Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133322e3135372e302f32342d3234203d3e203437353833.roa
File: 34352e3133322e3135372e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: AwUoYm5dDqQCmIOssX9Tocw9G5RmnEUmfs5drA499ao=
Subject key identifier: 9D:03:6E:15:34:DC:45:7E:A3:14:B9:D2:5E:C4:ED:58:D4:43:7B:44
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5F9238BDAD3A60B27EC454AB97DEB76DFBB02465
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133322e3135372e302f32342d3234203d3e203437353833.roa
Signing time: Fri 27 Dec 2024 11:47:44 +0000
ROA not before: Fri 27 Dec 2024 11:42:44 +0000
ROA not after: Fri 26 Dec 2025 11:47:44 +0000
asID: 47583
IP address blocks: 45.132.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:92:38:bd:ad:3a:60:b2:7e:c4:54:ab:97:de:b7:6d:fb:b0:24:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:44 2024 GMT
Not After : Dec 26 11:47:44 2025 GMT
Subject: CN=9D036E1534DC457EA314B9D25EC4ED58D4437B44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:32:25:98:06:84:ff:ef:ac:4b:8b:a6:bc:
1f:95:33:c9:31:5f:6e:aa:50:9b:39:05:76:31:d1:
23:6a:7a:f2:76:d3:cc:47:29:c7:e8:8c:9e:ab:ae:
1e:05:73:85:aa:8c:a8:de:ca:2e:53:89:64:01:21:
50:8d:5d:a9:60:b0:fd:23:62:73:65:6c:d3:4c:9e:
d5:f4:ce:30:98:fb:91:49:7e:cd:73:5c:34:c2:ce:
75:92:a5:2a:59:ba:62:6a:d0:7f:41:88:91:78:db:
e2:9a:5e:06:cd:35:53:63:39:d5:b1:0a:aa:ff:6e:
a1:d9:97:1e:e5:c2:57:2b:1b:0b:2e:67:20:5b:00:
27:b0:c4:04:06:07:88:02:35:f3:18:09:6c:ac:87:
d4:9c:ee:c3:99:1e:ef:e0:90:1a:6a:05:2b:6d:97:
71:f3:e8:51:23:53:15:92:3d:01:95:6d:ff:83:63:
0d:20:21:ab:c0:d5:3c:e8:82:a8:11:03:51:77:07:
c2:ae:50:1f:92:c6:ee:5e:33:ba:be:cc:e2:ed:4e:
3e:db:af:9d:6b:5a:fd:9e:bf:db:cf:9d:3f:38:12:
a4:ba:f3:df:d6:00:cb:e9:6a:88:56:ad:3f:4f:67:
99:34:84:36:81:e0:76:28:b2:96:97:18:27:26:f3:
9f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:03:6E:15:34:DC:45:7E:A3:14:B9:D2:5E:C4:ED:58:D4:43:7B:44
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133322e3135372e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.157.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:d9:f6:22:b5:eb:90:30:ec:b1:2c:79:14:c5:23:f5:86:87:
81:e7:b3:2a:02:69:cf:70:8f:d8:e4:80:40:06:f1:c5:7f:5f:
19:a0:26:dc:8f:41:ce:8e:82:86:48:0d:78:aa:2d:a9:2f:4d:
64:4c:ba:bd:c0:71:48:99:53:6b:91:e3:02:a3:b5:08:94:ab:
20:fa:f7:77:79:40:aa:82:e0:c2:bd:08:1b:12:9b:5a:cc:2a:
af:a5:5d:ac:82:eb:0a:c1:e0:c6:0b:7c:70:72:94:b5:29:7c:
37:41:44:aa:1a:4c:0d:be:8d:e8:65:93:2f:28:cb:62:76:f2:
ad:3b:2a:53:2f:af:af:cf:27:81:de:28:1e:b8:ce:58:34:09:
bb:d6:d6:34:39:ff:9c:fb:e2:4f:c2:84:5d:89:15:09:fc:60:
a4:3b:ad:52:28:8d:ed:4f:b5:ac:cc:f5:4c:68:a8:5b:64:6d:
8c:9e:36:48:ab:5e:d1:c7:08:0b:e5:1b:d0:c3:05:a4:58:0d:
09:1e:50:b2:75:09:25:39:0a:f0:45:9a:84:aa:db:da:99:98:
5b:0c:d3:8e:e2:8e:76:b6:4e:a6:61:0f:d4:62:f6:61:11:59:
c4:8c:b0:34:da:2f:ca:12:ab:46:b4:0e:c0:12:35:3d:cd:3e:
f6:72:ee:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:30 2025 by rpki-client