Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34302e302f32342d3234203d3e20313336373837.roa
File: 34352e3135352e34302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: nYHsLsbWqKS4At7N5ZUKdi8NYrhnk9/78XYrmbXSFtk=
Subject key identifier: 25:B8:9B:55:05:F2:17:E8:F4:F7:1F:9C:3B:C5:7E:D9:9B:11:B2:92
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 731AA4AD66D8163D37A19B7EAB3B4E068AEF2799
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34302e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:14 +0000
ROA not before: Fri 27 Dec 2024 11:42:14 +0000
ROA not after: Fri 26 Dec 2025 11:47:14 +0000
asID: 136787
IP address blocks: 45.155.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:1a:a4:ad:66:d8:16:3d:37:a1:9b:7e:ab:3b:4e:06:8a:ef:27:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:14 2024 GMT
Not After : Dec 26 11:47:14 2025 GMT
Subject: CN=25B89B5505F217E8F4F71F9C3BC57ED99B11B292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9b:5d:5d:9e:fa:72:a8:cc:44:fb:4a:46:b6:
08:ae:22:53:7d:38:f3:f5:6d:99:5a:25:b8:b6:4b:
c3:d1:3c:1d:a6:78:be:88:1b:6d:b0:5e:c9:fa:2f:
30:20:8a:40:ae:53:ad:df:dd:0b:56:f0:d3:b6:47:
fe:28:95:1b:9d:c5:8d:f1:7f:bd:ef:23:cb:7f:db:
6b:0b:58:0f:7d:99:9d:6d:94:0d:ea:b4:9b:42:61:
57:df:ea:3e:75:74:2e:12:d3:6f:64:ea:0a:15:0a:
ce:7d:a5:c4:8e:5e:ff:46:9f:8e:26:4e:0c:07:a2:
bc:67:e0:6b:59:f4:2d:f6:c9:70:50:03:e6:3b:00:
a1:c4:a8:1a:f0:72:40:bb:b3:34:44:29:ab:d0:e0:
6d:77:fe:78:e4:a4:0f:60:aa:12:3c:03:22:81:69:
6d:38:fa:52:cf:05:37:d3:c2:62:ac:4f:14:23:15:
08:c0:72:d6:2c:8f:50:9f:65:c9:e9:3b:06:ae:e5:
c9:36:69:2c:13:38:c8:b0:ab:b0:fd:1e:e9:e3:2c:
73:6e:cf:1c:18:af:b1:c9:d0:f3:b2:f0:96:cf:f1:
4e:f2:4e:ef:70:4c:b6:95:4c:26:9e:ad:8d:56:c7:
2f:93:96:ab:80:fa:8f:e9:e7:6d:04:eb:81:ee:b8:
fd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B8:9B:55:05:F2:17:E8:F4:F7:1F:9C:3B:C5:7E:D9:9B:11:B2:92
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.40.0/24
Signature Algorithm: sha256WithRSAEncryption
87:46:b9:9e:26:97:cb:4a:b7:c1:55:7d:1d:94:45:f8:2b:ae:
7f:fb:57:39:dc:9d:dc:b6:f5:aa:d9:01:ab:01:5e:49:6a:ce:
fd:e8:b2:90:cd:c2:dd:78:c5:58:d1:e6:9d:61:a5:3c:5a:7e:
94:4b:e1:ed:38:89:aa:97:93:60:bc:0d:0f:3c:6c:34:5a:1f:
ee:3b:ae:e0:2f:39:a1:b9:b3:75:9b:9b:8d:6c:c4:83:1a:11:
ac:75:7e:4f:fe:2c:f7:28:7e:7b:b1:5e:10:bf:05:41:73:f2:
18:e8:b2:af:30:e8:3c:44:15:42:f7:04:ad:1e:ee:c4:06:01:
19:95:ab:5f:c9:91:ef:7a:ac:87:a7:8e:7d:bd:57:2a:64:ff:
29:d9:33:b3:f0:ab:07:94:c2:4b:d7:29:c3:fe:b4:bb:d3:1d:
8e:a6:b4:5c:8b:ae:c1:c6:6e:75:5e:88:dc:38:9f:3b:e5:7e:
10:ac:83:74:7e:31:ee:c2:01:5b:ef:fb:09:d2:8a:f4:ef:e7:
ff:b5:7f:71:6e:2a:25:27:18:89:c3:72:70:a3:52:1e:31:0e:
c9:53:ba:ce:61:53:34:8e:f4:a3:73:2a:7c:db:39:d6:32:bd:
ec:95:d8:6b:65:7f:b5:ca:15:59:a5:9c:da:5c:1f:a0:04:d5:
be:04:9c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:47 2025 by rpki-client