Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133392e302f32342d3234203d3e203632323430.roa
File: 34352e38342e3133392e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: 58z4E9wclQADjCIl2p1a6P9ATHl5vOhE0i+rJHhJ4Hk=
Subject key identifier: 09:61:9F:5B:B0:60:2B:51:49:5B:01:0D:38:90:DF:38:C4:1B:09:9F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 024E0E6EE5D96A8E5001EDF606760F82E12DAA4C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133392e302f32342d3234203d3e203632323430.roa
Signing time: Fri 27 Dec 2024 11:47:21 +0000
ROA not before: Fri 27 Dec 2024 11:42:21 +0000
ROA not after: Fri 26 Dec 2025 11:47:21 +0000
asID: 62240
IP address blocks: 45.84.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:4e:0e:6e:e5:d9:6a:8e:50:01:ed:f6:06:76:0f:82:e1:2d:aa:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:21 2024 GMT
Not After : Dec 26 11:47:21 2025 GMT
Subject: CN=09619F5BB0602B51495B010D3890DF38C41B099F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:f3:f4:78:fb:b8:ed:3b:0d:54:59:16:11:
a9:a7:a6:21:e5:f6:b0:3c:18:6a:f9:0e:9d:97:64:
c9:09:53:aa:ab:83:5b:ed:26:4e:20:b0:b4:66:e3:
60:96:0d:c1:09:b9:3a:63:b4:f3:6b:8a:e0:60:32:
14:26:ee:a7:b5:a4:e7:3d:e0:b5:d2:fc:8d:ba:9d:
20:9a:b9:39:6d:4c:c4:2b:f1:69:cc:52:5b:9b:a6:
cd:45:24:42:03:91:9a:e4:f7:35:16:c2:9e:9f:5c:
8c:fc:f4:ed:77:77:7a:c3:38:17:fb:b3:00:16:09:
20:c0:30:8e:d1:b1:86:63:53:35:8f:32:d5:80:a6:
8c:0e:5e:17:79:45:cb:c5:6d:49:3c:2f:5e:08:c7:
1b:54:a8:5d:32:c2:8c:c7:c9:71:f5:f3:82:58:61:
3a:f4:f6:73:74:bf:3a:fb:1f:99:9d:90:b1:cd:94:
98:a1:db:c4:80:ac:67:9a:07:5b:01:46:ec:ac:8b:
9f:7a:74:00:dc:8a:23:2e:b3:22:64:d7:62:b5:89:
01:f0:b7:04:27:57:4f:f5:6a:27:b5:7a:6a:cb:99:
1e:a7:e5:b0:4c:f1:75:1a:3e:12:4e:bb:74:c8:06:
97:7d:72:1a:b0:24:13:e8:73:46:cb:72:75:da:c2:
ca:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:61:9F:5B:B0:60:2B:51:49:5B:01:0D:38:90:DF:38:C4:1B:09:9F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133392e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.139.0/24
Signature Algorithm: sha256WithRSAEncryption
61:9e:aa:75:8d:12:13:a9:80:8e:ba:3b:7b:f4:b5:5b:44:76:
c3:7d:10:6c:14:c7:6b:48:12:d9:89:5c:8d:d2:2d:25:a6:a4:
30:31:ea:8f:aa:52:8e:ed:f8:2d:26:43:d6:71:ca:7f:58:1d:
71:9a:66:0a:44:85:cd:5d:0e:fa:34:9e:86:94:6f:c0:0d:7a:
a4:0f:65:95:08:59:12:6b:13:70:f0:3d:33:a0:34:73:42:8d:
3e:33:6e:7e:d8:3a:7e:ef:93:a6:69:c7:15:2d:5a:01:ee:da:
5e:99:8a:4b:ce:a1:0e:8b:7d:5b:16:8d:6b:c1:a9:a4:77:6f:
b5:39:3e:c5:b3:39:e4:e6:b0:0f:a5:a1:7b:34:0c:26:e8:4c:
a8:c7:7d:c2:93:01:ce:b1:6c:fd:67:4e:50:07:29:90:29:96:
6c:0d:06:f4:c5:a8:3d:2b:46:20:14:61:4f:f6:aa:e9:06:3e:
b8:66:24:77:d3:84:ad:76:a9:b2:8c:4a:92:a1:6f:0c:7a:96:
5c:bc:4e:fa:de:e6:67:3b:54:93:c8:5a:be:9c:2b:47:7d:3a:
ab:62:1d:0a:73:ca:23:e1:66:1e:37:c0:fb:1e:95:a0:c4:d7:
6f:23:81:c9:7e:27:8d:2f:f9:31:d5:a9:dd:69:12:a3:58:7c:
47:24:7e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:17:50 2025 by rpki-client