Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133362e302f32342d3234203d3e20313336373837.roa
File: 34352e38342e3133362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: nNquSTYQeklrhWQtO+z3Kkv4k7nVO3VcYbiysdJfbVA=
Subject key identifier: 7E:A1:DC:56:BF:29:87:A5:9B:44:35:7E:74:7E:2A:9B:7A:70:98:5B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0A4DE56867D1EAAE2321EC935F86BE16708B5701
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:41 +0000
ROA not before: Fri 27 Dec 2024 11:42:41 +0000
ROA not after: Fri 26 Dec 2025 11:47:41 +0000
asID: 136787
IP address blocks: 45.84.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:4d:e5:68:67:d1:ea:ae:23:21:ec:93:5f:86:be:16:70:8b:57:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:41 2024 GMT
Not After : Dec 26 11:47:41 2025 GMT
Subject: CN=7EA1DC56BF2987A59B44357E747E2A9B7A70985B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:35:46:7b:10:50:d8:c0:37:59:32:88:6c:
ca:9d:30:32:02:21:76:45:c0:ed:e1:97:eb:7e:e2:
3d:62:6a:0c:7e:31:00:6e:c2:9d:98:9d:6b:27:b0:
33:96:2c:c3:4a:6a:81:2c:bd:65:99:29:be:8c:f3:
3f:d4:18:38:49:b5:da:0a:95:d8:13:92:39:07:53:
53:b0:4b:1b:f1:28:18:5b:14:94:24:d7:80:8f:c2:
f1:0f:5d:a9:62:cb:c3:2c:07:b9:12:91:2f:2c:9b:
54:cd:6f:d2:2d:ac:5f:d9:b9:94:fe:18:ed:0d:ef:
eb:6d:d7:22:8b:9a:0d:f5:a5:d1:b2:7b:60:5f:66:
b5:8b:c2:44:a1:dd:46:cc:90:5a:ca:32:e9:f1:f7:
05:77:6c:85:7a:99:bf:1e:b9:3f:96:c6:45:77:87:
a2:3b:4d:d1:a7:42:22:be:16:98:1e:1f:4d:a6:2b:
69:48:98:4b:2e:df:c1:a9:67:6e:16:e0:5a:fa:12:
5c:f6:3b:de:46:4c:de:00:93:48:6c:f9:c1:72:56:
49:ff:96:0d:78:45:0f:0f:1a:0f:fa:bb:ec:96:46:
51:16:f0:e2:64:0e:e1:7f:9c:37:b3:cf:b5:fb:cf:
cc:b3:33:22:a7:95:1b:09:2b:90:0e:41:c4:87:30:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A1:DC:56:BF:29:87:A5:9B:44:35:7E:74:7E:2A:9B:7A:70:98:5B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.136.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:17:29:d5:12:d9:26:0b:c4:0b:28:e0:bb:14:16:b4:67:7f:
4d:04:02:e3:e2:bd:03:22:b1:3b:39:4d:2a:28:79:7a:14:32:
f8:76:4c:34:d4:70:8c:be:0e:ad:e9:4a:f0:43:7f:c4:98:0a:
21:85:d3:8a:34:6d:d3:62:67:cd:0a:73:1b:59:c9:99:db:b6:
26:c7:72:32:e8:29:37:c0:36:5a:9c:3a:0b:8d:79:e3:42:bf:
fe:82:2a:0a:45:a5:2b:71:fc:48:9f:8e:14:42:19:05:35:6d:
c0:23:ba:d7:2e:32:f2:10:9c:b0:a8:02:43:9d:a0:a6:64:6d:
75:0d:0d:e3:0e:62:af:5b:b4:35:13:1c:21:99:47:e3:d2:1a:
b8:5d:f7:9a:0d:43:a9:20:da:ea:e7:e8:f9:a6:7b:0c:ef:d8:
79:57:ee:9c:75:0d:f7:58:22:24:fb:6c:2b:44:8a:05:b4:a5:
df:a0:1b:93:ac:12:38:57:3d:18:3b:c9:78:b7:8d:6c:f4:73:
f1:ac:1b:5b:f5:9b:a9:7f:3d:54:11:c1:52:cb:fb:8e:1e:85:
ce:38:b2:a7:08:4e:b3:10:6e:d8:43:ab:31:6a:62:1e:f7:f1:
44:53:11:bd:08:9e:5e:23:99:b4:8e:be:54:2d:79:f7:a6:3b:
99:d0:a0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:00 2025 by rpki-client