Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa
File: 34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa (raw, json)
Hash identifier: UTbOyeHx4RaWC22Nmae5n/fzqdBRRy34wF7HUf7zePY=
Subject key identifier: 2D:AA:CB:FE:71:AB:A2:90:63:88:F9:80:B0:70:92:EB:93:43:0B:7A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0C16593B565BB9F2C39166862233E217D6341755
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa
Signing time: Fri 27 Dec 2024 11:47:20 +0000
ROA not before: Fri 27 Dec 2024 11:42:20 +0000
ROA not after: Fri 26 Dec 2025 11:47:20 +0000
asID: 208046
IP address blocks: 45.134.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:16:59:3b:56:5b:b9:f2:c3:91:66:86:22:33:e2:17:d6:34:17:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:20 2024 GMT
Not After : Dec 26 11:47:20 2025 GMT
Subject: CN=2DAACBFE71ABA2906388F980B07092EB93430B7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:85:35:e4:fb:d0:21:29:ab:72:a7:cb:4a:
2e:97:d8:0f:e5:ec:bc:0c:b9:e3:90:aa:9a:2f:af:
fa:9e:a4:6b:ef:af:08:3d:97:56:e5:61:e0:9c:fd:
bd:92:f6:2e:b1:5d:d5:11:34:08:ed:06:fa:36:b8:
4a:56:13:05:47:15:65:44:41:89:91:c3:f5:0d:40:
10:71:51:8b:2e:fd:e1:7f:88:ec:6f:81:77:78:f1:
31:a7:70:00:86:46:f2:f4:c9:37:1b:f4:7d:92:40:
08:25:72:df:0f:27:9a:8e:32:10:9d:85:e8:b7:48:
e7:4e:68:5b:76:08:5c:6e:0c:17:d7:6f:e2:5d:cb:
91:f8:13:b3:3b:a5:0e:45:7d:9c:c7:f7:69:9a:c1:
0a:a8:f8:50:b7:f5:77:36:12:bc:7c:3c:d8:17:12:
29:ec:1f:6b:de:87:76:5a:76:d7:7c:37:22:9c:28:
6c:22:d5:ab:82:45:cc:a6:c1:65:14:4c:46:17:5b:
8d:8a:b7:13:f6:bd:42:51:32:a9:81:71:ea:b1:f5:
c2:46:b1:51:81:81:ed:60:13:d1:79:82:60:7e:62:
36:83:3c:61:ae:1b:84:b8:ed:c4:06:21:ed:3a:8c:
e6:4e:e8:6a:ec:24:f2:6d:c7:10:d2:75:af:cc:07:
05:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AA:CB:FE:71:AB:A2:90:63:88:F9:80:B0:70:92:EB:93:43:0B:7A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d1:a7:84:f2:f3:d0:c6:aa:0f:68:c1:11:47:46:e9:da:a3:
30:93:2a:32:d0:b0:3f:f7:58:84:b1:92:97:63:61:fd:18:a6:
71:4f:c3:18:ab:be:bf:bf:3c:c1:d6:81:82:ba:33:e3:6f:ba:
16:b2:15:e4:e6:d2:ea:5a:1c:ce:84:e3:80:da:89:2a:d6:b5:
aa:75:db:e4:ae:62:cd:87:55:04:25:c4:da:41:ae:09:c9:79:
53:fd:68:9f:92:73:01:3c:c8:14:ef:96:96:36:d1:18:35:ac:
e6:c5:75:56:a1:21:b2:33:ce:05:14:bc:64:88:c3:dc:65:83:
d8:9e:92:1f:55:d1:96:34:b6:23:c2:15:6c:23:93:7f:24:46:
44:2e:63:98:c9:a3:a5:58:ba:dc:00:5b:cf:63:e4:15:60:0b:
6e:e3:47:6d:47:b5:87:e7:e2:08:cb:55:39:b4:ff:19:15:14:
4e:bd:77:be:ee:53:68:d9:85:57:11:80:83:4f:63:82:cd:7e:
a7:31:58:87:88:9d:9b:a5:cf:dd:15:78:0e:9d:ed:33:88:35:
58:9e:87:d4:47:f0:89:03:fd:70:58:77:8c:09:a2:f3:0e:6b:
85:da:b2:e8:2b:6f:d7:81:20:21:fb:bd:01:de:ad:04:5d:30:
ab:63:93:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:38 2025 by rpki-client