Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130372e302f32342d3332203d3e203536383736.roa
File: 34352e3133302e3130372e302f32342d3332203d3e203536383736.roa (raw, json)
Hash identifier: VYWfCembPUEOLgwyEib1I2dFmcB/dRH/DmmORVYrXMU=
Subject key identifier: CE:9D:BF:C1:D8:6C:BC:EF:E9:C0:11:F9:5D:52:EA:56:7A:11:DB:0F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4F22039FC472E162F191C74DA2745735661E2CCE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130372e302f32342d3332203d3e203536383736.roa
Signing time: Fri 27 Dec 2024 11:47:43 +0000
ROA not before: Fri 27 Dec 2024 11:42:43 +0000
ROA not after: Fri 26 Dec 2025 11:47:43 +0000
asID: 56876
IP address blocks: 45.130.107.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:22:03:9f:c4:72:e1:62:f1:91:c7:4d:a2:74:57:35:66:1e:2c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:43 2024 GMT
Not After : Dec 26 11:47:43 2025 GMT
Subject: CN=CE9DBFC1D86CBCEFE9C011F95D52EA567A11DB0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c8:56:6c:a4:fe:2f:8f:d8:09:28:23:46:56:
99:e4:b5:dd:25:8f:05:ef:31:90:5f:70:04:6f:e9:
3d:3e:7a:50:d0:ff:19:4f:37:36:3a:ef:d7:7e:e1:
4c:b7:91:58:ad:be:aa:6a:54:ef:27:b9:5c:25:9a:
6d:86:80:41:74:2f:2a:0e:ab:df:3d:93:7b:13:ab:
58:3d:f6:3a:2d:37:54:78:5e:42:4f:23:fb:b4:a4:
32:a3:79:46:98:23:6f:13:52:ef:2a:95:df:ac:ab:
98:aa:7f:6c:54:69:10:13:ff:bc:e9:6a:3b:01:fe:
af:9b:08:e8:b3:79:74:e3:4c:9c:8f:ea:56:1f:c6:
fe:64:e9:87:58:fb:a7:b1:c9:05:f1:82:38:3c:80:
e9:ca:43:ed:97:17:50:80:49:fd:ad:ec:82:4e:4f:
4b:b1:0d:4f:28:62:f8:ec:47:c5:d2:27:ba:32:6e:
fd:58:15:d8:21:15:41:d4:39:dd:86:d8:05:e5:14:
50:68:54:e2:40:79:af:93:00:ce:98:ad:df:62:6a:
78:7e:8b:b9:1f:c0:ab:b3:f5:c3:78:a3:b1:d1:6a:
a5:f3:ba:80:c3:41:a1:ae:89:1d:50:bc:e6:8c:36:
22:ac:e9:15:45:a9:9a:0d:cf:e1:4a:6d:af:cc:3f:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9D:BF:C1:D8:6C:BC:EF:E9:C0:11:F9:5D:52:EA:56:7A:11:DB:0F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130372e302f32342d3332203d3e203536383736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.107.0/24
Signature Algorithm: sha256WithRSAEncryption
69:1d:5f:13:8d:93:07:8c:30:42:88:d0:6e:02:69:58:17:28:
a0:7d:a3:92:68:55:98:a6:12:8c:dc:f3:c3:a2:58:21:71:a6:
38:66:c5:dd:a3:8e:8a:38:52:69:e2:5e:34:6c:86:72:35:69:
0d:f6:de:14:a1:f2:40:c3:5d:ae:0e:96:90:b7:44:61:5d:36:
00:a1:64:0e:7b:7b:ad:e1:8c:00:a4:04:1d:d0:6e:b0:eb:df:
29:71:41:b8:2c:87:b4:57:1f:96:ef:eb:f8:05:76:d6:8a:c2:
3a:e1:7c:5e:2a:3b:cd:f3:ae:a0:e6:2f:5f:aa:1c:c4:de:16:
e0:ab:88:7d:4e:46:d3:f2:44:15:db:dd:d2:65:47:40:96:dd:
61:f6:ca:03:fe:da:f5:bc:9f:f0:24:b9:a7:84:4a:5b:35:ac:
50:01:d6:a2:71:67:f8:dd:12:61:ae:20:6c:af:cc:49:86:da:
df:27:82:9c:9a:8e:8b:9a:86:4e:5d:95:2c:ce:6e:6a:6f:b7:
74:21:8a:03:2f:bc:92:4a:ca:3f:c0:c1:aa:a4:33:80:0d:94:
c3:cf:df:1f:69:d4:39:2f:bb:b4:90:14:af:65:67:10:95:03:
80:d9:d5:88:0a:4c:22:df:70:28:66:a4:98:e2:10:3b:42:4f:
aa:61:5f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:13:28 2025 by rpki-client