Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e372e302f32342d3234203d3e20313336373837.roa
File: 34352e38312e372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: F+J0i8vKD0gyZU5upcsC79sLKljNIkFuE9f3gBuz7Pw=
Subject key identifier: 7B:4F:A7:E2:22:B1:39:B7:21:F7:C4:FD:74:75:08:50:B3:F9:C3:26
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6ABCD01E222D09BA16CD5914862A5BF55ABFF2CA
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:21 +0000
ROA not before: Fri 27 Dec 2024 11:42:21 +0000
ROA not after: Fri 26 Dec 2025 11:47:21 +0000
asID: 136787
IP address blocks: 45.81.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:bc:d0:1e:22:2d:09:ba:16:cd:59:14:86:2a:5b:f5:5a:bf:f2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:21 2024 GMT
Not After : Dec 26 11:47:21 2025 GMT
Subject: CN=7B4FA7E222B139B721F7C4FD74750850B3F9C326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:51:92:fa:90:98:5c:c9:32:1e:bb:85:d3:
b0:3b:e8:04:8b:8f:cc:09:f3:e4:81:30:f9:20:50:
d0:c1:b8:b1:4c:77:c3:25:fb:99:16:28:23:02:47:
f5:ef:d8:6b:9b:c6:82:f0:cd:04:84:60:c8:74:b1:
39:c9:7b:cc:38:74:bf:60:08:cc:be:4c:06:fe:23:
74:2c:8e:7a:c9:a3:dd:0f:81:a5:ea:07:21:e9:ae:
51:18:2e:cd:fd:bf:d0:6d:ea:25:1c:11:e1:fa:34:
e6:fd:ac:4c:96:2b:ad:01:f2:3d:01:90:2a:55:58:
66:e3:23:6b:2d:b6:10:0a:e2:58:62:97:fb:43:2e:
33:ae:e6:18:c1:51:e5:d1:d9:24:02:a4:98:ed:67:
b6:8e:75:51:b0:18:8b:f6:5d:30:95:16:bd:98:69:
74:b1:d0:7b:75:05:de:9f:94:bd:dc:de:eb:4d:df:
f3:dd:47:0a:38:4f:92:18:c1:c7:51:d0:b8:17:7d:
d5:37:ef:10:da:8e:d2:9f:e5:f0:47:76:1c:95:ee:
9c:15:9d:1c:8c:f6:36:b0:aa:d0:62:23:d3:c7:ab:
94:c7:17:d8:9f:cf:ea:f7:71:17:d1:10:9b:f6:47:
f2:43:84:8f:e9:cb:fe:09:36:96:fc:b7:83:e4:46:
31:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4F:A7:E2:22:B1:39:B7:21:F7:C4:FD:74:75:08:50:B3:F9:C3:26
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.7.0/24
Signature Algorithm: sha256WithRSAEncryption
63:be:5c:4b:6f:4c:41:92:ab:30:f4:69:3d:02:34:03:09:ef:
7f:11:ce:dd:fb:f9:18:c5:3d:ed:f1:9b:00:49:25:58:84:90:
94:34:5d:19:82:b9:7e:e5:39:6d:d4:46:00:64:f0:e1:25:3c:
ff:9b:59:d2:c8:96:4b:08:bf:b4:50:7d:78:bf:6b:8a:ad:13:
79:cd:d7:56:94:5c:c1:86:57:a8:34:18:6a:0b:bd:e0:66:dc:
2a:0c:e0:7d:81:25:92:53:76:dd:7d:b7:a7:6e:24:46:ad:02:
64:d2:c4:1e:e6:6d:96:c8:8a:85:8d:07:d2:1c:f4:05:0f:2b:
c5:69:63:4a:f4:b0:38:55:ac:c9:d3:2c:1a:71:2f:d4:30:1b:
57:36:6c:0b:49:0d:e4:e8:94:9d:7d:67:63:e8:b5:2d:f6:a9:
dd:cc:04:2b:6c:7f:ef:3a:ee:36:67:98:4d:3d:55:2d:59:e2:
77:f6:b9:68:6c:6f:48:7e:27:7e:6a:cd:cc:5e:56:7a:78:46:
30:f3:86:4d:22:35:7f:38:72:25:5b:10:32:5a:93:91:2e:b0:
ec:f2:27:d4:6a:3b:ab:43:52:ef:c2:a6:6a:84:08:6c:eb:b8:
3e:05:58:85:1a:09:b5:27:26:a8:8e:88:29:7c:c3:e5:bd:ff:
b8:96:48:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:48 2025 by rpki-client