Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133392e302f32342d3234203d3e20313336373837.roa
File: 34352e36362e3133392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: v38j4rsxh7wd9G7Q3GGEginOx5EVIBeW3MMgF6Kf/GE=
Subject key identifier: A8:11:64:00:46:BA:3F:49:5B:AB:49:84:50:8E:05:02:36:50:FD:88
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 542790AD0B7B89D57A98AD8C981CCF616FA717FD
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:28 +0000
ROA not before: Fri 20 Dec 2024 15:18:28 +0000
ROA not after: Fri 19 Dec 2025 15:23:28 +0000
asID: 136787
IP address blocks: 45.66.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:27:90:ad:0b:7b:89:d5:7a:98:ad:8c:98:1c:cf:61:6f:a7:17:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:28 2024 GMT
Not After : Dec 19 15:23:28 2025 GMT
Subject: CN=A811640046BA3F495BAB4984508E05023650FD88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:76:f8:9e:95:64:38:c7:f2:7a:21:62:a9:
e0:36:75:e7:2c:a6:18:81:65:f1:8e:0d:84:19:40:
a2:c2:1f:fb:04:09:08:84:de:ce:e7:5f:3e:c2:84:
12:5d:10:67:c2:95:d1:f9:7d:ef:df:e5:c1:56:8e:
7f:95:b6:dd:ea:8b:f1:8c:7e:22:df:0d:da:e7:b2:
1f:e1:ee:4f:27:8f:b2:c6:ad:35:d6:68:9a:52:45:
14:c0:fa:0d:ec:0d:e9:01:43:f0:8e:43:06:55:d5:
96:55:64:7a:f6:96:ed:b5:27:a7:6a:87:1c:ef:20:
5e:5a:fa:71:fb:e5:3e:37:29:2b:28:7c:9b:77:74:
27:95:66:40:6f:2a:2e:72:a0:f2:1b:64:ee:86:be:
6c:02:54:80:a4:9f:c7:d1:38:f3:3f:67:08:99:b3:
37:b1:1c:0f:48:57:e7:29:70:ee:f0:28:a0:00:c9:
93:33:23:a4:1a:2c:1f:cb:5a:d0:62:45:90:f6:8c:
e4:91:cf:90:ea:e5:6d:93:ca:9e:10:e0:ae:0c:30:
75:af:a7:f9:d4:3a:23:ca:b4:82:46:4c:79:d6:f7:
f6:b8:1a:a4:92:4a:03:b5:fb:a5:2e:b8:fc:62:bb:
0f:6b:3d:62:65:9f:3c:5a:28:b9:84:d7:54:74:b2:
6a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:11:64:00:46:BA:3F:49:5B:AB:49:84:50:8E:05:02:36:50:FD:88
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.139.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:71:56:6a:10:21:ef:a3:1e:44:bc:a3:f0:cd:b3:14:3c:01:
a1:71:dd:86:b2:8a:14:07:70:b7:5a:ce:62:8f:1d:ab:bb:0c:
4f:05:c3:9d:05:bd:a3:ec:72:17:ba:60:3f:9e:93:96:18:52:
8d:7e:ac:13:1d:21:6e:ec:57:3e:b4:45:25:e9:5f:29:69:3d:
ea:db:06:c3:0d:18:59:f0:bd:9b:fa:9c:2c:9a:ad:e7:6e:f8:
3e:df:78:7c:26:5f:d7:5c:39:30:11:06:a0:8e:0a:7a:b5:38:
82:b8:a7:51:03:34:f8:80:cb:fe:49:b1:53:00:5f:3a:46:8b:
5b:2a:66:cd:0d:23:10:56:0f:73:e2:35:97:41:43:6c:61:c3:
c2:7b:41:ca:0a:0e:a6:24:15:7b:99:a0:cb:5b:cb:00:90:3f:
4c:23:41:82:f8:15:9d:24:4b:8a:72:4b:68:1b:3b:5e:eb:dc:
bd:bf:8e:87:ff:c2:66:48:25:23:f8:09:42:1c:32:23:d6:e0:
c7:c6:83:95:2e:65:53:ae:ef:04:04:4c:a2:11:0e:36:4a:1f:
ba:d3:38:ad:50:cb:9c:0e:a4:77:e4:65:77:66:31:d6:19:6a:
da:77:90:d1:a9:99:8a:19:19:d2:0a:32:57:de:73:80:66:6b:
c4:af:08:9a
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUVCeQrQt7idV6mK2MmBzPYW+nF/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjAxNTE4MjhaFw0yNTEyMTkxNTIzMjhaMDMxMTAvBgNV
BAMTKEE4MTE2NDAwNDZCQTNGNDk1QkFCNDk4NDUwOEUwNTAyMzY1MEZEODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbKXb4npVkOMfyeiFiqeA2decs
phiBZfGODYQZQKLCH/sECQiE3s7nXz7ChBJdEGfCldH5fe/f5cFWjn+Vtt3qi/GM
fiLfDdrnsh/h7k8nj7LGrTXWaJpSRRTA+g3sDekBQ/COQwZV1ZZVZHr2lu21J6dq
hxzvIF5a+nH75T43KSsofJt3dCeVZkBvKi5yoPIbZO6GvmwCVICkn8fROPM/ZwiZ
szexHA9IV+cpcO7wKKAAyZMzI6QaLB/LWtBiRZD2jOSRz5Dq5W2Typ4Q4K4MMHWv
p/nUOiPKtIJGTHnW9/a4GqSSSgO1+6UuuPxiuw9rPWJlnzxaKLmE11R0smqzAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUqBFkAEa6P0lbq0mEUI4FAjZQ/YgwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzNjM2MmUz
MTMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAtQoswDQYJKoZIhvcNAQELBQADggEBAMZxVmoQIe+jHkS8o/DNsxQ8AaFx
3YayihQHcLdazmKPHau7DE8Fw50FvaPsche6YD+ek5YYUo1+rBMdIW7sVz60RSXp
XylpPerbBsMNGFnwvZv6nCyaredu+D7feHwmX9dcOTARBqCOCnq1OIK4p1EDNPiA
y/5JsVMAXzpGi1sqZs0NIxBWD3PiNZdBQ2xhw8J7QcoKDqYkFXuZoMtbywCQP0wj
QYL4FZ0kS4pyS2gbO17r3L2/jof/wmZIJSP4CUIcMiPW4MfGg5UuZVOu7wQETKIR
DjZKH7rTOK1Qy5wOpHfkZXdmMdYZatp3kNGpmYoZGdIKMlfec4Bma8SvCJo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:09 2025 by rpki-client