Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e3232302e302f32322d3232203d3e20323031333431.roa
File: 34352e3134312e3232302e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: dT+Vch1+UYZkvSOubMRej9v3VMZAk1s99+KTkIulbrM=
Subject key identifier: 7F:F7:03:FC:1F:6D:5D:F8:C8:38:73:0D:6A:F9:69:B8:05:A1:93:E6
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3CE4B782436743C795399909834936AD766E450F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e3232302e302f32322d3232203d3e20323031333431.roa
Signing time: Fri 20 Dec 2024 15:23:34 +0000
ROA not before: Fri 20 Dec 2024 15:18:34 +0000
ROA not after: Fri 19 Dec 2025 15:23:34 +0000
asID: 201341
IP address blocks: 45.141.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e4:b7:82:43:67:43:c7:95:39:99:09:83:49:36:ad:76:6e:45:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:34 2024 GMT
Not After : Dec 19 15:23:34 2025 GMT
Subject: CN=7FF703FC1F6D5DF8C838730D6AF969B805A193E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:69:55:ec:d7:87:5b:7a:7f:51:98:29:0e:
ef:d0:be:42:89:5d:d5:b4:50:1e:b5:65:7e:41:5e:
71:3f:aa:12:9b:82:28:0e:97:10:83:ae:3c:01:86:
9f:76:54:5d:fc:a9:66:6f:d9:65:fb:af:0b:c1:da:
b9:53:f9:93:4e:a0:77:7f:70:d5:52:f0:b8:95:d6:
f8:3b:78:c1:45:b3:d5:ce:b7:0d:e8:59:1a:c6:12:
8c:d0:54:1d:9a:7d:14:78:1e:47:5d:3d:e6:36:cc:
04:c5:e1:9c:16:01:b3:fc:81:92:4e:ba:84:cf:9e:
91:d1:4b:ac:c9:8c:f0:68:ca:65:b5:bb:8b:d1:8a:
75:b4:10:33:47:82:a0:eb:c1:29:1b:bd:31:d7:a7:
39:b5:40:e7:cd:4f:05:76:4a:7d:07:1c:10:0d:0d:
d8:13:71:7d:00:61:ef:e6:12:6a:27:e3:08:cd:dc:
48:0e:9f:9b:b8:4a:d3:c6:7a:dd:55:79:bf:55:31:
93:75:ef:ef:4e:d3:0c:a6:7c:aa:cf:af:1a:e8:31:
d0:99:34:43:b7:0a:c0:a9:aa:aa:c8:be:b8:3a:82:
c5:af:4a:a6:fb:2e:b6:31:fe:d3:0f:1c:ef:1b:73:
6f:66:5a:34:08:00:bc:f4:a7:e3:8e:c6:34:5c:72:
ab:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F7:03:FC:1F:6D:5D:F8:C8:38:73:0D:6A:F9:69:B8:05:A1:93:E6
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e3232302e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:9e:06:61:00:8f:93:93:05:c4:81:c3:ca:2d:df:46:92:86:
c8:ec:c7:0b:35:55:c2:c8:63:a4:84:21:25:18:e6:17:13:ac:
13:6c:21:e4:03:db:25:59:70:d0:79:c8:07:66:51:4f:6c:2e:
dd:ca:ec:b6:89:8e:95:e8:da:ce:d0:f2:92:3b:cf:de:4a:eb:
17:fd:61:d3:4d:e6:23:53:a7:ed:13:04:77:2d:f8:cb:de:bc:
51:59:27:80:0d:86:90:29:eb:60:8f:d7:fe:69:19:59:21:73:
57:e0:96:3d:e6:ab:e9:a3:31:0a:ba:c6:35:98:d6:f9:e0:d5:
92:97:18:75:50:61:f7:a4:20:0d:2d:7c:4e:30:5e:8d:fe:c7:
8d:74:bc:1d:ca:5a:30:1a:99:79:84:2a:c2:c9:a0:6a:5b:2a:
72:83:da:b9:06:3a:a8:d3:3a:73:54:b8:61:eb:5d:46:6c:41:
31:b9:8e:3a:50:6a:87:5c:ea:dc:6d:61:b5:f4:eb:57:ab:e6:
2d:1c:6e:6c:d4:8f:46:4e:c6:9e:21:9c:78:59:5e:64:c5:ef:
c3:ad:0e:72:b3:a4:96:91:9b:71:b0:49:0b:0f:11:2d:fd:4d:
50:86:d3:1b:ce:e9:1f:1d:ba:e0:6b:87:68:a3:15:f8:b9:da:
74:48:a4:84
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:14:10 2025 by rpki-client