Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38352e3134352e302f32342d3234203d3e203632323430.roa
File: 34352e38352e3134352e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: +FA2ZGtIsM8zUmDX4E8zbMd2kK8FLqcs/Z0KTsAtCyw=
Subject key identifier: 35:DF:00:A4:0B:B3:8A:2D:BA:A6:23:A1:EC:17:F5:0B:E9:9A:7B:4C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 23EF2FB472870FE99D3E48CDE748DEE885C9E2F2
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38352e3134352e302f32342d3234203d3e203632323430.roa
Signing time: Fri 27 Dec 2024 11:47:12 +0000
ROA not before: Fri 27 Dec 2024 11:42:12 +0000
ROA not after: Fri 26 Dec 2025 11:47:12 +0000
asID: 62240
IP address blocks: 45.85.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ef:2f:b4:72:87:0f:e9:9d:3e:48:cd:e7:48:de:e8:85:c9:e2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:12 2024 GMT
Not After : Dec 26 11:47:12 2025 GMT
Subject: CN=35DF00A40BB38A2DBAA623A1EC17F50BE99A7B4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:06:09:6e:d8:d1:d7:fb:b8:9f:e3:f0:b0:
df:1c:31:c2:5a:6a:e3:3c:c9:aa:02:1a:d4:da:b2:
31:81:71:e9:c6:8d:c4:6c:ab:54:3e:5c:c7:c5:20:
7b:f3:2f:21:07:45:22:83:ce:63:08:85:2e:7e:aa:
fb:a7:35:39:af:f1:06:4f:a2:2e:62:19:b5:a4:8a:
bf:6c:a9:52:7b:90:17:ed:21:0b:73:14:e2:ff:18:
14:7b:da:e3:fc:94:dc:72:f4:36:3a:d0:c6:ce:dc:
02:59:fe:02:99:22:ec:37:23:f3:fc:ac:d6:83:14:
e4:7a:af:82:10:fd:42:8c:a1:d6:6b:11:d6:92:b0:
c5:eb:fb:f8:1a:c9:99:dd:77:30:c4:40:fa:46:49:
6a:67:aa:78:cf:86:c2:13:9d:ff:85:b0:78:b7:5a:
18:76:99:77:76:f7:50:50:a7:0c:13:23:43:ab:89:
b2:93:09:bd:0a:1a:02:3e:65:aa:d3:f3:c9:fc:3f:
28:c6:68:ba:b6:85:af:62:c1:ca:e6:68:fa:f5:c0:
b4:ea:78:b8:be:60:6d:14:ee:26:f3:97:61:e8:ad:
56:14:6a:bd:74:90:12:fd:47:f6:40:26:80:cc:5b:
50:99:40:79:64:cd:e1:52:1c:9d:e4:7e:9c:c8:fa:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DF:00:A4:0B:B3:8A:2D:BA:A6:23:A1:EC:17:F5:0B:E9:9A:7B:4C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38352e3134352e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.145.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:08:54:1e:00:41:9d:0d:25:4f:05:1b:62:b6:ea:4e:c0:92:
7c:21:e1:b6:64:3c:2a:5a:2a:39:15:1e:24:d3:3d:15:7d:d9:
13:1d:be:1c:e7:fb:13:2a:0d:70:1e:3d:30:ef:d7:a5:7c:63:
84:e1:c5:91:3a:44:65:35:f5:73:10:b3:a4:5e:81:e3:4f:c3:
a0:78:24:fa:58:e4:83:71:c2:d5:85:c4:e5:54:e6:05:b1:eb:
2b:96:e7:3b:74:e9:b5:99:d4:69:b4:80:6a:a1:15:db:52:c2:
12:76:c7:8f:22:d2:04:e0:9a:20:6f:55:23:39:d8:b9:af:e1:
3e:bd:15:11:07:0d:5f:a4:5d:27:8d:56:dc:de:81:85:af:5d:
70:90:0b:33:d3:d3:7f:01:57:90:9d:ac:45:07:3b:ed:28:72:
c8:86:64:ae:5d:b5:ca:e1:96:b8:46:58:b7:a9:76:30:81:5d:
42:a9:1a:65:4a:f4:37:a4:ec:61:ba:07:99:24:4c:c8:0a:43:
63:6e:f4:f1:9a:d6:8d:f6:6f:cc:8c:bc:96:2b:d4:34:a0:de:
0e:b1:c8:fb:8e:ed:f8:7c:af:65:a8:ff:fd:67:d9:fe:ab:ee:
c3:8c:59:75:53:c2:75:05:22:ea:42:97:9b:d6:e2:ea:3c:74:
20:e9:bb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:18:37 2025 by rpki-client