Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35372e302f32342d3234203d3e203631333137.roa
File: 34352e31332e35372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: CBvoP0uj+gJ0FQoCjYpUi6sMUMwFSebT7jBU2nX7cdc=
Subject key identifier: 53:8C:9F:7B:1C:67:80:E5:3E:48:BA:C8:80:6C:5D:98:03:C1:3A:CC
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 18A222420AE188EFA70AFECF9F68108FCD4D7A37
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35372e302f32342d3234203d3e203631333137.roa
Signing time: Fri 27 Dec 2024 11:47:37 +0000
ROA not before: Fri 27 Dec 2024 11:42:37 +0000
ROA not after: Fri 26 Dec 2025 11:47:37 +0000
asID: 61317
IP address blocks: 45.13.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:a2:22:42:0a:e1:88:ef:a7:0a:fe:cf:9f:68:10:8f:cd:4d:7a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:37 2024 GMT
Not After : Dec 26 11:47:37 2025 GMT
Subject: CN=538C9F7B1C6780E53E48BAC8806C5D9803C13ACC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:d5:12:33:1b:fa:d5:69:97:d2:fd:c7:e3:
82:b8:6b:fe:a1:bb:02:4c:02:5f:ab:da:7e:6f:ae:
9b:fa:a7:9c:18:c9:72:fd:9f:7e:02:c8:cb:83:f4:
74:14:39:b3:26:87:ae:98:58:54:11:77:52:b9:d2:
5e:9f:1f:4e:62:df:da:e7:42:f0:71:d5:49:80:bb:
25:06:43:4c:31:ef:ab:e3:69:20:e0:b3:cf:c9:c3:
26:12:3c:e9:74:f0:55:53:a1:56:66:ad:55:f3:f7:
3f:bf:bb:4b:40:db:d1:73:45:df:fb:17:9a:80:2b:
fa:b4:72:d3:6a:b7:6d:a2:0a:7a:53:e4:8d:ec:ca:
8c:94:9f:30:b8:5e:34:07:1d:f0:be:b0:49:70:5e:
02:61:81:94:81:34:fb:8a:cd:c3:8e:c0:e9:8f:04:
78:a5:7a:72:d1:7f:f9:55:e1:42:3a:72:32:e8:dc:
d5:a8:30:59:db:6f:8a:c8:3c:36:b2:29:da:c6:03:
a7:a4:85:0c:aa:db:96:f4:cc:69:a8:a7:61:b4:cb:
06:ff:1e:47:a5:45:cb:09:7b:e6:9d:bb:e6:dc:e0:
ff:7a:b5:bd:7f:6c:d3:09:1e:4c:5f:ba:d3:e7:cf:
f8:8a:f1:82:a0:11:de:32:78:2f:5d:5d:81:17:d8:
ff:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8C:9F:7B:1C:67:80:E5:3E:48:BA:C8:80:6C:5D:98:03:C1:3A:CC
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35372e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.57.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:81:4a:0d:32:bc:bb:16:c9:99:f5:68:3f:12:2c:a7:c0:aa:
3c:e8:a6:7f:2f:6b:41:13:b2:a2:87:c9:be:92:ee:ea:3e:2b:
55:83:a1:a6:66:2d:07:6b:84:1b:b0:f7:b4:7c:13:37:d2:2c:
46:48:1c:26:bf:f1:d8:f2:08:27:ad:ea:b4:3a:22:f5:2d:be:
3a:80:96:8f:35:0a:90:6c:b4:76:54:7f:f3:b6:7f:b4:22:1f:
03:29:ad:c1:a7:04:3c:df:66:19:2c:0a:c8:34:7e:6c:42:9a:
68:26:a6:c7:2e:72:83:5d:28:7a:9f:39:b5:43:35:4f:82:87:
c4:5b:ca:5d:6a:62:f9:a3:78:c2:9a:80:9e:a3:26:4e:50:1b:
fe:b0:ac:c6:dc:c7:c6:6f:96:87:3f:8f:2d:e0:0a:15:ea:e6:
0b:a3:88:fb:24:ee:cd:93:db:64:f7:73:ba:74:09:8d:ab:c2:
54:46:20:f0:54:44:1c:0f:ed:bc:99:f3:d6:71:c5:0b:2a:5e:
5a:c8:3e:da:7f:1d:ca:30:b0:3b:a7:69:19:97:5c:25:28:3b:
7e:97:2d:1d:06:41:58:11:64:76:f4:0e:45:5c:80:74:58:b2:
5b:c1:a1:a2:9f:0d:a0:fc:71:15:e4:0f:3d:56:96:78:fb:e8:
f6:f4:55:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:48:52 2025 by rpki-client