Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130342e302f32342d3332203d3e203531313637.roa
File: 34352e3133302e3130342e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: QPtGM6dx1nxhGKzk225kQXvTp9ovCh8q/sL9ObjRSn4=
Subject key identifier: CC:FD:A3:66:B0:66:6F:E5:55:E8:4B:FC:48:AB:87:81:49:17:D0:B2
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7D0914C82C063B3704DDFEF0E0128C5F7AC4C0CF
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130342e302f32342d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:31 +0000
ROA not before: Fri 27 Dec 2024 11:42:31 +0000
ROA not after: Fri 26 Dec 2025 11:47:31 +0000
asID: 51167
IP address blocks: 45.130.104.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:09:14:c8:2c:06:3b:37:04:dd:fe:f0:e0:12:8c:5f:7a:c4:c0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:31 2024 GMT
Not After : Dec 26 11:47:31 2025 GMT
Subject: CN=CCFDA366B0666FE555E84BFC48AB87814917D0B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:4c:83:5b:a6:23:10:23:f9:67:64:30:40:
9a:c9:fc:ba:89:a1:7d:bb:1a:09:9b:bf:54:4b:cb:
f0:ee:65:31:7e:0d:63:e9:21:17:a2:5e:7f:8d:ba:
a6:97:32:95:0c:ce:d4:ca:3b:04:89:ed:a6:3f:c9:
7a:4c:be:94:b1:e0:bb:43:23:49:96:fc:be:d4:f5:
b0:4e:0b:5c:92:20:54:3c:40:05:b6:d4:06:c3:59:
97:98:0b:1f:ca:6f:01:aa:05:58:c4:29:52:37:a1:
e3:b8:75:b8:67:d0:20:b3:db:ad:6a:3a:ed:7d:4b:
3e:89:33:fb:b1:26:ba:20:cd:45:87:87:57:5e:44:
a9:40:1d:dc:8c:27:b1:5f:b9:b4:3d:96:2a:f9:63:
75:13:ec:b2:6b:32:7d:fd:72:da:5c:b1:fa:09:19:
a3:7c:e6:16:ef:8b:a2:f7:e8:02:55:f8:b7:ae:fe:
05:f2:7a:c1:67:1a:95:04:a7:77:64:3f:4e:d7:26:
91:e3:90:78:90:b0:67:3c:10:4b:60:91:c8:fb:00:
1e:b8:b2:6a:d4:18:58:13:73:a4:8c:dc:0e:78:e4:
06:a4:5a:ca:69:b2:cb:95:09:cd:b7:78:66:cc:a2:
72:53:e9:f6:88:66:41:e0:df:6e:84:d8:df:a6:6d:
3b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FD:A3:66:B0:66:6F:E5:55:E8:4B:FC:48:AB:87:81:49:17:D0:B2
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130342e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.104.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ac:de:b7:ca:10:24:85:1f:62:67:57:55:4e:69:2e:6e:85:
8b:42:e8:25:d4:ec:be:21:03:c3:2c:e6:77:b7:4a:00:59:71:
ca:4a:99:d9:1f:b3:42:13:c5:ce:1d:cf:5a:11:09:2a:2d:fc:
8b:7b:49:12:33:8f:50:37:1d:58:e2:9b:99:98:0e:61:fa:71:
29:9c:0d:52:52:9e:b5:ba:97:70:62:12:15:bf:75:4c:8a:53:
4c:59:cc:be:2f:a4:73:f3:19:d4:67:08:91:59:4a:56:6f:b2:
12:de:4d:09:a1:76:46:d4:5c:e1:3a:bf:7a:ef:5d:af:15:3f:
17:26:60:3b:7c:f4:3d:62:b6:e0:e8:27:ec:0e:b0:de:2f:33:
eb:61:20:6d:da:97:b2:af:44:e8:74:18:70:fc:59:4a:a8:b7:
59:fc:e2:98:35:ff:40:64:c3:5c:69:c3:7d:79:fe:94:b2:27:
99:6a:8e:e7:4d:5e:bf:01:93:ec:bc:d4:2a:aa:b5:25:70:7d:
38:dc:71:e3:77:22:a7:90:8f:17:6a:f5:df:47:98:13:7e:e8:
60:ae:d3:c7:e6:46:75:0a:8b:a4:85:0d:12:c8:91:32:4d:af:
e2:00:ca:be:aa:75:83:14:e9:57:92:06:67:44:b1:83:e7:8b:
c8:18:95:ed
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUfQkUyCwGOzcE3f7w4BKMX3rEwM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMzFaFw0yNTEyMjYxMTQ3MzFaMDMxMTAvBgNV
BAMTKENDRkRBMzY2QjA2NjZGRTU1NUU4NEJGQzQ4QUI4NzgxNDkxN0QwQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdxkyDW6YjECP5Z2QwQJrJ/LqJ
oX27Ggmbv1RLy/DuZTF+DWPpIReiXn+NuqaXMpUMztTKOwSJ7aY/yXpMvpSx4LtD
I0mW/L7U9bBOC1ySIFQ8QAW21AbDWZeYCx/KbwGqBVjEKVI3oeO4dbhn0CCz261q
Ou19Sz6JM/uxJrogzUWHh1deRKlAHdyMJ7FfubQ9lir5Y3UT7LJrMn39ctpcsfoJ
GaN85hbvi6L36AJV+Leu/gXyesFnGpUEp3dkP07XJpHjkHiQsGc8EEtgkcj7AB64
smrUGFgTc6SM3A545AakWsppssuVCc23eGbMonJT6faIZkHg326E2N+mbTsDAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUzP2jZrBmb+VV6Ev8SKuHgUkX0LIwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMzAy
ZTMxMzAzNDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAtgmgwDQYJKoZIhvcNAQELBQADggEBAI6s3rfKECSFH2JnV1VOaS5uhYtC
6CXU7L4hA8Ms5ne3SgBZccpKmdkfs0ITxc4dz1oRCSot/It7SRIzj1A3HVjim5mY
DmH6cSmcDVJSnrW6l3BiEhW/dUyKU0xZzL4vpHPzGdRnCJFZSlZvshLeTQmhdkbU
XOE6v3rvXa8VPxcmYDt89D1ituDoJ+wOsN4vM+thIG3al7KvROh0GHD8WUqot1n8
4pg1/0Bkw1xpw315/pSyJ5lqjudNXr8Bk+y81CqqtSVwfTjcceN3IqeQjxdq9d9H
mBN+6GCu08fmRnUKi6SFDRLIkTJNr+IAyr6qdYMU6VeSBmdEsYPni8gYle0=
-----END CERTIFICATE-----
Generated at Thu Apr 3 05:15:42 2025 by rpki-client