Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134382e3133372e302f32342d3234203d3e20313336373837.roa
File: 34352e3134382e3133372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: w2mebZjsWOcsoS897ex2H+B9sTxe2tsaIh43Zp18BYM=
Subject key identifier: 41:38:B8:9F:8F:E8:6B:E4:E1:66:FA:6A:EE:43:FA:77:08:9A:68:2C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 51431AE04A9C8AF35C8177CB50F5494A44E6AF65
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134382e3133372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:13 +0000
ROA not before: Fri 27 Dec 2024 11:42:13 +0000
ROA not after: Fri 26 Dec 2025 11:47:13 +0000
asID: 136787
IP address blocks: 45.148.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:43:1a:e0:4a:9c:8a:f3:5c:81:77:cb:50:f5:49:4a:44:e6:af:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:13 2024 GMT
Not After : Dec 26 11:47:13 2025 GMT
Subject: CN=4138B89F8FE86BE4E166FA6AEE43FA77089A682C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4e:d2:87:28:8b:53:aa:1e:d4:85:41:67:58:
a2:e9:26:db:98:ef:ef:02:33:cf:80:7c:1f:d5:ab:
fc:f0:f0:3d:01:13:74:e1:9b:5b:8e:38:d2:34:1c:
63:68:28:01:1b:e4:db:32:27:61:78:20:1d:8d:74:
94:83:a7:1b:78:55:72:e4:1d:41:a6:0c:eb:b5:e0:
5a:19:fe:b4:20:6a:84:7a:36:34:d7:f1:7d:5e:fc:
d4:ad:a9:d2:aa:3d:24:fb:69:6f:34:ff:36:08:5e:
26:42:08:68:3f:ad:ff:45:02:5f:81:de:0f:19:96:
f6:5a:64:e8:96:56:3a:64:91:19:47:5b:5e:fd:93:
5f:c7:f5:32:26:f4:b2:f7:8a:f7:bf:fc:4b:e7:2f:
bd:f1:4a:0b:9a:2e:c8:e5:5a:97:93:eb:5c:8d:6f:
77:35:2a:a4:71:79:e0:26:cd:e8:dc:12:c4:20:68:
2a:f1:66:d0:82:5f:72:06:d0:64:a9:ce:d9:c3:a2:
d4:13:53:36:e1:0e:9f:a0:03:94:57:19:10:70:37:
22:90:44:f2:7d:2f:06:8d:6a:72:b3:50:49:f4:65:
39:2f:9d:a6:be:ac:f7:89:a8:20:90:ec:70:c7:66:
dd:61:15:22:e0:d8:1e:db:45:14:b6:77:1f:41:05:
f1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:38:B8:9F:8F:E8:6B:E4:E1:66:FA:6A:EE:43:FA:77:08:9A:68:2C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134382e3133372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.137.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:a3:94:01:6d:a4:d5:0e:c2:96:ed:ad:f5:cb:6d:70:7a:c8:
78:b2:25:86:01:e7:01:ff:dc:e5:91:af:d1:19:ad:4f:b7:29:
fb:4e:5d:ac:0d:db:fb:61:3a:66:77:ff:c2:9f:b1:30:45:b0:
0e:8b:5b:01:ac:fe:6d:aa:72:59:98:26:ae:cb:d3:9f:b6:ec:
03:7b:b7:d9:9d:b5:38:f9:8c:89:ff:cd:4b:bb:a9:14:f1:03:
c6:d3:6d:26:f3:9c:42:80:fe:e2:55:16:2b:42:ff:35:56:b5:
4b:bd:d2:01:48:92:cb:d1:e4:29:bf:14:f9:73:81:96:f0:a2:
9d:a8:68:39:01:f0:fb:b4:51:8c:0c:f7:c9:09:c1:51:6a:2e:
92:70:d5:8d:2c:eb:1a:04:d7:9f:c5:6e:6e:07:f4:13:0f:dd:
b8:61:07:6e:2c:ec:2d:50:c3:cc:d3:b7:b1:12:a0:8b:f4:de:
62:34:7f:4f:90:07:78:8d:36:43:89:13:21:6f:56:c9:37:7e:
9a:12:53:08:27:28:59:ce:8f:d4:05:09:08:60:72:ac:33:cc:
82:fd:6c:50:01:16:1a:9c:ad:4f:f8:f0:20:ad:a3:2d:64:c9:
58:e1:39:07:f8:9a:6c:c3:2a:10:f5:aa:66:ff:da:df:f8:87:
68:25:ca:4e
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUUUMa4EqcivNcgXfLUPVJSkTmr2UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMTNaFw0yNTEyMjYxMTQ3MTNaMDMxMTAvBgNV
BAMTKDQxMzhCODlGOEZFODZCRTRFMTY2RkE2QUVFNDNGQTc3MDg5QTY4MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeTtKHKItTqh7UhUFnWKLpJtuY
7+8CM8+AfB/Vq/zw8D0BE3Thm1uOONI0HGNoKAEb5NsyJ2F4IB2NdJSDpxt4VXLk
HUGmDOu14FoZ/rQgaoR6NjTX8X1e/NStqdKqPST7aW80/zYIXiZCCGg/rf9FAl+B
3g8ZlvZaZOiWVjpkkRlHW179k1/H9TIm9LL3ive//EvnL73xSguaLsjlWpeT61yN
b3c1KqRxeeAmzejcEsQgaCrxZtCCX3IG0GSpztnDotQTUzbhDp+gA5RXGRBwNyKQ
RPJ9LwaNanKzUEn0ZTkvnaa+rPeJqCCQ7HDHZt1hFSLg2B7bRRS2dx9BBfHXAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUQTi4n4/oa+ThZvpq7kP6dwiaaCwwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0Mzgy
ZTMxMzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAC2UiTANBgkqhkiG9w0BAQsFAAOCAQEArqOUAW2k1Q7Clu2t9cttcHrI
eLIlhgHnAf/c5ZGv0RmtT7cp+05drA3b+2E6Znf/wp+xMEWwDotbAaz+bapyWZgm
rsvTn7bsA3u32Z21OPmMif/NS7upFPEDxtNtJvOcQoD+4lUWK0L/NVa1S73SAUiS
y9HkKb8U+XOBlvCinahoOQHw+7RRjAz3yQnBUWouknDVjSzrGgTXn8Vubgf0Ew/d
uGEHbizsLVDDzNO3sRKgi/TeYjR/T5AHeI02Q4kTIW9WyTd+mhJTCCcoWc6P1AUJ
CGByrDPMgv1sUAEWGpytT/jwIK2jLWTJWOE5B/iabMMqEPWqZv/a3/iHaCXKTg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:31:46 2025 by rpki-client