Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31352e32342e302f32322d3234203d3e203437353833.roa
File: 34352e31352e32342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: PB8S2l21pnTBqec5PIPZQD+7vMZftSY3y/RwW9gFWu8=
Subject key identifier: 74:BD:85:C8:94:87:81:B0:EF:CF:9C:D6:26:03:68:96:E9:79:05:F1
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4A4723AF1DC0C329E3EFB9D98E847C7BC65BE758
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31352e32342e302f32322d3234203d3e203437353833.roa
Signing time: Fri 27 Dec 2024 11:47:28 +0000
ROA not before: Fri 27 Dec 2024 11:42:28 +0000
ROA not after: Fri 26 Dec 2025 11:47:28 +0000
asID: 47583
IP address blocks: 45.15.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:47:23:af:1d:c0:c3:29:e3:ef:b9:d9:8e:84:7c:7b:c6:5b:e7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:28 2024 GMT
Not After : Dec 26 11:47:28 2025 GMT
Subject: CN=74BD85C8948781B0EFCF9CD626036896E97905F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:68:8c:ab:ba:1b:bf:36:f7:aa:a8:bd:9f:
80:d3:3c:88:98:34:f6:03:7b:2f:bb:4e:24:9f:4c:
d3:e5:38:20:40:9f:cb:cf:28:23:f3:9e:dc:40:f6:
00:e5:d4:bc:d7:d7:94:03:db:50:9a:46:0b:5d:ce:
8f:4a:be:11:d2:2f:e3:e3:8d:a7:14:f4:28:43:c1:
7a:a0:52:4c:80:52:8a:04:c6:5a:69:df:ae:05:f3:
38:a8:e7:fd:37:cd:a2:7d:11:57:31:3a:4d:c9:de:
e0:16:34:6f:f1:56:77:29:ea:13:d6:62:7c:50:21:
b5:bb:02:d5:30:a1:f2:38:48:dd:a8:ba:5b:a9:d0:
ca:b6:3c:18:77:fc:e8:04:49:6e:7f:c0:0c:1c:ee:
6a:e7:5d:f0:48:9f:15:55:a4:63:0c:d8:38:7b:b9:
b8:b4:ca:9a:a3:c3:cd:63:96:c4:fe:59:c6:5d:90:
24:26:b4:36:35:96:94:12:ce:88:67:2b:59:c0:00:
6c:ea:00:2e:07:c3:89:b2:f6:72:a7:5d:92:d3:0d:
5f:1b:83:0a:88:c3:d1:72:fd:e5:5a:c3:00:2d:29:
41:cb:6d:bf:08:0c:1b:ba:bb:18:06:c1:68:36:1a:
51:ef:4f:ad:1d:90:5e:d8:7d:a7:25:28:65:21:e2:
4a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BD:85:C8:94:87:81:B0:EF:CF:9C:D6:26:03:68:96:E9:79:05:F1
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31352e32342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:3a:72:ea:ef:5f:f7:64:0c:f8:f2:be:31:56:9d:5e:c5:53:
fe:49:15:85:af:df:ba:68:50:fc:96:6c:09:12:93:e4:15:da:
09:d3:8f:d7:58:16:9b:47:e0:f8:ef:78:c8:b0:44:b8:0d:b7:
93:73:c2:95:cf:19:81:1b:26:2a:f2:ae:3b:94:da:47:73:b5:
56:0b:01:75:0d:d5:11:b9:16:b7:70:96:1a:5a:c6:3b:2f:35:
ae:b5:61:b0:6a:ec:a9:3e:2d:39:44:07:f4:39:1b:09:89:f2:
ee:5d:7f:e7:a3:76:37:d5:1e:13:73:27:f7:f9:4e:78:37:3b:
5b:01:56:4c:40:e6:d4:ff:54:4e:74:b1:22:c4:28:cb:8f:a2:
ff:4a:66:ad:d4:61:14:dd:db:38:24:d0:0a:d5:c7:46:48:11:
76:3a:a9:ad:80:8d:27:ac:e0:eb:5a:7c:74:a5:31:da:f9:e9:
29:dd:8f:38:a8:07:df:e8:51:d8:75:34:ca:f6:0f:8c:31:25:
ce:bd:31:10:a6:f2:90:f1:33:5f:56:ad:a6:2d:08:2d:7e:8f:
06:b3:2a:e4:af:73:09:16:87:0d:da:28:6e:9e:a4:31:da:60:
47:8b:ef:89:7f:99:cb:11:cc:ac:11:bf:b0:5b:e9:f0:34:b6:
4a:52:3c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:09:05 2025 by rpki-client