Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130362e302f32342d3234203d3e20383334.roa
File: 34352e3133302e3130362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: m6C2rMycsENSsxaShJLc7rvl3QJ/Vh2B6SIF4TyOZso=
Subject key identifier: 45:E3:7C:02:18:8F:09:54:84:CC:64:A0:46:19:9F:92:FD:76:67:3C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 411A8DB509E7115321188A1DAF25AE6719B198BE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130362e302f32342d3234203d3e20383334.roa
Signing time: Fri 27 Dec 2024 11:47:11 +0000
ROA not before: Fri 27 Dec 2024 11:42:11 +0000
ROA not after: Fri 26 Dec 2025 11:47:11 +0000
asID: 834
IP address blocks: 45.130.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:1a:8d:b5:09:e7:11:53:21:18:8a:1d:af:25:ae:67:19:b1:98:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:11 2024 GMT
Not After : Dec 26 11:47:11 2025 GMT
Subject: CN=45E37C02188F095484CC64A046199F92FD76673C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c7:1d:d0:64:3b:84:2e:b7:27:11:30:d2:18:
39:4e:f3:b9:d0:70:a7:c9:50:2b:59:db:1a:66:e0:
21:f8:0a:87:0c:58:6e:dc:2b:94:e2:38:f1:05:df:
89:d2:55:ee:95:79:b1:9c:c9:37:9d:91:03:e3:6c:
e8:99:39:89:8b:21:1f:85:9c:ce:c2:02:fd:d0:c2:
e3:18:3c:ae:9a:21:fb:7c:2f:70:5b:29:ea:e7:b4:
21:7b:51:0e:a9:cf:6c:3e:8b:1a:b2:1d:85:80:89:
b5:dd:8a:9a:67:85:50:f0:fa:97:70:29:bd:02:b6:
67:68:f8:2b:23:31:7f:39:3c:e6:93:19:c3:65:40:
2e:a3:09:3b:73:9a:05:09:f9:0f:c1:63:c4:ab:89:
68:f3:9c:db:10:45:36:4e:fd:c9:c4:4a:ba:c4:55:
b8:9b:81:94:2b:51:62:58:15:af:9b:06:b0:75:f4:
0c:07:6d:9d:c0:34:ec:6f:37:19:ba:1d:0c:1f:42:
16:a7:7d:a5:ce:d1:99:21:77:52:5a:3c:2f:3e:24:
53:c8:72:01:fd:9a:f5:4a:70:dd:34:06:12:93:1b:
81:c4:a1:0a:b3:19:c0:57:61:31:a0:31:10:5d:40:
54:ad:ec:3e:dc:4d:b2:b4:b4:65:57:55:26:11:0d:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E3:7C:02:18:8F:09:54:84:CC:64:A0:46:19:9F:92:FD:76:67:3C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.106.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:11:46:5d:b1:73:d1:c7:a2:54:ed:66:15:a2:99:3e:f1:5c:
ea:86:59:6f:a0:e8:ab:d5:92:0e:cd:a6:2f:31:6e:eb:f5:0d:
06:41:8c:cb:46:c8:68:c6:30:91:da:04:15:7f:53:28:d8:e3:
0c:86:ae:f8:4e:63:5f:9f:8c:b9:5e:3d:8e:53:62:c5:c3:d8:
c2:01:3b:3e:61:ec:e4:ab:08:bf:a5:c0:fe:15:09:1f:7c:3b:
71:86:e6:8c:15:19:d6:cd:f3:4b:01:96:a8:07:1d:ed:2e:48:
32:5c:3f:62:8a:de:e0:dc:fe:76:7c:c9:67:e3:e3:98:19:f0:
c4:3e:91:14:27:9f:ac:f9:7b:4a:bb:15:bd:fd:d3:26:15:e7:
de:07:49:7a:9e:43:87:ad:b3:d8:ee:c2:9b:78:c1:86:1d:b1:
c4:80:29:64:ef:6f:07:93:d6:8b:1b:2f:d3:15:af:86:df:12:
48:bf:98:f6:41:9a:33:43:25:44:e9:dd:80:a2:29:7f:5a:12:
59:d0:04:a4:04:27:bc:6e:60:33:57:c4:e4:dc:90:be:15:39:
3e:d6:7d:83:f4:1b:1f:92:91:85:92:8e:57:93:1c:b8:00:65:
4e:b9:d2:44:1a:5f:a2:df:56:37:b7:b3:85:bb:a8:3a:76:0b:
34:78:c3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:11:18 2025 by rpki-client