Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e342e302f32342d3234203d3e20313336373837.roa
File: 34352e38312e342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Tt6ZVu91nXDE6ZeX80eeuBM4ierzeN9BFW5roZpmEY8=
Subject key identifier: E0:E8:86:24:D0:5B:D1:0D:6B:48:0C:E0:F0:26:04:CE:B5:22:FB:58
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1182EBB5F67B2B928F9378850105917EDB323EFD
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:22 +0000
ROA not before: Fri 27 Dec 2024 11:42:22 +0000
ROA not after: Fri 26 Dec 2025 11:47:22 +0000
asID: 136787
IP address blocks: 45.81.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:82:eb:b5:f6:7b:2b:92:8f:93:78:85:01:05:91:7e:db:32:3e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:22 2024 GMT
Not After : Dec 26 11:47:22 2025 GMT
Subject: CN=E0E88624D05BD10D6B480CE0F02604CEB522FB58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8b:5d:c8:b3:a8:f8:8e:c7:57:07:fd:fb:f9:
d4:0b:c8:c6:c5:6c:41:fd:b1:5c:f9:50:de:dd:0e:
98:44:ab:33:d3:8d:91:80:c9:50:58:35:28:ae:92:
de:59:b0:7e:a9:99:a5:47:42:c0:d5:5a:06:fd:bc:
9f:bb:86:52:12:93:19:39:a1:e4:4b:cc:d3:ca:35:
1d:77:ac:0e:aa:be:95:b0:d8:ff:26:a5:1d:71:f0:
1f:ae:1d:1a:03:b2:c8:24:73:a0:6d:75:e9:cb:f4:
40:89:a6:d6:e2:54:db:61:6c:09:95:15:c1:ea:61:
76:c5:90:23:7a:29:61:af:69:07:b5:38:23:28:fb:
bf:09:2b:31:5d:56:f3:6d:86:ea:5f:db:4e:39:f6:
df:66:93:91:cb:0a:42:c7:fa:72:ee:6d:c7:42:34:
85:ed:0d:79:08:08:cd:88:c4:77:5a:06:cb:fc:63:
47:96:65:5a:d3:bd:cd:12:93:54:d0:3b:55:91:5c:
29:8e:5a:fc:93:1c:31:23:41:80:f8:09:16:19:6f:
02:76:23:12:db:69:11:ea:e8:35:84:4f:1a:a3:4c:
3c:51:4b:54:35:04:e8:7d:86:ec:ed:cf:7d:28:a8:
17:4b:ec:79:a2:fc:ad:5a:29:45:37:23:2d:d5:ab:
38:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E8:86:24:D0:5B:D1:0D:6B:48:0C:E0:F0:26:04:CE:B5:22:FB:58
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.4.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:8d:51:2f:f4:89:72:58:1d:c7:7b:ca:c6:5a:e6:45:ed:1c:
42:3a:36:c5:b6:27:9d:e9:ae:ba:85:bb:a2:13:3c:50:f6:c9:
f0:c9:53:54:47:ec:a5:53:5b:d6:fd:ff:cf:1b:42:02:97:1e:
7f:72:f3:ee:30:19:b0:9e:a1:2f:d6:43:8d:a4:50:84:d5:e8:
50:e2:d0:c4:dd:1c:51:7d:2a:90:e0:47:4c:23:05:56:d3:34:
72:cb:ae:62:08:eb:42:f1:81:8c:7f:39:37:ae:77:dd:4c:2e:
72:d9:48:05:b0:a3:6c:9b:6c:4c:28:a7:5c:98:33:3e:ab:f3:
dd:3d:ba:7d:17:ea:82:6e:20:4f:9d:3c:38:53:56:e1:28:0f:
0f:c7:8f:93:cd:c7:e5:37:7a:f3:2f:e4:ed:5e:ec:60:09:02:
ec:8e:53:5f:a4:01:62:68:5d:4e:19:77:8a:69:c6:c5:59:d6:
3d:7d:e3:c3:97:fd:54:51:c9:81:eb:fd:5c:0d:b6:db:0c:00:
69:e0:74:e2:f2:78:ec:31:b7:cb:82:6c:1d:bf:8a:4b:3e:71:
f9:32:78:c7:3a:37:6d:9f:df:15:01:4f:41:29:08:b5:da:d0:
d0:2c:6f:94:69:b7:4b:6d:49:4e:04:6a:fc:c1:e5:2a:b2:19:
9c:7c:66:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:38:33 2025 by rpki-client