Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38382e3139312e302f32342d3332203d3e203531313637.roa
File: 34352e38382e3139312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: a5vMJ7kmLLhehHDDz8m0FdiE3gTQp05UcEpJcGWKR54=
Subject key identifier: 53:4F:88:6F:91:05:8F:0B:8B:5B:89:ED:26:48:10:D7:36:CC:6F:DC
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2507D200B0A80B66E2050D2CEEE97100278C931D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38382e3139312e302f32342d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:31 +0000
ROA not before: Fri 27 Dec 2024 11:42:31 +0000
ROA not after: Fri 26 Dec 2025 11:47:31 +0000
asID: 51167
IP address blocks: 45.88.191.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:07:d2:00:b0:a8:0b:66:e2:05:0d:2c:ee:e9:71:00:27:8c:93:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:31 2024 GMT
Not After : Dec 26 11:47:31 2025 GMT
Subject: CN=534F886F91058F0B8B5B89ED264810D736CC6FDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:51:d0:ba:55:04:c4:89:7f:5d:fe:2a:b8:90:
66:b5:76:34:6c:84:a4:5f:68:62:66:7c:21:ad:21:
9d:c0:13:c5:cd:af:90:a7:02:6b:cd:34:43:ac:26:
e5:8f:b3:8c:dc:c9:d2:2f:f3:d5:e8:31:b8:c9:da:
45:4c:b8:2f:54:cb:a4:04:a4:8c:c1:56:94:aa:a5:
d1:a5:94:1f:29:87:cd:1f:08:34:92:fa:b3:c4:c1:
34:f0:35:a8:9e:43:bb:09:c3:43:da:67:4b:71:64:
1a:65:4a:c5:e9:b5:e1:b6:76:26:5b:0f:0a:4f:1f:
7e:dd:6f:17:0e:16:b0:57:ae:e5:de:34:ca:5b:30:
83:a8:b4:e7:cf:ae:e7:a5:57:13:28:2c:83:f5:de:
3e:71:6e:5c:d3:e3:d7:a3:79:f9:cb:71:7b:66:d0:
9d:fe:98:59:b0:c0:7f:52:63:5b:0f:31:5e:c5:22:
94:bc:f2:22:db:38:4a:29:67:82:b2:e0:f9:ea:98:
c4:c5:95:f2:28:50:5b:98:c1:89:e7:f1:a2:e7:47:
92:9a:08:a3:34:5c:4a:8a:36:e9:8a:7e:e3:95:a6:
92:2a:4a:b3:86:70:2c:a0:cd:b2:c5:10:b6:58:ad:
ad:b7:4b:56:e5:62:b4:fc:06:ca:2a:c7:a5:a8:3b:
21:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4F:88:6F:91:05:8F:0B:8B:5B:89:ED:26:48:10:D7:36:CC:6F:DC
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38382e3139312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.191.0/24
Signature Algorithm: sha256WithRSAEncryption
13:5f:40:d0:8d:8c:7f:66:d0:13:2b:d7:08:92:c6:01:dc:98:
bd:61:d4:73:2a:01:90:33:81:4b:a2:3c:43:a6:a5:08:ad:e5:
80:a4:1c:44:d6:66:32:1d:fc:5f:6a:0d:f3:e0:ce:27:0e:58:
9e:01:c1:55:ee:58:6f:a3:af:f3:2b:61:57:34:02:45:c4:48:
09:3c:e4:4f:52:ae:dc:fc:cf:58:c0:b0:34:9a:b7:fc:f0:d4:
48:24:66:d4:94:0b:58:0b:17:58:8e:b1:45:5b:e4:ae:9f:04:
26:cc:14:24:a8:58:eb:2e:be:0b:b5:99:37:68:08:ae:67:8a:
ae:c2:fc:0e:6d:52:f1:69:36:1e:92:af:a1:6a:cb:47:9e:ee:
fd:a5:9f:a3:f6:f7:89:a6:0d:f7:1b:dd:81:96:d0:81:ef:60:
6b:11:56:1d:85:66:69:42:bc:7d:28:1d:da:29:19:a1:ee:9d:
62:b1:bb:8b:24:9d:bd:36:82:ff:5c:eb:9f:c9:75:ed:27:5e:
e8:d6:30:df:db:40:d5:42:35:bc:7b:72:d1:b0:10:69:29:65:
0b:0f:5a:8a:69:b8:37:2d:6e:c2:81:a6:87:89:01:6b:37:8a:
c3:a2:c5:bc:61:ff:ed:a8:cf:b8:f0:86:f1:db:e8:18:cf:46:
5d:2d:61:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:13:56 2025 by rpki-client