Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138372e302f32342d3234203d3e20313336373837.roa
File: 34352e38302e3138372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: chGCeR4kVZzg3y/dn1POAZ8zZek0rHtA7zXkt1G6GE0=
Subject key identifier: 94:3B:61:DF:8D:C3:12:B7:6C:73:33:51:96:49:DB:24:23:59:0C:BD
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 481F7DC244B568414F5448E320631A0F642E9AE1
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:40 +0000
ROA not before: Fri 27 Dec 2024 11:42:40 +0000
ROA not after: Fri 26 Dec 2025 11:47:40 +0000
asID: 136787
IP address blocks: 45.80.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:1f:7d:c2:44:b5:68:41:4f:54:48:e3:20:63:1a:0f:64:2e:9a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:40 2024 GMT
Not After : Dec 26 11:47:40 2025 GMT
Subject: CN=943B61DF8DC312B76C7333519649DB2423590CBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:d8:16:5e:f5:8f:e0:1b:fa:58:95:df:a9:
45:18:b9:de:eb:02:af:c1:8c:fa:10:2c:f2:ba:10:
64:a0:c3:bb:49:ed:25:d0:c8:c4:61:81:62:de:28:
43:93:25:f9:80:ba:3e:c4:ba:19:02:d4:19:95:e8:
bc:30:12:26:2c:23:a7:a4:1a:02:16:43:54:14:76:
65:ad:99:cb:5d:f9:12:f8:31:d8:05:d9:35:c8:82:
0f:a7:ee:6a:e2:80:98:ba:a1:91:0e:67:a9:36:ec:
38:d8:3a:de:df:8f:23:04:e1:62:c3:c7:47:67:ae:
fd:82:d0:f7:78:e7:30:ea:7d:e0:35:d9:f3:25:2b:
a8:51:23:53:80:fb:ee:98:6e:d1:d5:0a:57:a3:d1:
5a:5e:c1:10:9c:07:d7:70:79:a8:72:4b:86:e0:a5:
09:39:d8:f1:9e:cb:6d:16:42:ba:86:c4:00:79:43:
d7:d6:0c:96:12:04:0b:36:ba:af:8a:2c:82:b9:31:
45:ef:3f:6a:fd:90:46:59:b0:23:1a:4b:3c:29:d6:
5a:2a:c7:5b:e4:79:d5:18:e3:af:ae:c3:4d:7e:3f:
ed:57:c9:22:eb:71:a4:db:e9:91:fa:22:b4:e9:f6:
1a:9a:22:56:22:27:d6:63:f5:43:16:91:e4:79:36:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3B:61:DF:8D:C3:12:B7:6C:73:33:51:96:49:DB:24:23:59:0C:BD
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.187.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:52:70:2a:e9:18:6e:01:5a:e6:55:3e:9c:a5:95:21:08:42:
11:7c:33:51:8c:c2:4b:da:60:56:00:5c:43:43:09:2e:49:2b:
76:9e:15:4f:b1:59:41:48:90:cc:fe:26:fe:21:55:02:ad:89:
ff:23:c5:32:92:53:e9:c6:23:7f:de:2c:4b:f2:c0:6c:ad:f0:
e9:ee:64:3d:5b:d1:6c:f6:6e:53:c3:ec:11:3e:cb:7c:29:66:
16:ae:2e:c4:b1:11:92:31:4f:81:36:eb:3f:af:55:0a:84:d7:
64:d8:8e:35:44:f8:3d:75:1c:99:66:61:96:01:a6:c4:0e:46:
12:65:e4:5d:9e:ec:4b:3a:0b:8b:76:57:4a:5b:79:dd:ec:c8:
c1:9a:d1:b4:8e:55:25:40:84:ac:4d:c3:71:30:e1:9b:ac:42:
9b:69:01:05:a8:e6:47:51:39:0a:b8:9d:31:cd:d8:fe:81:4f:
36:0f:f1:14:14:df:7d:53:d2:90:50:e5:9e:33:60:e2:74:39:
2e:fd:ad:fd:8e:70:9b:2d:dc:65:ab:73:79:67:31:8b:a5:0d:
e5:65:77:3d:40:de:3d:e8:6d:3a:69:1a:eb:ed:0c:13:4a:0e:
01:64:fb:e8:89:e7:1e:09:8d:fe:44:96:41:07:f7:5f:fa:2a:
94:6f:8d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:14 2025 by rpki-client