Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3135322e302f32322d3234203d3e203437353833.roa
File: 34352e38302e3135322e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: aGB3wrZwb26uhE9DOvB1bQT3sj4m2bvnj7cGu41rX74=
Subject key identifier: 90:7A:1F:58:18:AB:ED:61:CC:7F:57:0D:FC:74:44:A2:B3:B3:D1:08
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 706689FBB81683A63396586EBFB011BC2FC008BA
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3135322e302f32322d3234203d3e203437353833.roa
Signing time: Fri 20 Dec 2024 15:23:37 +0000
ROA not before: Fri 20 Dec 2024 15:18:37 +0000
ROA not after: Fri 19 Dec 2025 15:23:37 +0000
asID: 47583
IP address blocks: 45.80.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:66:89:fb:b8:16:83:a6:33:96:58:6e:bf:b0:11:bc:2f:c0:08:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:37 2024 GMT
Not After : Dec 19 15:23:37 2025 GMT
Subject: CN=907A1F5818ABED61CC7F570DFC7444A2B3B3D108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:07:a2:df:36:5e:6a:65:bf:fc:aa:b6:ab:
4d:21:f8:53:4d:49:f4:d1:ab:8b:88:1c:0c:e9:85:
47:91:1b:cd:a3:97:6e:2d:92:2b:b8:ce:9e:49:3a:
cd:f2:54:12:c5:ed:04:f8:c7:78:2c:05:47:68:55:
be:c9:0c:ff:9d:05:23:cf:fa:65:f2:59:73:40:1b:
a4:23:12:66:c1:1c:2b:c8:e0:f9:3f:f0:0b:bc:c7:
69:a4:2c:66:6b:84:62:90:0a:16:f0:d3:19:82:f8:
62:aa:14:2a:6b:d8:a8:cd:12:04:dc:ba:ae:d4:1c:
b5:ef:de:cc:43:7a:bd:3f:06:d1:05:7d:a4:82:73:
64:8b:d3:76:77:17:93:3f:7e:ec:80:f0:95:ce:75:
b4:17:8d:8a:eb:86:b4:c2:52:d9:aa:1b:1d:c5:01:
6a:90:ed:70:98:a0:1e:05:88:f5:57:bc:0d:fc:08:
91:44:cb:fb:ae:56:61:85:c1:05:65:cf:56:93:f3:
40:6d:06:57:52:31:d1:ab:ad:43:72:54:32:90:91:
e3:05:ab:cc:34:21:ed:5d:b1:8e:fa:1d:a3:88:74:
9a:f9:eb:e4:53:7f:3c:5c:14:d5:8d:06:36:e1:80:
db:cc:c0:fb:09:87:68:00:94:3c:39:26:f1:b5:af:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7A:1F:58:18:AB:ED:61:CC:7F:57:0D:FC:74:44:A2:B3:B3:D1:08
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3135322e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.152.0/22
Signature Algorithm: sha256WithRSAEncryption
61:36:67:bc:64:92:35:53:48:38:ea:24:f3:78:c9:00:94:27:
af:fe:e1:e3:a0:63:01:3c:37:8c:22:49:13:1f:35:ee:b8:0f:
c4:c5:27:81:b4:86:73:01:1e:c4:39:df:6d:d2:06:36:f0:36:
aa:e3:1f:eb:8a:c9:51:06:d7:e6:b0:a9:8c:80:1a:df:4c:bc:
e7:b3:7f:59:8c:b6:d1:34:52:78:e8:28:88:96:fb:d8:71:da:
74:7d:c2:18:10:fd:33:73:7b:3b:29:50:58:1a:ad:e2:ba:7f:
c3:f3:3b:e7:59:e5:01:e1:5b:6f:3a:c4:ff:6c:5e:a6:14:fd:
16:80:b1:5c:38:97:fa:70:54:cb:39:a6:d1:ca:54:3b:51:e2:
61:7d:4a:f3:00:9f:e0:75:f5:6f:ec:fb:3f:4e:43:ea:87:10:
be:45:28:d6:9f:2a:76:f6:58:59:4e:c7:a3:5e:c3:da:44:c3:
23:1c:37:aa:d7:79:db:05:20:c0:04:b2:59:d7:b6:1f:4e:57:
50:36:28:45:ce:db:b4:d1:e4:c7:6a:41:ee:84:14:69:cd:f1:
80:cd:2f:5c:16:8f:c0:75:51:b7:a6:5b:e9:b5:4f:8b:8e:40:
c9:5d:98:bd:be:95:9d:ad:1b:12:7f:50:fb:70:de:56:ce:14:
3b:b5:85:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:38 2025 by rpki-client