Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232322e302f32342d3234203d3e203630373831.roa
File: 34352e36372e3232322e302f32342d3234203d3e203630373831.roa (raw, json)
Hash identifier: fBJaf9YvQg6iErDEZBZgpgSBMCoM6Z82e4fmpp14ihg=
Subject key identifier: 34:23:5B:62:DF:25:C6:FB:EC:91:66:29:27:8E:A1:17:C8:FC:6E:B0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 18F9D299A248B610A7985DAAFC38109BB6CA5097
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232322e302f32342d3234203d3e203630373831.roa
Signing time: Fri 27 Dec 2024 11:47:10 +0000
ROA not before: Fri 27 Dec 2024 11:42:10 +0000
ROA not after: Fri 26 Dec 2025 11:47:10 +0000
asID: 60781
IP address blocks: 45.67.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f9:d2:99:a2:48:b6:10:a7:98:5d:aa:fc:38:10:9b:b6:ca:50:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:10 2024 GMT
Not After : Dec 26 11:47:10 2025 GMT
Subject: CN=34235B62DF25C6FBEC916629278EA117C8FC6EB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b4:30:34:0d:82:ed:0a:6c:28:29:a6:23:4d:
7a:5f:cb:4b:1b:b8:3e:86:2d:eb:e7:29:69:79:51:
54:16:53:f8:93:05:53:86:c4:5d:25:27:03:b5:bf:
17:1f:04:cc:de:ca:01:39:87:d0:ee:5c:4e:ba:6b:
39:98:10:cf:37:42:e4:4e:1d:34:33:a0:fa:a8:23:
54:7a:c2:bc:e8:cb:d0:da:76:c7:bb:73:58:b0:e7:
fd:4e:6c:50:8f:a1:2d:1b:89:c0:7d:df:8a:f1:23:
18:43:f4:27:04:03:38:36:46:e8:cd:b8:b2:8d:8f:
bb:8a:0c:59:4a:a5:6d:26:1f:94:7e:fb:5e:4a:ef:
4d:d9:43:94:5b:91:15:ef:9a:fa:d6:91:59:b7:46:
e1:86:54:8b:87:ad:ce:97:3b:08:b8:a2:36:7d:37:
99:8a:1e:24:f3:11:27:7d:cf:cd:6d:bf:ef:2d:2c:
c6:12:ec:d6:24:4e:04:b9:69:89:9b:1e:0f:d5:a6:
50:cb:6f:1d:f8:ae:1e:3c:5c:ef:15:4a:49:bb:79:
c6:14:8a:80:96:fe:77:e9:9b:ab:f8:e8:3c:1e:df:
9f:16:ca:da:0c:57:67:eb:f6:db:fe:88:26:f3:6e:
31:f2:7a:de:89:d8:8d:9e:48:2b:d2:ef:8d:1b:c4:
00:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:23:5B:62:DF:25:C6:FB:EC:91:66:29:27:8E:A1:17:C8:FC:6E:B0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232322e302f32342d3234203d3e203630373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.222.0/24
Signature Algorithm: sha256WithRSAEncryption
46:20:de:2a:85:c6:39:cc:d4:8b:15:e4:9a:df:65:e7:0f:6a:
f5:ec:53:14:fa:99:af:fc:bd:18:a9:3a:6c:39:b2:09:f6:c7:
16:b1:69:2b:c5:a9:23:b4:29:6e:77:da:0b:ce:e1:c4:bf:fb:
e4:5f:17:de:f6:90:78:72:a5:5d:7f:db:38:a5:71:18:8b:08:
88:1f:71:64:2d:82:7b:d9:cc:f7:e3:83:3f:8b:60:45:2d:02:
26:56:dc:f0:4f:7c:2a:12:4f:ab:3a:de:18:9e:13:78:cb:29:
3b:22:fd:50:67:65:22:40:c0:2d:e7:66:c8:69:ca:20:aa:86:
76:94:61:66:83:5b:5d:45:af:54:a3:92:87:51:19:80:90:ef:
35:f7:a5:f3:12:c3:4d:52:f8:da:43:a9:78:45:f0:19:1b:f8:
0b:bc:93:0a:dd:36:a1:2e:98:28:32:df:df:1d:5c:a4:5f:5a:
4b:b1:89:6a:1a:e8:76:e0:1b:87:78:23:bf:f4:f5:9e:5a:dc:
01:c8:79:d9:1f:93:e3:23:4b:8f:f8:c4:9a:c9:54:03:8e:5e:
a0:2f:2f:8d:a5:63:ed:66:b2:e1:42:dd:14:07:2c:29:b5:55:
77:eb:10:26:40:00:8b:c0:1c:bf:0d:e9:2f:81:c0:dd:a9:c9:
72:6e:a3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:45 2025 by rpki-client