Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138362e302f32342d3234203d3e20313336373837.roa
File: 34352e38302e3138362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: PiKbwdzY+mVBg9/gIYIdG7QIE6uCNdlUpzmJMlE71cw=
Subject key identifier: 52:55:CE:3B:36:B8:C0:63:DC:48:90:75:5B:A3:D3:1D:64:A6:E7:C9
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 615B694671370FFC460988ABFB50F0B70A7B965F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:31 +0000
ROA not before: Fri 27 Dec 2024 11:42:31 +0000
ROA not after: Fri 26 Dec 2025 11:47:31 +0000
asID: 136787
IP address blocks: 45.80.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:5b:69:46:71:37:0f:fc:46:09:88:ab:fb:50:f0:b7:0a:7b:96:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:31 2024 GMT
Not After : Dec 26 11:47:31 2025 GMT
Subject: CN=5255CE3B36B8C063DC4890755BA3D31D64A6E7C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:cc:52:c6:76:f9:f1:2e:c9:b2:cf:c8:cf:
c8:52:cb:45:e6:78:96:3c:35:3e:25:e0:bc:89:09:
9d:a6:62:9b:36:ab:86:70:c7:f2:43:2b:f2:a8:9a:
37:58:a8:e5:65:18:48:35:21:4f:4f:41:e2:23:40:
8c:e5:93:17:84:e8:16:bb:b8:f6:d2:10:64:5d:09:
31:81:5b:25:b5:77:51:71:c1:6a:b1:f4:7f:19:e5:
85:1a:39:71:e0:f4:5c:aa:6a:b5:c4:5b:44:15:ec:
46:14:98:3b:33:88:28:d1:01:95:c7:ea:7d:8c:48:
6e:b6:4f:95:c9:d3:d2:39:2f:6e:58:18:e8:dc:49:
36:f8:5b:de:a5:12:55:4f:08:7d:d3:d9:8e:ef:e8:
dd:02:21:3e:b9:4f:d5:6f:44:f3:ce:1d:01:c5:e7:
5f:ce:6c:3c:96:47:e7:9e:12:3c:d7:32:40:35:8c:
69:e7:23:39:e5:b6:00:bb:16:69:5f:50:ce:32:54:
c3:24:be:a2:67:f2:58:5b:4e:5d:bc:72:1a:9e:9d:
07:22:98:24:8c:db:8f:95:4a:1c:1c:6c:02:9b:96:
5f:b6:1a:b3:f3:f0:21:a5:b7:af:55:04:5a:da:03:
0b:84:ec:b3:57:2d:5c:41:d2:79:a6:d6:b6:38:91:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:55:CE:3B:36:B8:C0:63:DC:48:90:75:5B:A3:D3:1D:64:A6:E7:C9
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.186.0/24
Signature Algorithm: sha256WithRSAEncryption
49:53:94:8e:0f:6f:43:fc:75:6c:a6:5a:f8:c5:a4:bc:55:ea:
2f:1d:7d:c1:c7:ba:cd:73:44:13:84:64:2e:93:8a:d6:87:68:
7f:36:e1:f8:91:7a:cd:99:a9:c9:00:4c:f6:41:17:77:83:0e:
e7:12:03:c8:78:e7:cd:d6:82:bb:22:84:a3:e0:ee:b9:7c:03:
c5:68:04:21:21:f9:3c:e2:89:ee:90:ee:a5:ca:eb:7e:2c:bf:
73:11:73:ba:15:26:7b:9c:67:0d:2d:5d:24:5d:27:f6:ad:2c:
f7:ab:d4:25:e3:98:bf:2d:1e:3a:f1:82:97:96:eb:b5:0e:89:
75:46:6f:49:18:88:f6:6b:c8:99:41:c2:99:7d:d3:aa:3b:dc:
ae:e5:8f:39:07:3f:86:48:08:14:a9:1c:c6:e8:f0:f5:e1:d5:
ee:9d:5d:89:80:eb:46:f5:53:88:90:bd:92:d3:5a:c6:66:ab:
dd:72:f5:16:19:bf:92:89:c9:70:2c:44:fa:dc:2b:d6:7b:9a:
aa:3d:28:f8:ca:84:c4:01:aa:81:ae:99:51:f5:1d:24:15:f7:
a0:37:cf:6c:c4:8c:8f:ab:26:0d:c5:4f:35:d1:e0:6b:0a:1f:
5a:bd:90:c2:86:c0:bd:90:6f:18:47:7b:69:af:e0:74:5f:3e:
af:b8:8c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:30 2025 by rpki-client