Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34322e302f32342d3234203d3e20323037313337.roa
File: 34352e3135352e34322e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: JRQtB1+OPXuYWFEOwt+b1KfA3T+B1p/Q/vqpmx7IVNk=
Subject key identifier: 72:A5:4C:AE:C6:61:22:FD:6F:C5:F5:8D:8D:D6:66:16:78:FA:FD:CC
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 77628AC247464045384A9DAB0042AE0F62ECC9BE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34322e302f32342d3234203d3e20323037313337.roa
Signing time: Fri 27 Dec 2024 11:47:15 +0000
ROA not before: Fri 27 Dec 2024 11:42:15 +0000
ROA not after: Fri 26 Dec 2025 11:47:15 +0000
asID: 207137
IP address blocks: 45.155.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:62:8a:c2:47:46:40:45:38:4a:9d:ab:00:42:ae:0f:62:ec:c9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:15 2024 GMT
Not After : Dec 26 11:47:15 2025 GMT
Subject: CN=72A54CAEC66122FD6FC5F58D8DD6661678FAFDCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d6:1b:09:d6:fc:6e:26:3e:db:65:6a:a8:3c:
c2:c5:c1:18:5d:10:60:d9:9a:a5:41:43:a2:49:f4:
85:29:72:48:06:5d:b7:c8:6a:87:a4:62:e3:c2:20:
8b:85:a7:a1:4e:90:2d:19:92:48:28:0d:5d:b1:56:
1a:e8:8b:99:fd:7f:2c:45:33:aa:ab:0a:f5:5c:96:
9d:8c:6d:54:0a:0d:44:c6:cc:d7:a4:d8:f5:5f:c0:
9f:7f:08:44:b0:96:ec:ca:9d:3f:e5:89:49:41:a6:
82:5a:a9:57:1d:95:a5:88:11:a8:e4:4e:fe:1c:79:
c5:ad:d4:36:d5:ff:6f:fd:c0:06:62:48:f8:81:2e:
ca:85:83:70:2f:34:c5:88:34:4d:53:3c:11:1c:7c:
52:c5:54:4d:96:e9:a4:a3:dd:28:89:ad:a2:5d:db:
64:e3:6d:89:63:bc:56:7c:1a:d5:27:71:98:ab:7e:
b1:6d:e7:5c:25:d5:4f:74:b9:3a:f1:03:98:b6:ef:
e7:fa:df:2f:98:eb:60:a3:2b:d1:ef:77:7a:24:52:
ae:f8:7b:0f:5a:94:c4:b6:b3:a3:e2:f7:bb:78:ea:
b7:fb:93:be:3d:13:f5:e2:a7:7b:1a:99:ea:b1:3a:
14:2c:b6:c1:42:71:43:2d:c6:ac:4d:7b:ba:10:f2:
99:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A5:4C:AE:C6:61:22:FD:6F:C5:F5:8D:8D:D6:66:16:78:FA:FD:CC
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34322e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.42.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:5f:e4:f2:a3:56:5f:e5:7f:7f:44:84:2b:84:e0:fb:09:e4:
02:1a:9d:c4:b1:d3:db:a2:17:e9:0a:7f:e0:9a:30:d4:98:e1:
2c:ac:a4:e3:ef:df:74:dc:2c:04:af:36:ce:7d:78:6e:cc:92:
40:75:27:cf:d2:f2:f2:3d:a9:a6:d4:51:07:5b:ec:03:3c:b3:
75:53:fd:cf:4a:34:99:28:a3:78:22:ee:16:8f:4b:2e:80:5f:
30:d3:52:17:00:15:9c:4b:74:69:3c:9b:c8:04:9f:75:43:d5:
63:5f:72:56:2e:1e:92:40:e3:41:20:6f:26:5f:a9:30:41:1a:
b1:3d:8c:d4:09:d3:d4:03:5f:bc:2b:a3:90:df:bb:06:0b:c9:
25:80:b0:76:5b:12:f2:d9:0e:76:3a:99:36:e9:47:ad:b9:3f:
6d:9b:b7:aa:83:1c:a1:7e:f6:6b:da:f9:38:07:e0:ff:3d:52:
5c:07:aa:4f:bf:e1:ac:83:8f:2a:2f:80:a3:c2:19:3a:90:1f:
09:d1:67:ba:39:ac:1b:d3:c5:65:e4:f4:c2:b9:b6:b1:eb:2c:
59:a7:fb:29:f8:b6:5d:a6:86:92:ba:63:c0:97:c9:d4:e1:9a:
72:85:b2:1e:04:7d:e1:07:b3:1c:94:f4:b9:83:dd:6c:64:68:
51:8f:4f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:09 2025 by rpki-client