Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138352e302f32342d3332203d3e203531313637.roa
File: 34352e3134302e3138352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: FobhWDXorhM/MEDb7LUv4Gc9xU3fOeyttAkW0mwvw/c=
Subject key identifier: 05:AF:6F:DD:97:0A:AE:32:A3:0D:63:7C:2F:E3:AB:F7:13:E7:5C:38
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2A4BE4D0892B43D002290D520716C7BCE159E18F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138352e302f32342d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:10 +0000
ROA not before: Fri 27 Dec 2024 11:42:10 +0000
ROA not after: Fri 26 Dec 2025 11:47:10 +0000
asID: 51167
IP address blocks: 45.140.185.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:4b:e4:d0:89:2b:43:d0:02:29:0d:52:07:16:c7:bc:e1:59:e1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:10 2024 GMT
Not After : Dec 26 11:47:10 2025 GMT
Subject: CN=05AF6FDD970AAE32A30D637C2FE3ABF713E75C38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:2d:86:50:61:a7:87:16:64:ba:72:79:5b:
d7:94:9a:58:95:95:e1:32:13:29:57:95:43:45:e5:
ae:07:cb:a9:0d:e3:c2:66:99:43:5c:c4:64:69:83:
39:18:40:58:3f:a7:8e:36:1f:2b:d9:8a:72:11:a1:
39:8a:27:ab:e2:ce:32:7e:92:83:a7:fa:0d:eb:77:
66:ea:95:2e:f1:25:3c:9f:11:9d:0e:53:20:d1:9b:
b8:b8:39:ac:ed:4d:37:9b:de:ac:73:57:15:1b:d0:
03:d5:42:fb:93:81:0d:db:f7:9c:c1:c9:71:38:5d:
a9:16:e5:18:b9:1f:5b:b9:36:2b:be:d2:8c:57:51:
4f:7b:80:5d:f3:26:60:30:9e:1a:d0:16:4b:44:1d:
a9:36:9e:ed:51:9c:17:3c:97:0f:d6:b3:62:88:64:
ca:d7:43:2b:8c:2c:1d:61:d8:fa:69:99:23:cb:95:
6c:3d:c9:ea:47:91:38:8c:9c:80:45:db:82:90:64:
e4:53:77:39:f1:81:b0:d7:13:28:4b:ed:9f:6e:af:
ac:57:44:16:b0:fd:dc:e2:c7:f1:1d:1a:2d:c0:49:
4a:10:f2:0a:61:47:5a:91:29:31:83:54:17:fa:7c:
9c:fe:44:06:98:30:e6:71:b4:54:6b:30:77:d9:3e:
bd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AF:6F:DD:97:0A:AE:32:A3:0D:63:7C:2F:E3:AB:F7:13:E7:5C:38
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.185.0/24
Signature Algorithm: sha256WithRSAEncryption
31:9b:41:95:63:ab:de:e9:1d:b4:c5:ef:dc:ef:0e:ee:95:b7:
41:7a:de:d6:10:a8:2f:5d:e5:1b:9b:0e:1d:39:31:2d:d7:4f:
2f:b0:09:96:cc:a2:83:74:66:db:de:cc:2b:93:82:97:4b:a5:
a8:f9:c9:db:d8:5f:58:9e:db:a1:83:1c:fb:d1:a0:3e:6d:05:
da:d5:c0:f8:cf:0d:a1:30:13:ff:83:df:ca:56:67:2b:81:b1:
2e:d6:98:66:45:0e:42:e1:24:76:e6:f9:a4:85:7e:ed:f6:73:
57:6d:c7:c5:1d:9f:31:e7:4e:be:b2:2b:8c:65:18:10:be:2b:
8f:2e:5b:19:2b:69:e5:2c:bb:29:fe:95:89:36:ed:62:69:16:
e2:46:29:e7:53:04:9a:5f:98:ee:0e:c5:47:a4:cd:f4:f1:f3:
8f:3f:a2:fa:b9:8a:d1:21:2e:f8:02:b2:06:31:90:c2:b2:30:
79:fc:f5:43:3f:e9:b8:80:88:0c:96:43:84:5f:37:4f:e2:a7:
3c:ad:23:dd:bf:f7:84:16:fe:91:43:07:46:34:6c:70:6f:f6:
6e:75:99:fd:cc:98:08:0b:81:14:dc:69:b2:74:a3:c0:bc:48:
cf:24:b4:99:ae:ac:57:7d:59:5a:fe:46:7a:e7:91:e1:27:5a:
62:58:57:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:22:07 2025 by rpki-client