Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33332e302f32342d3234203d3e20323038303436.roa
File: 34352e3132392e33332e302f32342d3234203d3e20323038303436.roa (raw, json)
Hash identifier: urjXQN79T5i4jUKqjz9rs7vtRH9pK+PefyhG87x7Qrg=
Subject key identifier: 8C:83:83:2B:51:F7:AE:4B:51:B8:39:43:D2:55:23:27:15:42:6D:43
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0F39C7FFEF9DD97FE252506AA2BC15196BC7EBBA
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33332e302f32342d3234203d3e20323038303436.roa
Signing time: Fri 27 Dec 2024 11:47:37 +0000
ROA not before: Fri 27 Dec 2024 11:42:37 +0000
ROA not after: Fri 26 Dec 2025 11:47:37 +0000
asID: 208046
IP address blocks: 45.129.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:39:c7:ff:ef:9d:d9:7f:e2:52:50:6a:a2:bc:15:19:6b:c7:eb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:37 2024 GMT
Not After : Dec 26 11:47:37 2025 GMT
Subject: CN=8C83832B51F7AE4B51B83943D255232715426D43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:98:d9:0c:a0:72:c2:10:33:94:53:8a:87:ba:
92:80:f7:99:66:ad:73:a0:2f:25:f9:5b:59:10:72:
ba:ad:b5:45:56:0d:36:6a:50:c2:1c:5d:39:d3:d4:
e1:98:6d:ef:81:e7:4f:a1:11:bf:7b:f6:97:5b:f9:
95:0b:d7:e7:3f:f2:63:c2:25:5a:9c:ac:93:0a:6f:
90:ff:a8:f3:fd:35:33:cf:19:0c:70:77:b6:a8:a9:
b9:25:7e:82:98:a8:b2:a2:6b:e1:4c:f3:aa:60:ad:
16:58:fd:68:f1:cf:99:8d:c5:da:f1:35:36:99:a6:
a7:02:dd:6d:21:f6:9e:fd:ba:d5:ba:69:21:6a:fb:
19:f8:b9:1a:b9:64:3b:de:2e:d2:a5:78:a5:f1:99:
73:01:cf:eb:12:02:d0:29:df:f0:9a:83:24:30:47:
55:76:5a:22:bb:bd:34:6f:0e:57:22:0c:e7:0c:ce:
36:b7:0e:c6:0e:f1:f9:5b:f8:1c:a4:c3:cf:16:9c:
5a:d2:f3:2f:76:ae:e8:e7:be:7d:c4:e7:7d:d4:98:
fa:83:39:f6:c8:d8:a5:5e:f0:b8:a0:97:1d:a0:f9:
ba:cb:88:eb:bb:e8:42:a7:8d:d0:fe:0c:58:15:dd:
50:d5:64:68:65:18:89:e0:f5:d5:18:23:66:e7:2f:
66:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:83:83:2B:51:F7:AE:4B:51:B8:39:43:D2:55:23:27:15:42:6D:43
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33332e302f32342d3234203d3e20323038303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.33.0/24
Signature Algorithm: sha256WithRSAEncryption
65:dc:c8:9d:fb:3f:9b:e4:5d:7b:23:00:63:dc:34:2f:46:a1:
26:35:c2:99:0c:66:8a:07:7b:48:21:92:d2:4f:d0:77:ba:60:
11:39:a3:ae:dd:8a:80:47:b2:8c:3f:1c:ec:3b:f8:a3:15:b9:
8f:d8:21:7e:c4:40:c1:35:0b:d3:f4:ab:70:91:e5:a9:5d:d4:
f0:bd:48:17:4c:75:a9:ed:e1:7f:28:0a:14:06:09:b0:10:6f:
37:d0:41:dd:0f:48:a9:e6:29:5b:b4:9f:a6:ed:70:f5:57:2b:
31:77:8a:74:51:1d:47:05:5d:cd:ec:8a:94:98:46:c8:70:a0:
7e:6d:f5:f1:0e:74:a1:f5:d5:40:eb:a4:01:38:10:07:28:b5:
55:00:59:47:c4:2f:02:34:1a:62:dd:2b:af:a6:1b:d3:b4:29:
87:89:55:ca:ae:35:8e:64:6e:65:fb:4a:29:fe:8e:88:04:a6:
00:a7:c2:5d:77:d0:ba:ac:cb:09:8b:d0:43:6d:5d:ac:5a:53:
1a:a8:55:27:d6:db:ca:42:ca:f8:4a:f0:88:48:2b:55:be:06:
92:08:e6:81:78:c0:2d:fe:f6:1e:04:ab:91:e5:65:b2:31:81:
5f:24:fd:c9:f5:e9:18:00:66:21:2a:18:c3:20:5c:30:81:4a:
b3:40:ba:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:40 2025 by rpki-client