Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e352e302f32342d3234203d3e20313336373837.roa
File: 34352e38312e352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: I3nkGd0gzygxg5Xyo5ZIMRtiQIPsqJMoXdoaqpRI4+g=
Subject key identifier: 97:12:93:0E:4C:46:EC:55:C7:DB:8C:87:17:0A:55:A7:A4:66:08:37
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7020FB725DE17873609FEE95E9E38250BF5D5A96
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:21 +0000
ROA not before: Fri 27 Dec 2024 11:42:21 +0000
ROA not after: Fri 26 Dec 2025 11:47:21 +0000
asID: 136787
IP address blocks: 45.81.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:20:fb:72:5d:e1:78:73:60:9f:ee:95:e9:e3:82:50:bf:5d:5a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:21 2024 GMT
Not After : Dec 26 11:47:21 2025 GMT
Subject: CN=9712930E4C46EC55C7DB8C87170A55A7A4660837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:1b:cd:20:ab:47:58:21:d2:73:30:79:18:
e4:20:5d:36:db:89:5c:df:76:1c:c1:d3:39:e5:f0:
f4:ed:15:6c:fc:ca:bd:d2:e9:53:3b:4f:29:17:ca:
f9:dd:43:0b:66:1d:16:3b:ff:a5:f8:67:45:28:c3:
2c:3e:6c:cd:44:3a:a0:d2:43:17:8a:4b:27:6c:3d:
7e:99:cc:af:c3:b5:e2:f3:1e:d1:74:f3:6b:d6:1f:
a9:d9:ed:5a:b5:af:c4:64:22:4e:30:56:96:0c:e1:
81:9f:78:d7:12:15:13:2c:05:f8:2f:79:eb:f6:a5:
aa:82:c4:c7:22:b2:9d:f5:8d:8e:9e:a8:13:29:0b:
1b:fb:05:af:91:31:f9:db:f7:26:c1:d6:89:15:e7:
1b:1c:31:00:cb:9d:96:27:df:aa:0b:cd:2a:02:30:
d7:50:52:cb:37:3a:aa:b5:fb:6b:e6:61:80:ba:8a:
57:a9:75:82:1d:34:18:e2:02:b9:68:d2:e8:a0:3f:
cb:5f:f1:ff:86:f4:b8:a3:16:87:c4:6c:5c:50:8d:
84:ea:6d:30:e2:fc:07:05:7a:9b:2c:b9:67:86:71:
c9:aa:17:1c:a4:f6:71:c3:ec:5d:02:ab:c4:89:3f:
36:1e:8d:2e:c3:c2:67:77:a3:74:00:ce:e2:8d:1c:
f1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:12:93:0E:4C:46:EC:55:C7:DB:8C:87:17:0A:55:A7:A4:66:08:37
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.5.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:4d:79:06:9e:c2:52:e2:02:e3:7d:62:0a:d0:72:b6:e4:79:
53:b8:34:c4:e0:b5:78:eb:b1:0a:ea:c4:53:1d:e8:19:3b:08:
18:e2:12:b7:95:fa:be:0f:90:6d:69:bb:03:cb:48:68:aa:3f:
b4:42:dd:ef:8c:45:43:a1:e9:56:55:9a:4c:52:aa:4c:40:b5:
d3:5b:b1:4b:09:73:ee:80:8a:88:f0:55:f0:3b:30:7e:2b:9b:
e1:ec:32:cd:25:b8:89:10:bb:d6:bc:a4:a3:cb:1b:a4:de:2a:
d7:a5:b2:61:20:a7:ad:82:93:3a:22:a1:1d:ef:39:80:02:93:
f0:26:aa:82:19:da:51:5a:a5:dc:ed:c0:9c:00:b8:f8:ed:c8:
b2:75:c2:0c:8d:41:48:29:de:8c:ca:52:56:f2:1b:36:e4:7d:
6b:1c:65:24:d2:ca:f6:db:7b:dd:20:ca:de:9c:97:36:f5:2c:
f9:9b:ea:47:5c:26:94:ac:39:9f:e2:5b:0d:8d:50:00:21:ba:
58:f9:05:de:12:9b:9b:7c:c3:a9:79:5e:62:85:13:5c:3a:4c:
be:98:bd:53:fa:b7:d1:d0:4c:ba:54:27:8d:b1:51:b4:87:38:
d2:f5:4e:2f:5e:c2:52:3a:25:30:a4:fd:c8:8b:30:ed:70:db:
fc:af:cc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:45:02 2025 by rpki-client