Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e3233342e302f32342d3234203d3e20313336373837.roa
File: 34352e31332e3233342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: mWuYomP7DNUpSnzTosIXMhc6wTmthd2mcEb5vqdCEPs=
Subject key identifier: F7:F0:18:99:EA:F3:D0:46:D9:66:0B:BA:32:5A:04:96:B1:F8:9A:99
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7A2470458A41CE7EB3359E3D430681D9F3F87791
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e3233342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:13 +0000
ROA not before: Fri 27 Dec 2024 11:42:13 +0000
ROA not after: Fri 26 Dec 2025 11:47:13 +0000
asID: 136787
IP address blocks: 45.13.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:24:70:45:8a:41:ce:7e:b3:35:9e:3d:43:06:81:d9:f3:f8:77:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:13 2024 GMT
Not After : Dec 26 11:47:13 2025 GMT
Subject: CN=F7F01899EAF3D046D9660BBA325A0496B1F89A99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5b:72:4c:2b:7b:d6:b7:c5:bd:60:9e:df:37:
71:99:03:7a:61:b5:6f:b8:ae:35:ad:29:31:62:e1:
4b:03:b2:3e:57:00:6a:ec:85:83:45:e7:2f:6d:6b:
1c:f5:7a:3c:fd:83:77:34:5b:46:0a:a3:8f:80:f2:
36:4d:ff:65:8c:58:0c:66:d4:9f:06:ac:d2:df:47:
cf:8e:b0:e9:d7:2b:f2:0d:83:68:86:d0:e4:d1:13:
cf:df:76:f2:90:a8:c8:97:6f:0e:c6:7c:80:6d:67:
ca:1e:ed:fc:ed:a6:ee:c8:31:5c:04:88:2b:e3:1b:
c1:9b:db:24:4b:44:88:4b:25:a6:7d:07:e3:1a:db:
2a:0f:bb:f2:02:80:6a:36:1e:cd:40:19:f9:d5:64:
67:7c:3e:05:e5:d3:ab:d7:72:e0:11:56:d3:ef:0d:
3c:fa:3e:55:05:38:dc:e5:65:a5:0b:ac:ff:c2:cc:
f6:ef:f1:48:fc:cd:57:f2:20:32:cc:59:5d:e2:98:
48:ad:5b:eb:4e:b3:18:ff:e4:d9:2a:d5:53:fe:cc:
e6:03:5a:fc:be:0d:e8:54:dc:d6:b0:6c:69:93:22:
1a:2e:84:78:e1:28:ad:90:09:6d:b9:0c:40:bc:a3:
3c:9c:e1:ba:d1:e1:b8:5a:d8:4b:07:19:d9:45:6e:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F0:18:99:EA:F3:D0:46:D9:66:0B:BA:32:5A:04:96:B1:F8:9A:99
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e3233342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.234.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:4d:5d:84:51:b1:a2:8e:be:18:75:2e:21:30:60:5b:86:83:
43:7c:77:ba:65:61:c3:c5:1d:a9:a5:b7:7d:72:62:fc:6c:b7:
03:f7:97:c4:01:16:fc:f1:a2:fe:cc:96:4c:78:01:51:29:e5:
b6:73:96:11:35:41:d4:ee:4b:7a:2d:21:e9:bc:2f:57:0f:02:
d1:aa:59:64:bf:b7:60:60:2c:e9:c6:ab:10:86:99:1a:c5:dc:
ba:f1:67:b0:d7:b4:49:20:f1:36:a2:c7:d5:68:ac:f4:5c:64:
29:f6:1d:18:09:88:76:05:2b:73:5b:eb:4a:fa:67:74:53:4f:
9f:08:7c:e0:f8:9c:9d:8b:fe:9d:50:01:7f:1e:5d:12:06:b8:
0a:86:a2:52:c1:a0:84:cd:ae:c8:b7:07:e3:3c:4a:64:02:9c:
92:c5:32:a3:e4:54:cb:14:78:aa:c9:2b:5e:be:01:26:8e:89:
84:db:37:5c:c7:e5:7b:b1:44:00:f2:0e:ee:7d:d1:8d:10:8a:
a6:49:33:20:70:9a:41:e6:f7:5d:76:63:45:1d:11:4b:d8:86:
53:e3:c3:84:e7:b8:19:c1:00:60:00:be:92:3b:98:c2:f0:ae:
48:37:ea:ac:94:b7:ea:b2:fd:85:61:c2:c5:c6:c6:e4:b8:fa:
3b:27:95:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:15 2025 by rpki-client