:
78:f9:6e:e3:c5:e0:12:12:ee:91:73:92:d5:a8:a2:25:17:00:
51:94:a1:e4:4a:72:15:4b:09:a3:37:d0:7f:74:cf:5d:31:30:
ea:11:8d:ca:45:cf:e7:f2:84:e7:51:b7:0b:30:05:42:c0:00:
0b:fa:53:a7:af:ff:41:54:b1:0e:02:be:26:17:00:57:98:df:
13:d5:19:92
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUT2/0jgQwmGSsda0Kg0aJQWJpbJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyNDVaFw0yNTEyMjYxMTQ3NDVaMDMxMTAvBgNV
BAMTKERGOUE4MTM4NEU1MUQwNUYzMDYzNDE4OUJCMTEyMzU4NkUwMUIyQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTJm9hkcRBOUoHTyMqZU33EuEr
U9IL2CaglFHaoQlg40sJmIJg9OaagH4rkMp0o8oSCUWZDsgD5lUZvotCQldziQwC
Q7a/ki+MVMfyExgEEIQLRXiv9HVAuRHU6GeIL2eJiJYDXgatG/83YoJdomrbIj5e
B6XP0tlu1T3HdQzaLg/qzD7/inlr+0nx+CFmkZYEn6WNG8pfwR5Ln0hh7rgKytos
iUGmm27o8UMbvZqC7uIZd2N6xtsrmpOdUCx58DHbIKegiTjyNGz+SqE51JBWtz+k
XBv7nRuK8f9dR0QTV69NQIF4GGvLcM9yBhb6cfEnxuYDceDkziqlafe2wPjBAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQU35qBOE5R0F8wY0GJuxEjWG4BssMwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMyMzky
ZTMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAtgSAwDQYJKoZIhvcNAQELBQADggEBAABCBsjw4CfELKK3rzacxyjeuUpg
Y5zfkQtfkBf6snExIHaVj9vaWcjuJINApS0AmRj72EHFD1VHx6ZirAkaqxCztUsx
OkKJcimV6ygNuEr0DPpcFwlc7YwiRB2Ew3PdD7QWZSPt/foixXooV7Olb2TC3WG+
qNiUJ8JGReDBNAi8zBkmYYvt4OOMJPQuSpJbshWPuRCYr+jNzCejy7MuzJjh4FzB
4MOTkyQT+uMaGs7GmLDfZ3j5buPF4BIS7pFzktWooiUXAFGUoeRKchVLCaM30H90
z10xMOoRjcpFz+fyhOdRtwswBULAAAv6U6ev/0FUsQ4CviYXAFeY3xPVGZI=
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:36:03 2025 by rpki-client