Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130352e302f32342d3234203d3e203632323430.roa
File: 34352e3133302e3130352e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: iMUKtSdliK3CmFsqVoXsbZhXYbVnBwfyROmoTDox05w=
Subject key identifier: 29:1D:C1:A6:76:B1:8F:1E:0A:FB:01:97:46:75:14:0D:D3:09:6E:68
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4E3279210CEE11F58AB6426A89888CA40AEF7533
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130352e302f32342d3234203d3e203632323430.roa
Signing time: Fri 27 Dec 2024 11:47:11 +0000
ROA not before: Fri 27 Dec 2024 11:42:11 +0000
ROA not after: Fri 26 Dec 2025 11:47:11 +0000
asID: 62240
IP address blocks: 45.130.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:32:79:21:0c:ee:11:f5:8a:b6:42:6a:89:88:8c:a4:0a:ef:75:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:11 2024 GMT
Not After : Dec 26 11:47:11 2025 GMT
Subject: CN=291DC1A676B18F1E0AFB01974675140DD3096E68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:39:43:0f:53:1b:5e:a1:d1:8c:1e:05:f5:
39:b6:2e:41:a8:2b:99:b1:fb:7f:71:22:5e:12:75:
f5:f3:2f:23:fd:e2:da:76:92:73:39:9d:36:08:7e:
a1:4b:e9:c0:4a:3e:5e:79:c8:ba:80:2d:bd:12:58:
06:7e:f0:50:bd:f1:46:3e:bb:d9:97:93:5b:08:9a:
a3:a8:1f:23:c6:d0:53:f8:13:c5:ff:b5:c3:50:d8:
8a:ef:6c:f5:24:8d:48:7f:b7:63:f3:2b:5f:fe:bc:
c5:83:14:d5:8b:b8:29:b2:93:b1:80:18:20:92:99:
47:5d:55:ba:bc:c8:c2:ab:7c:e3:84:96:5f:25:45:
bb:8e:70:f7:e8:02:7f:e1:dc:5d:6c:57:e7:fd:4c:
64:9a:69:33:04:47:94:df:6f:72:76:88:51:58:ff:
8e:d7:70:a1:cd:a4:f4:77:d6:d3:6d:01:45:cb:20:
d6:a9:7f:5f:35:43:e8:d7:81:7d:8f:f7:86:4f:97:
18:dc:e5:21:ac:17:46:65:c6:f2:c6:bc:a8:c9:94:
fe:ba:a1:80:3f:b2:90:f7:1b:5a:4e:c4:a1:75:87:
3c:af:b7:8f:1b:a4:67:57:f0:6e:7e:fd:f5:b4:9c:
d1:01:53:05:32:0e:a4:11:7c:d4:f2:3f:22:31:50:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1D:C1:A6:76:B1:8F:1E:0A:FB:01:97:46:75:14:0D:D3:09:6E:68
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130352e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.105.0/24
Signature Algorithm: sha256WithRSAEncryption
76:50:5d:32:01:6d:b5:09:1b:bb:49:5f:a1:f0:d6:dd:ea:1c:
18:e7:3c:0e:44:c8:07:08:8a:79:52:70:5d:a7:65:69:b3:5a:
a1:87:95:3f:fa:96:09:79:a9:31:ba:07:6d:8b:e0:b1:eb:55:
3e:e8:27:89:8a:41:1a:12:e0:c4:23:66:e5:5b:f0:14:51:3d:
45:6f:da:aa:c6:5c:c1:27:2c:b9:93:e1:cf:37:73:e2:11:6f:
47:49:56:52:af:90:7a:be:5d:95:3f:14:04:34:12:c3:7f:5d:
47:27:fe:fb:25:8d:35:99:6c:14:b0:2c:17:f5:69:fe:e2:f9:
e1:c8:90:61:81:b8:d0:4d:32:f1:64:ea:ef:2f:19:83:5b:9d:
e1:56:23:ef:10:7f:f9:20:b1:d7:f1:08:cc:e0:ac:ba:48:c0:
84:c7:55:a4:34:d9:f6:d8:a4:5e:85:36:17:35:34:a1:4c:3b:
1a:91:51:71:40:35:76:85:ec:da:3a:e4:19:9d:53:a4:19:2a:
2b:aa:2a:9b:f7:ea:70:63:3c:10:9d:cb:75:d5:8f:4c:86:15:
4c:fa:71:3b:1e:11:96:26:52:8d:fc:91:14:39:9c:28:33:64:
99:f2:ca:dc:74:25:23:c1:b7:54:8a:12:96:d6:c9:3a:02:0a:
0a:0b:74:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:18:31 2025 by rpki-client