Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38392e3230342e302f32322d3234203d3e203437353833.roa
File: 34352e38392e3230342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: j1f5IEtEYm/JzoRXoxaBFSziTVKR3o/5pnDny31IzWE=
Subject key identifier: 4C:04:59:E2:53:5C:E1:03:AC:C8:74:82:1D:88:99:0C:98:4B:F4:35
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 687981C4C9B484C8C73FAF4F7C779BC34BCE9B2B
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38392e3230342e302f32322d3234203d3e203437353833.roa
Signing time: Fri 20 Dec 2024 15:23:31 +0000
ROA not before: Fri 20 Dec 2024 15:18:31 +0000
ROA not after: Fri 19 Dec 2025 15:23:31 +0000
asID: 47583
IP address blocks: 45.89.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:79:81:c4:c9:b4:84:c8:c7:3f:af:4f:7c:77:9b:c3:4b:ce:9b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:31 2024 GMT
Not After : Dec 19 15:23:31 2025 GMT
Subject: CN=4C0459E2535CE103ACC874821D88990C984BF435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:98:e0:d4:43:54:64:29:e5:bd:03:02:33:03:
b2:9c:51:ad:ad:3c:84:4b:64:f7:76:ae:25:ef:59:
e4:eb:3f:00:ee:2b:63:77:75:06:56:09:29:f3:a1:
0b:4d:4a:d2:3a:a7:04:b8:95:19:0f:35:e5:5c:94:
d4:11:f3:40:7c:7a:05:59:bc:a3:03:ee:44:c7:d7:
78:05:b4:20:39:db:ab:aa:5e:8c:94:bd:01:8f:b2:
05:55:15:93:7e:23:af:7e:1f:42:52:8f:5d:c6:c3:
27:a4:c5:a2:5d:7c:3e:83:ca:58:d1:50:2c:77:c0:
1d:38:71:c3:ac:8f:80:e8:4f:41:9c:92:55:43:83:
71:11:c6:fc:58:d0:03:86:91:b0:01:45:ac:52:6f:
94:06:d8:7a:92:7a:40:0c:86:0f:c0:46:05:f6:9e:
5e:ec:ca:be:57:4e:90:e3:b0:90:9a:ea:88:e0:dd:
b5:46:ae:c0:55:00:e7:94:71:db:48:64:45:05:07:
a2:59:b7:f4:01:ff:87:9d:75:4a:45:f2:f2:26:47:
a2:2e:a3:2a:95:4f:46:f4:67:d8:a5:09:a6:a2:cd:
2e:1d:84:34:d2:a0:f8:27:2e:29:1b:df:73:ce:b6:
2d:3d:15:71:1d:28:64:42:b7:03:21:b4:10:0f:74:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:04:59:E2:53:5C:E1:03:AC:C8:74:82:1D:88:99:0C:98:4B:F4:35
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38392e3230342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:87:f9:e8:bd:f2:6f:4e:03:8e:a2:68:81:0d:59:d3:5d:a0:
19:31:55:b5:a8:67:04:ee:61:6d:77:2e:b9:f5:b8:d2:3a:34:
94:bc:e4:eb:37:db:25:df:fa:e3:49:f7:10:96:19:2a:0d:bb:
1e:b2:12:a7:70:6d:3f:4b:cd:42:2d:22:f4:a2:d7:4c:11:1f:
5d:e4:75:e3:b6:5a:e7:b4:3e:e7:e9:71:43:87:12:1e:03:2e:
9a:56:6e:73:53:3a:e8:f9:bc:6e:da:52:60:96:fb:08:b9:ff:
86:28:71:f3:a8:84:81:ac:66:32:12:3e:ec:fd:0d:28:23:2f:
11:59:5d:16:4b:8c:bd:e0:36:2b:f7:17:fb:0f:bd:09:e2:f1:
75:0d:29:8b:e2:13:cf:40:28:1a:37:3d:40:9d:fd:a7:9b:d9:
06:5e:85:ed:e1:90:70:e2:69:eb:70:10:4b:47:12:ad:66:67:
59:19:ed:00:a8:f0:8f:73:fc:cd:d9:e9:dd:5b:82:3b:63:70:
95:5e:59:ef:76:4f:64:cf:ae:c7:b1:3b:1c:05:00:88:a3:b5:
ab:1d:65:00:45:30:f3:52:cb:7e:38:29:76:0e:2e:c8:da:bb:
47:77:30:fc:c6:21:13:c3:e7:3e:03:eb:d9:43:45:37:41:17:
c8:60:ed:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:33 2025 by rpki-client