Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137342e302f32342d3234203d3e20313336373837.roa
File: 34352e3134372e3137342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: nuJp7XDUXFpq2yOGMiPEBUxfxuxuJ4RsTbP4kX2NXCk=
Subject key identifier: DE:B0:05:68:7D:E1:F6:27:92:49:E1:B9:63:8F:CA:D0:66:9B:47:8D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 34692137862303E3C9BC9DBF4BC44399FCB2A5ED
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:30 +0000
ROA not before: Fri 27 Dec 2024 11:42:30 +0000
ROA not after: Fri 26 Dec 2025 11:47:30 +0000
asID: 136787
IP address blocks: 45.147.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:69:21:37:86:23:03:e3:c9:bc:9d:bf:4b:c4:43:99:fc:b2:a5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:30 2024 GMT
Not After : Dec 26 11:47:30 2025 GMT
Subject: CN=DEB005687DE1F6279249E1B9638FCAD0669B478D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:b8:5c:d0:45:04:f9:60:59:a6:70:0a:be:
ed:7f:bd:48:0a:21:ba:26:3b:8b:1c:74:77:76:3b:
a5:07:52:d8:ec:11:73:9d:43:29:2a:33:ee:a9:c1:
52:5d:d5:c5:3f:03:2f:36:e7:43:17:f8:2f:b0:44:
8f:08:92:98:23:42:56:47:2b:25:4e:2c:b2:2f:21:
a6:a9:45:67:c2:72:6c:66:5a:91:58:b9:eb:80:33:
a0:38:68:19:8f:66:35:45:8c:b4:90:2c:25:ac:05:
75:d8:27:ca:0a:85:bc:c0:02:68:b1:db:51:e4:53:
70:06:f8:d9:a5:ee:15:62:ba:01:e7:d2:fe:00:bb:
23:22:ea:9f:1c:ff:8a:24:88:38:60:cd:d6:81:ae:
23:3f:c0:56:ba:28:f0:b2:a4:bd:75:45:ae:38:7c:
d7:78:f3:51:5c:11:75:bf:02:df:e0:55:1f:85:f2:
bf:6d:5d:4f:3d:fa:7f:78:3d:ed:3e:7b:0e:47:d5:
8a:be:a3:51:f9:fb:ad:88:79:37:69:4d:38:31:d0:
1f:85:20:af:be:ff:18:b5:78:47:a3:5c:95:31:ac:
01:bf:e2:eb:52:75:18:08:6b:e7:c3:16:33:e6:2d:
09:a3:28:28:0e:4f:e1:02:43:27:4d:1f:cb:92:87:
b8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B0:05:68:7D:E1:F6:27:92:49:E1:B9:63:8F:CA:D0:66:9B:47:8D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.174.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:8c:14:c1:ef:40:55:a5:4f:21:bf:3c:37:76:50:d9:a9:29:
c2:f0:6f:27:83:1f:68:3c:28:29:e6:68:c5:24:3b:55:f0:2c:
63:36:6e:74:14:5c:61:bf:0d:23:5f:c7:79:7d:17:19:f4:e2:
18:62:45:73:51:a9:82:f5:a3:77:ab:9d:3e:e3:5f:06:ba:0b:
6e:9b:5e:d7:a6:eb:56:68:b6:c9:b8:a7:ce:ac:f4:16:29:cf:
3d:ee:fe:fb:db:f3:9c:66:40:a1:b0:3b:d1:af:f7:81:a8:39:
37:cf:07:47:a3:4b:92:4b:d9:c8:c8:be:d6:28:2f:e1:7c:c9:
c9:71:67:df:43:42:bd:aa:1f:65:27:63:9c:6b:e8:4f:60:48:
71:11:fc:a9:9b:cc:a7:37:d2:7c:84:ac:b3:3d:32:41:c0:98:
ed:ea:54:72:7b:ac:29:b8:3a:e7:80:d0:ca:7e:24:fd:da:7a:
08:c3:ed:3d:c6:37:17:25:97:36:9f:5b:7f:63:70:9e:41:58:
12:33:d1:c7:f4:07:9c:74:f7:ea:cf:b6:36:70:f3:85:ee:d0:
b2:e3:ae:a1:0c:5d:3f:31:98:6a:aa:28:05:7d:3d:8b:86:af:
39:10:59:a0:63:07:f5:87:91:37:20:d9:a9:75:3c:d7:ff:0c:
4b:9e:32:b8
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUNGkhN4YjA+PJvJ2/S8RDmfyype0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMzBaFw0yNTEyMjYxMTQ3MzBaMDMxMTAvBgNV
BAMTKERFQjAwNTY4N0RFMUY2Mjc5MjQ5RTFCOTYzOEZDQUQwNjY5QjQ3OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzYLhc0EUE+WBZpnAKvu1/vUgK
IbomO4scdHd2O6UHUtjsEXOdQykqM+6pwVJd1cU/Ay8250MX+C+wRI8IkpgjQlZH
KyVOLLIvIaapRWfCcmxmWpFYueuAM6A4aBmPZjVFjLSQLCWsBXXYJ8oKhbzAAmix
21HkU3AG+Nml7hViugHn0v4AuyMi6p8c/4okiDhgzdaBriM/wFa6KPCypL11Ra44
fNd481FcEXW/At/gVR+F8r9tXU89+n94Pe0+ew5H1Yq+o1H5+62IeTdpTTgx0B+F
IK++/xi1eEejXJUxrAG/4utSdRgIa+fDFjPmLQmjKCgOT+ECQydNH8uSh7gnAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQU3rAFaH3h9ieSSeG5Y4/K0GabR40wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0Mzcy
ZTMxMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAC2TrjANBgkqhkiG9w0BAQsFAAOCAQEAxIwUwe9AVaVPIb88N3ZQ2akp
wvBvJ4MfaDwoKeZoxSQ7VfAsYzZudBRcYb8NI1/HeX0XGfTiGGJFc1GpgvWjd6ud
PuNfBroLbpte16brVmi2ybinzqz0FinPPe7++9vznGZAobA70a/3gag5N88HR6NL
kkvZyMi+1igv4XzJyXFn30NCvaofZSdjnGvoT2BIcRH8qZvMpzfSfISssz0yQcCY
7epUcnusKbg654DQyn4k/dp6CMPtPcY3FyWXNp9bf2NwnkFYEjPRx/QHnHT36s+2
NnDzhe7QsuOuoQxdPzGYaqooBX09i4avORBZoGMH9YeRNyDZqXU81/8MS54yuA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:19:33 2025 by rpki-client