Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139322e302f32342d3332203d3e203531313637.roa
File: 34352e3133372e3139322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: +e45PL6doI2W4sYLWdvOCTuAjQwjKBo2L93mQHni8ww=
Subject key identifier: 00:18:6B:65:67:88:87:BA:1C:41:2B:2E:93:4D:7C:66:CB:8A:0A:1B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1B843BC15A9D8DEFC928DEBF6300CFEFF573CE95
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139322e302f32342d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:39 +0000
ROA not before: Fri 27 Dec 2024 11:42:39 +0000
ROA not after: Fri 26 Dec 2025 11:47:39 +0000
asID: 51167
IP address blocks: 45.137.192.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:84:3b:c1:5a:9d:8d:ef:c9:28:de:bf:63:00:cf:ef:f5:73:ce:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:39 2024 GMT
Not After : Dec 26 11:47:39 2025 GMT
Subject: CN=00186B65678887BA1C412B2E934D7C66CB8A0A1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:90:ed:1d:10:8e:7b:e1:5f:d1:19:df:9e:
8f:26:42:bb:60:5f:d4:e0:d8:10:84:9e:c9:18:37:
08:08:77:c6:6d:d4:48:17:ac:69:69:4d:83:71:0b:
47:79:37:01:08:cc:76:4a:a9:2a:36:7f:a1:5b:19:
b0:65:a1:9a:8d:a6:d6:6c:8b:9a:d4:9d:d4:33:9c:
5c:ed:f5:c8:f8:66:da:cf:07:2e:f8:80:09:08:1b:
d1:e1:43:37:5b:44:e6:08:92:85:48:21:51:dc:b2:
ac:62:4e:2b:3f:82:8a:fa:57:b5:a5:93:8f:36:3d:
c5:36:19:29:a9:70:02:bd:da:9f:e4:b2:78:93:6e:
cc:45:23:e3:a8:cd:77:71:90:1a:64:b7:cc:16:b5:
17:a4:b4:9d:71:26:d9:86:a7:4b:4d:8b:3a:48:2c:
cc:cd:cb:95:fa:60:ae:40:56:9d:38:52:f0:86:32:
7f:dd:01:f8:ee:7a:d5:0e:74:22:a5:a8:ca:c5:90:
83:91:33:3b:94:6c:6f:fd:0e:44:ba:f0:77:55:b2:
a9:9d:4a:d1:e3:c8:a5:74:00:3f:37:c0:e3:3e:4f:
15:67:88:04:62:9b:9d:ac:3d:95:af:e7:78:46:60:
d4:dc:0a:81:f7:8e:f9:dd:61:54:88:fb:ad:e1:a6:
5c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:18:6B:65:67:88:87:BA:1C:41:2B:2E:93:4D:7C:66:CB:8A:0A:1B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139322e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.192.0/24
Signature Algorithm: sha256WithRSAEncryption
55:51:ae:38:c8:90:aa:6a:f7:33:5e:a3:d0:46:78:b8:31:a5:
ed:62:61:54:b9:de:9e:81:0c:eb:6e:9c:8a:79:5b:12:68:a0:
24:66:a3:e8:2c:a5:d4:07:af:be:bb:bc:82:3b:91:4a:88:e1:
4f:9d:e1:89:63:f2:68:0b:62:33:e5:89:e4:9e:cd:7b:13:6f:
40:60:e9:5b:08:26:37:f4:12:04:42:6f:59:6e:04:78:89:ea:
f7:ca:f4:a8:06:51:28:cb:a5:4a:ee:03:83:18:6e:30:65:a5:
eb:37:fb:d6:86:19:51:d2:71:9d:3e:d7:89:00:2f:9f:31:95:
6e:e4:2b:2d:7c:c8:c0:06:5f:8d:b3:99:cf:98:eb:46:9e:31:
3e:91:24:be:d5:f7:70:54:4a:cb:83:cf:05:22:f6:bc:44:d4:
6a:d6:e1:dd:47:77:da:43:f4:8b:33:34:ae:cb:c9:94:64:c1:
c3:14:cf:e9:3f:ec:4f:2b:5b:0c:d5:67:3b:76:12:d8:d3:62:
72:1a:ac:a5:20:69:92:22:20:49:85:6f:f8:70:1b:b8:06:79:
42:25:c2:b4:29:d6:6d:86:a9:39:c2:04:87:bc:1b:5b:f1:cf:
b9:a8:ea:d3:84:24:68:96:36:67:75:6e:6b:26:8d:ba:ae:9e:
db:4d:05:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:12:21 2025 by rpki-client