Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138352e302f32342d3234203d3e20313336373837.roa
File: 34352e38302e3138352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: WVCdrbaksjWb8WQMF9kKz1QePQe2XqsnkdkB2DhRiXE=
Subject key identifier: CF:57:CC:77:69:F8:68:C6:9B:4E:F6:EF:0B:E3:BB:62:DC:11:73:3D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2C0C9E9C2192405436CE0A5F85B3130320C82EBE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:47 +0000
ROA not before: Fri 27 Dec 2024 11:42:47 +0000
ROA not after: Fri 26 Dec 2025 11:47:47 +0000
asID: 136787
IP address blocks: 45.80.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:0c:9e:9c:21:92:40:54:36:ce:0a:5f:85:b3:13:03:20:c8:2e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:47 2024 GMT
Not After : Dec 26 11:47:47 2025 GMT
Subject: CN=CF57CC7769F868C69B4EF6EF0BE3BB62DC11733D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:14:87:75:eb:7b:d9:f6:8c:4f:4f:bf:f0:
14:d6:f3:16:46:fb:69:c0:26:d8:7e:3a:8f:67:0d:
60:5b:16:14:75:68:3f:7e:af:eb:42:b9:bf:75:44:
38:17:a8:7f:ae:e0:7d:f1:00:f2:75:16:f3:2d:ec:
7e:3f:6e:ae:26:16:91:a4:e5:79:1f:2a:05:5a:ba:
48:46:99:27:ca:ee:66:be:ac:64:16:13:3e:56:14:
77:11:f9:b4:97:ba:49:13:c5:4e:2d:46:a0:da:81:
fb:0b:17:11:ec:c8:66:d4:a4:3a:af:19:4f:8d:c4:
83:20:ff:18:c6:87:b2:46:c5:86:f2:73:55:91:0f:
36:bc:7a:f1:6c:f6:7d:ae:29:7e:4f:61:3e:8c:d8:
3c:33:06:67:d4:21:1a:69:7a:36:77:27:26:79:c0:
43:d1:38:ec:88:e2:2f:41:dc:22:cf:d2:18:f3:ed:
7e:55:28:27:69:58:2d:2e:9a:27:a7:0f:18:38:9b:
75:3d:4b:5f:d0:08:20:fc:c0:34:69:38:cb:d6:6b:
bd:4e:ab:9c:0f:10:65:8c:b6:1f:7c:93:bc:bf:59:
39:43:d0:8d:32:b8:98:20:dc:63:bc:35:18:2c:12:
ee:cb:ed:6c:d0:18:df:bf:b5:0a:3a:72:94:0f:74:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:57:CC:77:69:F8:68:C6:9B:4E:F6:EF:0B:E3:BB:62:DC:11:73:3D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.185.0/24
Signature Algorithm: sha256WithRSAEncryption
25:7a:43:15:a0:b9:83:15:d5:b9:57:7e:84:b4:e7:5a:ed:99:
88:2f:32:b1:f1:2e:f5:b6:b9:b4:2a:6e:59:8b:20:4d:78:84:
9a:de:ff:44:bd:16:c2:54:e4:a5:35:25:73:b2:b6:62:f7:e0:
39:ac:b5:48:ed:b3:f0:31:90:26:f6:f4:32:9f:50:52:b4:fc:
b3:a5:e2:d3:1b:40:1a:ce:4d:ba:24:ea:e9:98:25:64:4e:66:
42:7b:61:cf:47:ae:58:f6:4d:8d:4b:0e:00:40:ea:f1:f0:b1:
d8:2d:2f:ea:a8:c2:26:91:8e:b3:6f:aa:59:ed:4f:c0:03:43:
13:73:65:39:99:83:0b:d8:43:a3:48:54:76:21:3f:c6:0e:5c:
a9:07:f6:06:ad:53:d4:9a:f0:83:c8:39:7f:64:29:a4:9f:4c:
ab:54:17:3c:61:7e:d6:28:86:ee:c4:f7:0b:fb:8c:16:6e:9a:
4f:68:2f:f2:0a:8b:03:d4:2b:3b:dd:54:0e:bc:78:c5:e7:a5:
18:d8:85:5e:e2:bb:30:c1:72:9f:9a:c6:0e:d7:2d:38:2a:25:
ab:dd:f8:80:d1:77:3f:71:5f:97:95:72:f6:54:f9:11:17:77:
95:46:33:ee:eb:b6:c4:e2:73:38:6c:d3:1e:a6:e6:cd:b2:10:
e6:a3:00:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:36:01 2025 by rpki-client