Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33342e302f32342d3234203d3e20323034313730.roa
File: 34352e3132392e33342e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: tEbNxcUuZeqjPnvhDkNsU96eHsvilC5+qsxmr6f1C74=
Subject key identifier: ED:97:07:99:70:49:CF:31:BD:87:A8:22:BA:43:57:B7:53:30:02:15
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5BB05CDCC36AE929B93F155066D3B0FEB9DBE4E6
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33342e302f32342d3234203d3e20323034313730.roa
Signing time: Fri 27 Dec 2024 11:47:40 +0000
ROA not before: Fri 27 Dec 2024 11:42:40 +0000
ROA not after: Fri 26 Dec 2025 11:47:40 +0000
asID: 204170
IP address blocks: 45.129.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b0:5c:dc:c3:6a:e9:29:b9:3f:15:50:66:d3:b0:fe:b9:db:e4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:40 2024 GMT
Not After : Dec 26 11:47:40 2025 GMT
Subject: CN=ED9707997049CF31BD87A822BA4357B753300215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:1b:f1:03:c0:8b:51:bc:8d:7f:6d:50:b6:
ae:0b:6e:13:5e:85:a6:4b:19:07:6a:0d:19:ae:88:
76:6a:86:b0:3f:f0:58:03:c7:27:1b:19:08:b8:4a:
1d:00:c9:e7:44:48:1d:73:a8:0f:c2:1d:b8:a5:4a:
01:eb:25:f6:22:75:f7:55:10:8e:68:06:ef:b8:4f:
f5:96:1a:8c:f7:44:93:3e:48:b9:15:24:bd:a8:d6:
a5:f0:71:57:79:9f:ff:6e:14:b9:54:88:17:09:de:
64:21:6f:b2:ec:f3:e7:ac:bb:f0:f8:29:5d:94:3b:
e6:2f:c6:8e:f6:41:c3:7c:e2:1f:f1:e4:d2:8b:be:
f3:cf:31:11:7f:46:8a:7b:c5:95:0c:28:8c:a6:31:
09:47:e5:17:03:08:8a:50:e8:01:22:20:e1:b5:d5:
a9:07:8e:c5:93:a1:18:b9:99:c9:f6:43:76:3e:d7:
ab:0b:83:df:7d:79:0c:32:16:ec:56:1d:64:95:28:
15:4c:97:a0:5e:ed:e3:b5:e5:e5:a4:94:87:08:b4:
98:13:31:ac:29:0a:ab:64:8b:ba:1b:33:73:83:de:
20:0f:4f:ae:0f:ba:7c:e3:39:7e:42:29:93:c2:69:
8e:69:b4:0d:46:2f:6c:5d:58:59:5b:7e:46:11:7d:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:97:07:99:70:49:CF:31:BD:87:A8:22:BA:43:57:B7:53:30:02:15
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33342e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.34.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:af:6e:ef:7f:38:40:c5:2d:27:3f:f7:0e:09:05:96:ef:2c:
db:f5:78:c5:73:38:97:3e:6b:d8:4b:ff:a8:ef:c6:4a:1d:21:
1b:dc:1a:eb:d4:d1:50:e7:d7:e3:2c:fe:3b:ca:91:52:79:2b:
35:0e:10:c5:b7:f4:32:fc:a3:4f:18:5c:50:19:be:ea:17:cc:
47:56:46:bd:87:43:9a:eb:12:6e:5d:2c:53:9a:8b:ef:ad:5d:
eb:80:07:ef:60:c1:5c:08:06:a6:6f:63:cd:87:58:e3:98:05:
f1:c7:00:e6:e0:0f:46:98:b3:21:c2:db:97:2b:ac:c4:22:36:
47:54:e4:6e:73:41:8c:f8:d0:18:49:76:d5:aa:c2:56:22:34:
d5:69:45:0c:88:03:36:5d:0c:da:a6:61:c4:de:29:97:39:49:
4c:23:8f:46:a9:b5:e7:00:df:c2:81:e2:db:6a:dc:3b:71:e0:
4e:07:e0:41:cd:bf:ee:fd:70:57:a8:f1:77:6c:62:ad:d6:c1:
d5:c0:11:f3:a7:37:01:14:19:78:59:e4:e5:f1:85:9a:8a:0a:
01:b6:f6:f6:0e:0c:8c:32:84:b6:82:ea:d9:40:c4:ab:83:1c:
b7:1a:5c:8a:1f:4c:8a:b1:87:81:ee:ca:60:4f:37:ef:14:35:
60:aa:bb:52
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUW7Bc3MNq6Sm5PxVQZtOw/rnb5OYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyNDBaFw0yNTEyMjYxMTQ3NDBaMDMxMTAvBgNV
BAMTKEVEOTcwNzk5NzA0OUNGMzFCRDg3QTgyMkJBNDM1N0I3NTMzMDAyMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3VRvxA8CLUbyNf21Qtq4LbhNe
haZLGQdqDRmuiHZqhrA/8FgDxycbGQi4Sh0AyedESB1zqA/CHbilSgHrJfYidfdV
EI5oBu+4T/WWGoz3RJM+SLkVJL2o1qXwcVd5n/9uFLlUiBcJ3mQhb7Ls8+esu/D4
KV2UO+Yvxo72QcN84h/x5NKLvvPPMRF/Rop7xZUMKIymMQlH5RcDCIpQ6AEiIOG1
1akHjsWToRi5mcn2Q3Y+16sLg999eQwyFuxWHWSVKBVMl6Be7eO15eWklIcItJgT
MawpCqtki7obM3OD3iAPT64PunzjOX5CKZPCaY5ptA1GL2xdWFlbfkYRfT8tAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQU7ZcHmXBJzzG9h6giukNXt1MwAhUwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMyMzky
ZTMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzMTM3MzAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAtgSIwDQYJKoZIhvcNAQELBQADggEBAJ2vbu9/OEDFLSc/9w4JBZbvLNv1
eMVzOJc+a9hL/6jvxkodIRvcGuvU0VDn1+Ms/jvKkVJ5KzUOEMW39DL8o08YXFAZ
vuoXzEdWRr2HQ5rrEm5dLFOai++tXeuAB+9gwVwIBqZvY82HWOOYBfHHAObgD0aY
syHC25crrMQiNkdU5G5zQYz40BhJdtWqwlYiNNVpRQyIAzZdDNqmYcTeKZc5SUwj
j0aptecA38KB4ttq3Dtx4E4H4EHNv+79cFeo8XdsYq3WwdXAEfOnNwEUGXhZ5OXx
hZqKCgG29vYODIwyhLaC6tlAxKuDHLcaXIofTIqxh4HuymBPN+8UNWCqu1I=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:52 2025 by rpki-client