Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232372e302f32342d3234203d3e20383334.roa
File: 34352e3133342e3232372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 6MZScqrzaaa3d1WmnGh0OPTVdy8Zei/YkpfKLJeNqSU=
Subject key identifier: 5B:2A:59:C6:4B:A1:AB:31:F0:A0:63:45:F0:78:BC:AB:75:D9:F3:BB
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 605E527919E7B487671B2CD8BB3BD23D2E21C73D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232372e302f32342d3234203d3e20383334.roa
Signing time: Fri 27 Dec 2024 11:47:25 +0000
ROA not before: Fri 27 Dec 2024 11:42:25 +0000
ROA not after: Fri 26 Dec 2025 11:47:25 +0000
asID: 834
IP address blocks: 45.134.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:5e:52:79:19:e7:b4:87:67:1b:2c:d8:bb:3b:d2:3d:2e:21:c7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:25 2024 GMT
Not After : Dec 26 11:47:25 2025 GMT
Subject: CN=5B2A59C64BA1AB31F0A06345F078BCAB75D9F3BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:3a:a4:73:f9:0f:d9:f6:c2:e1:56:dc:df:
b2:d4:07:55:47:0e:a9:2b:24:80:1b:4b:49:54:97:
68:0c:9a:6b:47:31:ed:bd:1c:a3:38:ec:79:d7:ed:
4d:9b:aa:b7:e0:f8:70:d8:0b:b3:87:56:8e:37:f2:
82:44:7e:f4:57:44:8c:2e:c7:e3:61:57:7a:e2:47:
fe:28:74:af:74:f5:1c:6c:f5:75:60:11:df:7a:e8:
52:e9:e2:ed:53:59:c7:f0:ef:e3:87:d4:52:9c:6b:
8b:a3:5b:45:22:8e:9b:9b:10:38:c6:13:84:d9:88:
7e:18:18:f2:71:12:2a:f9:a3:93:02:94:4f:84:32:
37:8a:e4:da:9c:6a:aa:47:95:1c:8c:2b:d0:bc:79:
7b:f0:a7:62:08:22:ea:06:a9:ee:1a:ac:e7:47:09:
a4:c6:b2:eb:18:0d:07:d5:59:6a:73:20:f3:89:58:
ba:d7:1a:cf:12:73:28:6d:5d:e8:c7:25:37:f4:ea:
b6:77:82:30:a4:35:1b:d1:d2:d9:28:59:bd:fc:d2:
c6:0f:a7:99:37:c4:27:86:18:61:fd:e4:e4:e4:09:
a8:7d:b8:cf:32:ec:9f:39:71:27:3f:85:a0:fe:61:
ff:2a:d8:05:92:ee:18:38:97:58:d1:f9:46:53:24:
c6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2A:59:C6:4B:A1:AB:31:F0:A0:63:45:F0:78:BC:AB:75:D9:F3:BB
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.227.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b9:0a:44:f9:10:d3:dd:d4:13:e8:71:12:19:b1:05:02:14:
a1:42:e0:2a:bf:eb:dc:d2:d3:11:68:d1:33:ce:a8:27:75:25:
46:65:98:73:89:b1:04:94:ed:d1:b9:d9:5a:70:13:21:e5:be:
76:83:d2:07:e8:3a:11:69:dd:b6:95:52:b6:1d:0d:73:8e:8a:
05:ab:b9:79:69:8b:32:a5:4e:5c:64:a1:c0:2e:f2:ab:c2:bc:
d9:df:88:07:d4:3d:08:8b:9e:63:65:ba:62:4b:12:97:cc:49:
27:0e:6b:3d:40:99:eb:cd:24:8c:e5:d9:f0:2a:9f:8b:45:9d:
e3:e5:f5:75:b6:e9:f3:ab:df:c0:fa:a7:85:02:4b:9f:9d:53:
cb:b1:54:d2:ba:f3:33:19:ec:aa:c9:1f:13:a6:64:5e:14:95:
42:fb:20:81:78:08:f6:be:8b:53:68:22:b4:12:f3:f5:05:6a:
08:af:0c:a5:bf:63:59:8f:e0:36:31:5e:bc:7a:95:2d:1d:e1:
dd:d7:53:53:1d:ae:eb:fa:2c:09:40:82:2e:c1:05:bf:d2:3e:
7b:7c:78:7d:a8:6b:c4:7f:db:6b:30:0e:05:7f:95:af:be:6c:
59:f9:64:70:e1:2e:f6:99:66:d9:11:d2:87:c7:4e:0e:d6:2b:
a9:72:b7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:28:24 2025 by rpki-client