Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38382e3138382e302f32342d3332203d3e203531313637.roa
File: 34352e38382e3138382e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: QSDtGrPF37aemjlRNh3/WJgnzXYPhbiDROZcCSqfbks=
Subject key identifier: 96:E3:C3:C5:85:57:19:5D:CA:11:73:7F:D4:D9:E8:F3:22:A3:8F:84
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 51EA81B7CBFFD09FA4B886EF7105F1B49923B55F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38382e3138382e302f32342d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:32 +0000
ROA not before: Fri 27 Dec 2024 11:42:32 +0000
ROA not after: Fri 26 Dec 2025 11:47:32 +0000
asID: 51167
IP address blocks: 45.88.188.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ea:81:b7:cb:ff:d0:9f:a4:b8:86:ef:71:05:f1:b4:99:23:b5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:32 2024 GMT
Not After : Dec 26 11:47:32 2025 GMT
Subject: CN=96E3C3C58557195DCA11737FD4D9E8F322A38F84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:2a:fe:f9:0a:95:df:07:fd:4f:93:94:95:
01:20:44:13:24:2a:fd:25:0c:75:e3:c7:38:54:e5:
82:f0:43:92:fc:3e:5f:94:c1:4d:f7:f7:a3:32:55:
5e:f6:ab:a9:66:1d:42:75:a3:de:f2:08:1d:2b:9f:
89:7c:2f:18:e2:9a:74:53:10:bf:68:2b:d8:a1:98:
54:c7:39:19:d6:4a:f2:de:d7:1d:e5:d9:a2:90:12:
43:58:c5:e8:ab:cd:24:a9:e2:6d:30:b1:e3:88:11:
47:fc:c2:7f:9e:e4:3e:43:8c:e1:10:26:0c:ad:0a:
76:f0:54:d1:1e:98:e5:1c:13:af:d6:45:26:17:41:
25:82:26:e7:18:af:a6:3e:bc:5d:f6:8e:39:9d:50:
f4:76:94:4f:55:31:26:b3:39:2d:1b:96:2d:ee:06:
77:c4:27:81:60:05:5d:98:f1:b2:a1:94:6c:68:d6:
9f:a3:96:7a:88:c2:25:85:32:f4:17:08:d7:30:2e:
f0:97:16:62:51:fb:61:0a:26:f9:14:a5:24:d2:4c:
ed:7d:17:e9:c7:38:9c:82:eb:e9:7a:81:26:e8:cd:
de:48:a0:e6:03:b6:d3:c7:39:1b:a4:40:41:fe:58:
39:a9:5b:f0:6d:b4:fa:0a:8c:04:31:6f:18:1d:05:
92:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E3:C3:C5:85:57:19:5D:CA:11:73:7F:D4:D9:E8:F3:22:A3:8F:84
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38382e3138382e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.188.0/24
Signature Algorithm: sha256WithRSAEncryption
63:f0:b3:a0:49:29:d3:a0:b0:81:a5:e4:e8:9b:6e:4b:a0:85:
dd:df:f5:e0:79:67:bd:ba:34:2d:24:67:5d:05:a4:08:61:f2:
22:80:6e:f4:07:1f:58:15:24:3e:5a:fd:6a:53:93:e7:dc:65:
4e:80:8e:fe:b8:b0:79:18:29:dd:a4:09:06:70:df:d1:80:d7:
b0:d7:9f:e5:20:7a:ab:50:6b:64:a1:69:0d:40:32:a1:3c:f5:
c6:f3:5c:dd:36:7d:5e:d2:96:3a:66:8b:43:4d:9a:43:75:63:
c3:f8:e8:02:6c:f5:0c:6c:18:5b:43:14:66:58:1e:eb:46:ea:
e3:24:08:7f:cc:46:2d:63:96:79:04:e6:3a:ce:84:10:15:ad:
d6:bf:dd:b2:56:24:c7:95:5a:36:8c:ef:cd:39:8d:b2:0a:0f:
8e:a0:ae:82:9d:7e:f6:a6:52:48:fe:9b:df:e8:07:e8:3b:5c:
9d:52:1b:61:fc:41:41:40:a8:57:fb:d8:88:c2:39:e4:a8:be:
b4:68:b1:d4:2e:c4:96:b1:df:61:c6:90:70:d9:d3:ef:ff:10:
83:d6:cf:ab:88:01:96:92:f5:f7:8f:f7:03:ce:74:37:80:db:
09:ca:ea:2b:eb:a4:3b:5b:5f:02:74:73:0d:ff:ed:65:82:2b:
87:bf:01:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:17:51 2025 by rpki-client