Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132322e302f32342d3332203d3e203531313637.roa
File: 34352e3135312e3132322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: FqiueWxrpFLEDThBsJseoFykt0xV3vERp2BicqIFr9s=
Subject key identifier: 3C:45:14:A1:E0:45:BA:67:B9:5B:DC:26:73:13:2A:7B:B5:36:D0:F1
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6E35ED7EED845B4F678DEE94F501F431A4BDE451
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132322e302f32342d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:06 +0000
ROA not before: Fri 27 Dec 2024 11:42:06 +0000
ROA not after: Fri 26 Dec 2025 11:47:06 +0000
asID: 51167
IP address blocks: 45.151.122.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:35:ed:7e:ed:84:5b:4f:67:8d:ee:94:f5:01:f4:31:a4:bd:e4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:06 2024 GMT
Not After : Dec 26 11:47:06 2025 GMT
Subject: CN=3C4514A1E045BA67B95BDC2673132A7BB536D0F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:88:13:fc:20:e9:a1:29:d9:7e:56:dc:d2:
ca:cd:64:74:b1:00:25:1a:21:b0:71:fe:4b:81:e2:
fa:99:87:53:87:f7:c2:98:03:de:ca:5a:31:b3:e0:
7a:11:6d:4c:16:c8:4b:23:41:a7:eb:de:3a:9e:1d:
69:6c:57:3a:a3:0e:ab:c8:09:f2:dc:bb:65:37:d4:
d3:8d:c3:d8:21:e8:7f:48:4e:9c:3d:21:73:d7:a6:
7c:b3:ff:3f:c8:a8:53:3d:67:68:75:5e:05:71:cc:
f7:1d:b9:8c:58:19:e4:8e:47:a5:91:4f:8d:ab:bf:
2c:79:d0:ed:92:69:f8:0f:11:c1:bf:7f:eb:07:a5:
e4:71:48:5d:f8:03:fb:87:61:6e:7a:eb:fc:2f:c9:
d4:56:eb:14:a4:16:94:89:d2:f5:d2:d9:c1:12:39:
11:9c:03:d5:d8:d0:e7:3f:02:ad:7e:f4:b7:1e:3e:
b6:00:2a:c8:87:1f:3d:f7:b5:6b:49:43:34:81:61:
d5:c8:83:aa:94:db:e7:61:70:46:68:4b:e2:00:ad:
0e:a6:79:c2:12:c5:b9:13:ca:8c:d8:f5:9c:5b:e1:
44:f4:a8:46:17:09:5c:2b:89:6f:dd:6d:ab:8b:c3:
3e:f5:27:62:48:b5:de:1f:b6:33:44:8a:7d:d2:ca:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:45:14:A1:E0:45:BA:67:B9:5B:DC:26:73:13:2A:7B:B5:36:D0:F1
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132322e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.122.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:63:93:8a:e5:20:10:0f:43:91:cf:4c:b3:df:f1:fd:01:c6:
8c:08:12:8e:c7:76:ce:c6:dc:5d:d3:2f:07:38:fb:bc:ed:5a:
9c:da:6c:e4:f8:53:da:43:56:48:1f:a8:f9:e6:c2:95:d4:d1:
ee:98:46:2e:67:98:8b:52:69:d5:3b:fe:f0:e4:77:5c:69:3b:
50:f2:ae:65:dd:65:cf:9c:b7:32:38:a6:76:e9:95:03:b9:eb:
92:7e:52:cc:85:b5:9d:98:c4:79:3d:96:f3:67:43:bc:8a:d4:
b1:14:5c:06:84:7f:0f:36:56:3b:34:8b:fd:c4:c1:e4:c4:67:
5a:3b:ea:1a:ca:0d:ab:1a:ac:c9:af:d9:71:c2:67:84:79:72:
50:17:b5:05:6e:54:d8:ba:81:29:08:a5:9d:7e:e6:7d:98:93:
a6:2f:29:29:3b:96:54:b0:9a:b2:00:97:2a:95:b7:84:26:ef:
06:b8:c1:de:ed:20:08:3c:6d:6a:39:ea:24:ac:8b:35:eb:d2:
b7:45:dd:cb:b0:2c:6e:b6:c5:e5:86:1a:b5:41:0c:3e:86:1a:
23:e4:d2:be:40:b7:62:bd:14:89:49:e6:47:32:fc:20:a8:df:
d4:a3:38:1d:8b:1b:44:f2:59:38:2f:02:42:31:af:bb:57:47:
f8:eb:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:05:59 2025 by rpki-client