Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132332e302f32342d3332203d3e203531313637.roa
File: 34352e3135312e3132332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: DhGH/fgaWTiN/8p5g3ZEZWSzpdLBfkZmJpaGrxhdfOI=
Subject key identifier: 0E:00:9D:EB:3B:5B:7F:68:CA:94:9B:D0:AB:BF:58:F3:5F:2B:1E:04
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2895D8181E0DE71AB1889989A38599241837071A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132332e302f32342d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:44 +0000
ROA not before: Fri 27 Dec 2024 11:42:44 +0000
ROA not after: Fri 26 Dec 2025 11:47:44 +0000
asID: 51167
IP address blocks: 45.151.123.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:95:d8:18:1e:0d:e7:1a:b1:88:99:89:a3:85:99:24:18:37:07:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:44 2024 GMT
Not After : Dec 26 11:47:44 2025 GMT
Subject: CN=0E009DEB3B5B7F68CA949BD0ABBF58F35F2B1E04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:9f:01:2b:15:7c:c1:b5:81:55:e9:d3:75:
a8:41:90:7c:2f:c7:58:44:b4:6c:5f:45:57:f1:5e:
fa:42:e0:c4:40:ca:d4:be:23:c3:24:7e:81:e5:f6:
6a:90:0a:21:4c:8a:29:fc:0b:32:61:a3:b9:41:63:
e5:73:93:ce:a4:f3:4f:8d:9b:df:87:f6:32:11:ea:
93:df:de:35:37:a1:3f:99:c7:52:3f:12:f6:66:07:
d0:d7:d8:f5:b7:c3:1c:af:01:13:0a:dd:24:99:e2:
0d:de:bf:e9:4d:e7:0d:94:db:fb:da:51:cb:4b:c1:
6d:23:51:e0:05:45:2e:b6:6b:23:ae:9e:d1:49:59:
83:40:30:24:5b:75:15:a4:04:1c:81:6f:79:38:20:
4f:f3:d8:d8:6d:94:b4:c3:c3:e2:b2:0d:ff:e5:62:
17:d0:a5:d5:92:b3:9d:72:03:40:fe:59:33:25:7e:
d6:49:3b:6a:1e:3a:39:22:a9:47:d3:7c:ea:af:2b:
1c:62:90:ce:cc:9d:21:85:0f:fd:2b:76:a8:8e:08:
76:02:a3:41:5f:ee:d7:9f:56:f2:9d:d1:2b:d8:73:
06:30:9d:36:fc:c7:63:5f:37:57:23:83:71:07:0e:
03:13:06:6f:9d:ac:ee:50:0b:55:34:bd:a8:ec:74:
61:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:00:9D:EB:3B:5B:7F:68:CA:94:9B:D0:AB:BF:58:F3:5F:2B:1E:04
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.123.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f0:bd:52:4c:ba:39:dc:c5:a6:16:e0:2e:7d:cb:39:b9:0c:
a6:cf:95:3f:93:6c:0e:e3:f5:40:19:2b:cd:ce:ea:1d:d3:c7:
ca:21:20:62:00:3e:29:fd:04:68:f5:e7:b8:0f:ee:4e:8a:6e:
ad:9f:98:32:4b:4f:4b:6f:95:7b:6b:dd:7b:7f:a5:de:c0:f8:
3f:4f:3b:b5:97:48:3f:e3:ed:41:f2:3f:2b:2c:b2:1c:4d:d7:
4a:01:21:a8:56:7d:b9:02:74:f6:04:de:2f:51:4f:eb:04:d0:
76:75:81:3b:24:64:d0:55:7f:ae:b3:8d:fe:19:21:bd:37:ec:
a5:82:66:5a:8e:5b:1e:37:4f:d2:f8:9f:f5:fe:04:d3:ae:85:
4c:18:6e:93:90:f6:b7:5e:ab:dd:84:20:b1:5e:43:ea:77:f4:
d3:d6:b7:35:6e:0a:c8:1b:df:da:a7:be:ab:73:34:cc:5d:7c:
b2:4a:be:28:4d:da:4c:4d:cc:0a:a3:1c:fd:d5:63:bd:fd:a0:
4a:1d:26:6b:3c:e1:12:2c:d4:ee:0e:22:31:95:99:fb:f3:3c:
0e:87:66:1e:89:ca:61:98:55:47:bc:17:7b:5a:2b:5f:df:3a:
1c:2a:36:a1:4c:2b:e7:f5:e3:25:20:d6:83:fc:80:1e:84:46:
97:88:e4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:55:05 2025 by rpki-client