Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38352e3134362e302f32332d3332203d3e203531313637.roa
File: 34352e38352e3134362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: /G6SOtmHODC8h1dNhKHVnB0CWcOcVho/GjAfNTuHf7U=
Subject key identifier: 6A:21:7B:4C:3D:A9:E6:61:D2:F9:64:B2:0C:83:76:60:20:14:70:47
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3565586ACFD5DADC948E8F24F234BD04372B50B6
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38352e3134362e302f32332d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:24 +0000
ROA not before: Fri 27 Dec 2024 11:42:24 +0000
ROA not after: Fri 26 Dec 2025 11:47:24 +0000
asID: 51167
IP address blocks: 45.85.146.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:65:58:6a:cf:d5:da:dc:94:8e:8f:24:f2:34:bd:04:37:2b:50:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:24 2024 GMT
Not After : Dec 26 11:47:24 2025 GMT
Subject: CN=6A217B4C3DA9E661D2F964B20C83766020147047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dc:2f:30:75:a2:8d:93:1f:0f:ec:e3:de:01:
af:45:9f:b2:28:db:ae:98:b7:af:6f:3e:49:e1:6f:
37:a3:62:8c:39:e2:35:50:ac:00:ba:7a:30:cd:11:
9f:92:e7:fa:5a:f8:5b:b6:d1:b7:cc:6d:b7:43:b5:
8e:10:4a:f4:b2:c5:0c:5b:e3:ff:41:e1:88:ea:e1:
ec:9f:22:97:8b:33:b3:f3:fe:ed:72:35:3f:06:71:
fa:93:1b:ab:93:d0:c1:d0:e0:3c:a0:de:c4:41:ac:
f2:04:47:38:82:1b:b8:9a:41:3e:42:81:bd:1c:99:
41:02:ce:40:08:37:f4:db:5a:05:9d:b1:2e:42:12:
98:0c:33:aa:f2:e7:20:a3:3b:a7:e5:7e:05:8e:03:
c3:6b:86:29:c6:cc:f6:ef:16:0a:39:19:4d:41:32:
ac:42:ae:c0:df:12:64:34:3a:74:ba:73:05:66:eb:
ec:a7:0e:f0:7d:bb:b7:cb:37:ce:6f:95:fb:ec:c2:
74:c9:02:87:bf:cf:ae:50:48:2c:35:26:ac:cf:7e:
3f:09:b4:3a:28:78:90:50:02:71:32:83:08:0f:5b:
fd:0f:32:29:f5:03:ea:3c:c6:3a:5d:fa:80:ee:bd:
26:30:3a:97:66:e0:fd:c3:65:9a:5d:60:d9:4d:e4:
f0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:21:7B:4C:3D:A9:E6:61:D2:F9:64:B2:0C:83:76:60:20:14:70:47
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38352e3134362e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.146.0/23
Signature Algorithm: sha256WithRSAEncryption
57:2b:58:bb:5d:09:ec:32:60:4c:89:ce:45:cf:56:d3:6a:d0:
31:4a:a9:89:cc:5e:5b:57:65:53:ac:3b:22:b0:80:ad:c2:58:
18:c8:bb:1d:b9:82:ad:e8:1a:5b:62:f7:10:54:4d:ea:63:9f:
36:21:e3:fe:17:e3:ba:ce:3b:5e:45:ac:1b:20:2f:ad:95:a9:
7d:76:03:dc:b8:54:9d:2b:15:9d:1c:6e:7a:85:12:9c:95:55:
90:fa:56:65:21:d9:06:c7:b2:64:c2:07:62:f4:19:dc:7f:c8:
9b:77:50:1d:fb:ef:68:cb:5e:4b:5d:70:dd:db:2c:55:bf:78:
eb:98:aa:b9:be:90:4e:f4:7c:60:45:d3:13:f3:84:99:7a:69:
40:a1:3d:99:53:24:23:56:f2:82:30:8e:7f:3f:4b:4c:59:1b:
16:81:a7:bd:22:ff:2c:1a:13:d0:84:ae:1f:bd:5d:bb:48:da:
ac:37:a3:b1:44:1b:05:8d:1c:99:fa:4c:3b:25:01:58:91:97:
70:1f:a2:d8:d6:0a:f1:42:a6:f5:47:87:14:a2:87:8d:dd:66:
07:23:75:af:cd:96:95:0c:ae:fa:20:17:1c:f3:15:38:f1:31:
72:59:da:b9:fc:0e:74:a6:ac:0d:36:be:60:4e:7a:00:7e:11:
7e:b9:01:31
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUNWVYas/V2tyUjo8k8jS9BDcrULYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMjRaFw0yNTEyMjYxMTQ3MjRaMDMxMTAvBgNV
BAMTKDZBMjE3QjRDM0RBOUU2NjFEMkY5NjRCMjBDODM3NjYwMjAxNDcwNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3C8wdaKNkx8P7OPeAa9Fn7Io
266Yt69vPknhbzejYow54jVQrAC6ejDNEZ+S5/pa+Fu20bfMbbdDtY4QSvSyxQxb
4/9B4Yjq4eyfIpeLM7Pz/u1yNT8GcfqTG6uT0MHQ4Dyg3sRBrPIERziCG7iaQT5C
gb0cmUECzkAIN/TbWgWdsS5CEpgMM6ry5yCjO6flfgWOA8NrhinGzPbvFgo5GU1B
MqxCrsDfEmQ0OnS6cwVm6+ynDvB9u7fLN85vlfvswnTJAoe/z65QSCw1JqzPfj8J
tDooeJBQAnEygwgPW/0PMin1A+o8xjpd+oDuvSYwOpdm4P3DZZpdYNlN5PD7AgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUaiF7TD2p5mHS+WSyDIN2YCAUcEcwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODM1MmUz
MTM0MzYyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBLVWSMA0GCSqGSIb3DQEBCwUAA4IBAQBXK1i7XQnsMmBMic5Fz1bTatAxSqmJ
zF5bV2VTrDsisICtwlgYyLsduYKt6BpbYvcQVE3qY582IeP+F+O6zjteRawbIC+t
lal9dgPcuFSdKxWdHG56hRKclVWQ+lZlIdkGx7Jkwgdi9Bncf8ibd1Ad++9oy15L
XXDd2yxVv3jrmKq5vpBO9HxgRdMT84SZemlAoT2ZUyQjVvKCMI5/P0tMWRsWgae9
Iv8sGhPQhK4fvV27SNqsN6OxRBsFjRyZ+kw7JQFYkZdwH6LY1grxQqb1R4cUooeN
3WYHI3WvzZaVDK76IBcc8xU48TFyWdq5/A50pqwNNr5gTnoAfhF+uQEx
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:05 2025 by rpki-client