Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38352e3134342e302f32342d3234203d3e20313431303339.roa
File: 34352e38352e3134342e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: +oqnoaQjlscGj7fn71/6Ho+5M1nYFgNOCCGnqjbkFSk=
Subject key identifier: A9:D5:1A:DC:12:E1:34:A5:F4:45:07:22:F3:FF:06:CD:C6:1F:E9:E7
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 68C9A6F34E75E89D0FAFFD4AD46F6ABC4F3D5C4F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38352e3134342e302f32342d3234203d3e20313431303339.roa
Signing time: Fri 27 Dec 2024 11:47:09 +0000
ROA not before: Fri 27 Dec 2024 11:42:09 +0000
ROA not after: Fri 26 Dec 2025 11:47:09 +0000
asID: 141039
IP address blocks: 45.85.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c9:a6:f3:4e:75:e8:9d:0f:af:fd:4a:d4:6f:6a:bc:4f:3d:5c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:09 2024 GMT
Not After : Dec 26 11:47:09 2025 GMT
Subject: CN=A9D51ADC12E134A5F4450722F3FF06CDC61FE9E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:bd:82:19:88:cb:9b:cb:96:16:81:4e:64:
18:3a:ac:9f:49:da:23:e7:1b:4f:6c:97:ac:ea:17:
ea:d2:e4:a5:f9:e7:68:46:6e:2e:f3:58:e0:bc:85:
08:a4:a4:65:de:8a:05:02:f8:c3:78:6f:a1:05:58:
f7:a1:6b:13:cc:ea:37:2f:fb:61:5d:57:bd:df:4d:
2f:52:60:fd:f2:0f:07:72:73:92:37:ee:8f:12:68:
72:b1:ef:c5:66:9b:ca:80:39:76:50:2d:2c:b4:ed:
17:85:c9:90:eb:80:a0:11:48:e7:97:af:53:ad:ae:
b3:87:a3:55:39:ff:5d:16:7c:da:fe:06:95:6f:e1:
2e:ac:8a:09:fe:ea:8c:20:44:32:2d:d7:84:82:26:
f1:90:5b:d1:fe:97:6d:47:4f:2b:68:d7:2b:d9:a4:
1a:00:f1:c3:61:c1:16:38:17:9d:82:53:3b:bc:96:
fb:3e:c3:ff:ff:a4:27:88:a9:f3:d9:ac:c8:bd:d5:
a7:86:64:0f:2e:77:a0:7e:0a:62:cb:51:37:39:97:
1d:d0:5f:1f:f3:ec:84:25:9f:f1:ab:7d:97:40:07:
0d:74:f3:fe:da:69:3b:01:f8:a6:7f:ac:aa:fd:10:
49:6c:3c:2c:08:e7:47:82:b5:ee:41:b1:60:2f:3a:
87:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D5:1A:DC:12:E1:34:A5:F4:45:07:22:F3:FF:06:CD:C6:1F:E9:E7
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38352e3134342e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.144.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:45:69:d2:0c:90:86:4c:0a:80:bb:63:f0:bc:99:a7:9d:2d:
7a:4c:8d:43:7f:e0:8f:00:f6:52:ff:3d:37:ea:79:8c:9e:ea:
77:be:c7:49:06:5a:8a:1e:f0:15:e1:e1:02:6f:bd:d5:74:fe:
57:b6:65:1f:d5:6c:5c:00:b4:1f:96:ae:07:c6:df:6f:80:9f:
10:3c:2b:21:8f:8b:64:77:52:35:cc:08:b2:c3:26:e3:91:60:
49:c3:8e:c1:12:cd:02:90:ab:a4:74:94:51:35:69:46:bd:dc:
4a:5c:15:02:81:b0:d3:55:1a:b3:94:bf:04:cf:1b:44:74:0b:
7b:4f:bd:70:44:f8:e7:0a:68:a0:fc:ab:b9:54:29:97:f0:41:
bd:f4:df:98:99:0d:af:04:2e:2f:95:84:4f:2b:f9:b3:ea:f0:
85:13:ff:5b:48:ca:34:45:4d:71:5c:92:5d:b7:a0:d5:5d:ff:
69:c0:1a:c2:09:58:91:18:fd:4c:7a:53:52:ec:f7:60:76:83:
65:1a:b5:00:be:ed:08:36:06:d2:c9:65:48:6b:b3:b5:db:42:
43:d4:9b:4d:d6:5d:5b:84:40:9a:06:11:93:20:90:4d:a4:40:
ec:45:c0:18:f5:88:8e:b9:47:f7:37:1f:5c:5c:58:df:58:29:
5e:e4:13:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:40:55 2025 by rpki-client