Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137332e302f32342d3234203d3e20313336373837.roa
File: 34352e3134372e3137332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: dv9eF3ISdiQCnCHvlH00+IzsTQ2zXF5JJW5X/1AKWIk=
Subject key identifier: 14:37:99:B6:42:99:76:51:C3:C3:CA:67:84:B5:B0:0B:29:40:65:60
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4AC0077B619B9F32B42A5C70298906DCFF19CF91
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:08 +0000
ROA not before: Fri 27 Dec 2024 11:42:08 +0000
ROA not after: Fri 26 Dec 2025 11:47:08 +0000
asID: 136787
IP address blocks: 45.147.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c0:07:7b:61:9b:9f:32:b4:2a:5c:70:29:89:06:dc:ff:19:cf:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:08 2024 GMT
Not After : Dec 26 11:47:08 2025 GMT
Subject: CN=143799B642997651C3C3CA6784B5B00B29406560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:51:e9:c7:35:1a:3a:f1:cc:9b:e9:93:6e:25:
8b:57:74:b7:bc:a7:2c:78:a3:9e:58:47:ab:b6:a2:
06:df:c1:5f:25:88:0b:55:24:86:50:3a:f6:ef:2c:
1c:5d:86:b7:09:54:87:ce:39:bf:e9:dc:fc:fc:a2:
ec:83:02:b3:b3:54:93:da:9b:8e:59:59:72:c7:60:
b2:de:c6:c0:2b:d6:89:88:8f:3f:a8:67:ed:48:b5:
aa:27:3c:cd:3b:9f:9c:26:9c:93:5a:66:9c:a2:c3:
25:f8:0b:f4:f0:ad:9c:16:12:0a:1d:64:01:5d:e3:
9e:62:74:e8:f9:1c:ed:98:98:74:22:12:8b:b2:1b:
0c:f7:c2:9c:70:b9:36:5e:4b:19:d1:24:75:5c:09:
96:5b:1b:6e:06:8a:33:fe:fa:68:7a:c4:6f:37:32:
35:40:e2:cd:9c:e8:23:6e:c1:78:97:26:71:e4:be:
1a:e8:4c:19:83:b9:08:28:9a:18:16:13:29:9a:96:
21:42:01:6d:e9:a2:7a:10:89:55:80:20:67:a2:7c:
31:60:44:ee:93:85:7c:2b:bd:3d:6d:cb:08:ad:55:
31:b6:81:0e:d8:3a:18:39:0d:56:25:83:eb:9a:b7:
ba:23:23:ea:f5:53:fc:84:fc:e7:3b:85:68:d7:31:
fd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:37:99:B6:42:99:76:51:C3:C3:CA:67:84:B5:B0:0B:29:40:65:60
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.173.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:70:18:b2:37:eb:a4:88:61:f8:9c:58:e8:dc:e8:69:12:fc:
cf:bd:41:13:c0:21:23:cf:ec:0f:aa:48:dd:bf:35:4a:35:9f:
11:79:2d:5b:f4:79:a5:f0:bb:d8:fe:92:d6:e9:f9:b9:ab:2e:
ae:1d:e2:86:65:9b:e4:0f:e7:13:da:4f:f4:5e:b9:3b:86:50:
35:3d:45:09:58:91:5b:a9:2b:28:a1:f0:60:39:ec:ad:ca:82:
c0:3d:a7:f4:e8:1f:6f:91:08:47:ef:3a:73:15:7a:ac:ae:72:
1a:60:0a:23:b0:ea:0c:ce:e4:9d:f1:d4:a3:7b:d1:2c:7a:48:
b3:01:a3:3b:28:1b:f0:30:24:38:9a:d9:52:52:74:b5:f5:71:
31:47:7c:a6:da:ea:6c:08:95:99:c5:1a:60:4e:6e:7d:75:b5:
04:29:a8:5c:18:9e:31:7e:6c:f5:b7:78:1b:6a:63:4f:35:1c:
ca:2d:78:2b:e8:74:dc:fc:62:b7:e5:cb:27:a7:32:0b:d0:8f:
62:03:87:e1:57:c2:29:ab:d7:8b:00:ba:8c:22:33:24:f7:0a:
cd:b8:26:b3:ce:e9:44:06:b6:ec:36:ec:d7:a2:a1:6e:8d:8e:
ea:da:b2:4c:53:6b:9a:2d:f5:d6:3d:18:40:f4:1f:98:76:7a:
78:fe:80:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:07:41 2025 by rpki-client