Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e32322e302f32342d3332203d3e203531313637.roa
File: 34352e3134312e32322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: l4NT8X3h+Fr5/ImQIepuoeWHuRrAe57zdI/jYBbeQgQ=
Subject key identifier: 99:4C:E8:6B:37:1A:82:AD:16:20:85:40:0F:47:68:C5:58:96:40:9F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2869B69D559D67D7949CA9B7D457C500F51D46F9
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e32322e302f32342d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:41 +0000
ROA not before: Fri 27 Dec 2024 11:42:41 +0000
ROA not after: Fri 26 Dec 2025 11:47:41 +0000
asID: 51167
IP address blocks: 45.141.22.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:69:b6:9d:55:9d:67:d7:94:9c:a9:b7:d4:57:c5:00:f5:1d:46:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:41 2024 GMT
Not After : Dec 26 11:47:41 2025 GMT
Subject: CN=994CE86B371A82AD162085400F4768C55896409F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8d:d1:36:e1:fa:3e:9e:4b:7b:96:b0:2c:c4:
34:0a:d2:1e:7f:a6:1c:bc:ee:ca:c7:2c:6b:50:4b:
ec:ec:f6:a2:04:c8:38:4d:c2:e3:51:11:71:f1:16:
7c:3a:14:db:da:55:a9:4a:a5:05:3b:c1:eb:17:ed:
91:9c:82:6c:73:98:b3:62:95:fc:6a:73:8f:bb:99:
7a:2f:c2:60:a6:9f:f2:c1:39:8f:26:46:1b:34:f2:
e1:21:6a:db:84:e2:3b:33:ef:d4:50:fb:42:e4:18:
c1:57:71:b1:a6:21:69:12:1b:31:1d:40:82:7e:ba:
e6:da:0c:11:f6:27:4e:fb:71:5f:b1:82:9a:6f:bc:
8f:e8:df:6b:40:df:14:79:d5:62:e3:c4:c1:87:ee:
fe:2d:02:f6:4b:ca:21:4e:9d:48:ff:b8:00:ac:c0:
b2:3a:f5:39:c8:8e:0b:4c:2a:f3:12:ac:6a:62:fc:
2c:23:95:05:a6:c0:09:f9:d9:16:3b:2b:cd:c6:68:
0c:09:6b:1b:c0:23:d6:42:f6:3e:5e:0b:80:ff:17:
03:3f:8c:f5:bd:30:41:65:72:c2:8e:f7:27:4f:b2:
7d:20:47:15:7f:57:c4:6f:06:11:c0:d8:75:5c:c2:
8b:dd:aa:d5:59:5f:50:47:0c:95:47:6d:22:97:18:
fa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4C:E8:6B:37:1A:82:AD:16:20:85:40:0F:47:68:C5:58:96:40:9F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e32322e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.22.0/24
Signature Algorithm: sha256WithRSAEncryption
af:db:11:25:b1:95:36:b4:ef:cb:40:cf:96:86:a0:4e:1d:52:
cb:f6:16:65:dc:e4:f4:ba:86:3b:e0:f7:bd:b8:df:ce:db:6a:
aa:9d:a0:5f:b1:85:8a:aa:0b:0c:b4:3f:02:04:4c:c5:6b:7b:
86:72:21:a3:c8:80:b5:48:55:7b:c6:f3:e0:30:fa:40:6d:7d:
cb:89:da:16:7f:30:d8:2a:cf:bf:68:7f:23:c3:e4:1d:36:44:
f5:5c:bb:40:6b:60:88:1a:dc:09:03:c8:b9:71:ef:41:79:69:
e7:55:2f:7d:56:ed:6a:4e:ff:47:d3:8b:19:b7:a2:79:4a:a4:
cc:92:cb:7e:85:7f:b4:ba:31:8c:fe:ae:2e:9d:d2:7d:c9:4a:
dd:1a:5b:b5:86:5d:43:db:b3:50:d9:f8:61:74:79:66:b3:72:
2b:88:77:fa:e0:4b:41:27:b7:47:a9:e1:bb:4e:b6:e1:b6:d5:
df:26:93:fc:7b:e0:d8:2f:46:db:43:5a:3a:f7:9b:f9:19:0f:
6f:e0:0b:96:7d:97:c0:46:41:42:f9:4b:b7:fd:b4:9c:9e:38:
c1:19:2c:5a:60:4d:ca:88:1b:f2:bf:23:92:5f:fe:01:88:c9:
fc:6f:2e:72:b5:ff:a2:b2:4a:26:69:1f:ef:93:3f:70:44:b1:
e0:d6:9c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:13:55 2025 by rpki-client