Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133372e302f32342d3234203d3e20313336373837.roa
File: 34352e38342e3133372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: N52F90RGxl6cn99jFaarjY1jwzpnqZkFXRzOYFqG0ds=
Subject key identifier: 4A:69:84:9F:EB:49:AF:00:80:FC:48:3D:DE:80:94:0E:CA:AB:34:B0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 101AC8DBB4B9F311C83DEFD7741836F117F5146F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:47 +0000
ROA not before: Fri 27 Dec 2024 11:42:47 +0000
ROA not after: Fri 26 Dec 2025 11:47:47 +0000
asID: 136787
IP address blocks: 45.84.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:1a:c8:db:b4:b9:f3:11:c8:3d:ef:d7:74:18:36:f1:17:f5:14:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:47 2024 GMT
Not After : Dec 26 11:47:47 2025 GMT
Subject: CN=4A69849FEB49AF0080FC483DDE80940ECAAB34B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:53:ed:b0:27:00:f1:ea:93:04:63:5b:05:
85:52:c6:b7:a1:7e:85:0b:e3:e4:8d:8c:0b:bd:a9:
23:1b:f1:3d:10:54:c7:3b:14:ad:43:d1:05:a7:96:
c3:e2:45:6f:ad:99:4b:f5:4c:2d:ef:ed:73:29:ba:
32:4d:47:b2:c6:7c:54:e9:a8:56:4c:ad:6a:9a:41:
1b:6d:fa:f3:19:5b:cf:b0:89:e1:d6:1f:1d:0b:81:
ad:85:0c:cc:64:d7:70:60:50:ab:81:1e:fc:19:ab:
fa:e2:68:1d:c4:25:54:ed:ba:8a:dc:60:1f:96:ee:
92:cd:d8:65:db:40:00:64:bc:62:1d:a8:a4:10:d4:
e0:11:31:fd:35:4c:ed:d3:8a:61:26:9b:4f:57:c4:
f1:0e:5a:d0:d6:db:d5:d7:65:49:12:4d:1b:73:54:
b9:b7:c3:c3:54:39:d8:53:62:8c:af:89:a8:22:f9:
57:74:ab:f9:cd:71:ba:2f:b6:36:6d:8d:70:55:8e:
b8:30:02:fe:1a:3c:55:12:4a:f1:1b:59:3d:bd:71:
93:ee:a1:8e:c4:1c:35:3c:be:5b:b1:1b:f7:24:e7:
44:db:e1:ae:9f:1b:ce:11:43:50:36:e5:c1:e0:74:
d2:96:e9:2c:8f:b6:db:a9:1e:93:a6:6a:26:2d:1f:
46:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:69:84:9F:EB:49:AF:00:80:FC:48:3D:DE:80:94:0E:CA:AB:34:B0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.137.0/24
Signature Algorithm: sha256WithRSAEncryption
63:25:28:80:83:73:a4:ef:c1:79:f9:a5:a5:b7:ea:25:f0:a3:
f1:80:1c:36:f6:12:bf:7c:6e:25:db:7f:69:b8:ea:ea:2b:b0:
32:0b:54:9f:52:ae:02:4a:ba:2c:63:d6:54:9a:47:51:d1:3f:
c9:f8:79:1a:38:91:0a:3b:e5:28:d6:0a:17:3a:18:4e:94:53:
1e:97:02:39:c8:ce:97:74:69:b4:6d:17:0a:91:42:94:7e:d6:
78:a9:24:c9:20:c0:d1:f7:04:2a:90:74:9c:b8:0b:1a:d1:ad:
90:b9:f9:49:29:4e:2d:0f:cf:c9:ef:90:aa:6e:5f:4d:67:14:
48:6f:71:eb:46:73:64:5c:8e:5e:d3:e3:ac:21:c3:f8:e2:34:
45:f0:67:09:de:6b:66:37:b5:78:10:8e:fc:aa:a6:c3:64:bb:
b6:e6:1a:aa:83:94:81:ff:27:c9:50:83:e8:5d:44:7d:40:1a:
c5:c5:ce:98:a2:75:53:06:4a:bd:b6:8c:66:2e:86:bd:75:ee:
93:1f:dc:b2:b8:50:4d:ec:7b:66:b0:27:cc:f3:40:76:7e:2c:
38:26:5d:69:5e:c2:9a:eb:24:81:c9:24:b9:be:dc:4b:32:4f:
a4:b5:ef:77:7d:c6:5a:68:6a:83:d1:53:5d:37:c0:b1:de:08:
7f:d5:c0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:45:01 2025 by rpki-client