Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232382e302f32322d3234203d3e203437353833.roa
File: 34352e39302e3232382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: kfH1r8Sl99GWk8gicKPo/Zoz1K+U8Iru/SvZgRwKHHA=
Subject key identifier: 4B:C8:A9:2E:A9:59:8F:F7:60:6A:2E:84:57:7C:2D:4C:98:73:AB:18
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 45C4B9052CFDED6FCF5F0696DBA11AFD49FC905E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232382e302f32322d3234203d3e203437353833.roa
Signing time: Fri 20 Dec 2024 15:23:33 +0000
ROA not before: Fri 20 Dec 2024 15:18:33 +0000
ROA not after: Fri 19 Dec 2025 15:23:33 +0000
asID: 47583
IP address blocks: 45.90.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c4:b9:05:2c:fd:ed:6f:cf:5f:06:96:db:a1:1a:fd:49:fc:90:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:33 2024 GMT
Not After : Dec 19 15:23:33 2025 GMT
Subject: CN=4BC8A92EA9598FF7606A2E84577C2D4C9873AB18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:b4:7a:86:f4:37:39:40:fc:f0:76:a0:85:
e5:70:b8:48:7b:fc:70:08:94:38:f5:f5:d1:72:56:
b4:78:58:ac:d9:89:75:e3:57:c0:62:62:21:ae:11:
b2:02:1e:55:ff:1d:39:66:9f:72:53:03:e5:5e:41:
81:db:76:79:ee:8a:4e:d5:96:4e:b9:e1:21:15:7c:
09:1f:16:c9:8e:9a:63:2f:65:ab:02:f0:51:8e:c4:
53:f4:1b:38:59:08:32:63:fb:a4:33:a8:d9:f1:99:
94:03:d5:b9:0f:c1:1f:f6:f6:b2:3f:3b:8f:07:f2:
45:d0:a2:0f:ad:62:f7:1e:8a:2d:66:c0:b2:98:83:
0f:e6:9f:65:f3:84:82:1f:e6:7b:08:33:e7:90:93:
99:42:25:f2:9f:95:cb:3d:c3:22:4d:e4:a0:75:bd:
a2:3f:51:fe:40:6b:bc:7f:50:fd:4a:10:52:a5:fc:
d7:9a:b5:3e:87:51:e3:91:b7:3e:7c:ed:a0:e1:b5:
c3:93:62:43:18:e2:e5:cb:16:57:47:73:07:13:d6:
ec:69:0e:72:82:fa:8a:c5:36:91:5f:2d:68:7d:50:
fe:77:8c:0f:2e:99:ef:f6:df:f3:81:a0:4a:f7:b2:
2c:e6:64:97:91:c0:80:d3:56:51:16:ee:b3:48:0e:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C8:A9:2E:A9:59:8F:F7:60:6A:2E:84:57:7C:2D:4C:98:73:AB:18
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.228.0/22
Signature Algorithm: sha256WithRSAEncryption
64:bd:b6:4d:0f:86:e2:74:20:eb:62:90:a7:a2:16:75:3c:6a:
8b:cd:97:19:21:31:17:56:2d:55:31:97:ff:8c:d0:d5:cf:6b:
e2:9a:ea:df:e0:a1:d6:1c:ff:af:7f:65:08:aa:aa:1c:23:80:
e8:38:c1:28:9b:11:b6:d6:be:08:aa:54:40:b2:6f:42:7a:7d:
b5:e0:4b:e5:2b:7d:90:53:08:1e:b0:7b:15:6c:39:c6:13:0f:
03:a6:0e:de:bb:95:6f:e9:91:98:94:63:30:92:e3:a2:ea:23:
4f:fa:6b:aa:8f:3d:5c:ab:04:9f:53:20:0a:d4:e1:49:96:ec:
68:35:2e:a6:3a:a2:4d:1c:bd:af:88:61:a2:b5:e5:0e:e7:65:
d9:8f:a4:72:66:0b:5e:8e:75:c4:68:32:c2:f6:c0:9e:c0:5e:
0b:eb:d3:6d:1a:0b:85:e1:85:97:9f:0a:53:fc:a2:c4:d0:77:
87:b7:7d:90:9c:f0:59:db:8c:29:ad:0a:cb:37:5f:8e:9a:c9:
39:dc:8f:e7:a8:c6:da:26:2b:81:26:8f:2b:ec:27:24:b8:81:
d0:81:80:75:48:5e:4d:eb:31:9d:c0:c4:7c:7d:ed:49:c7:7d:
dc:ea:ed:23:d5:31:eb:b3:f0:40:b2:39:ef:be:97:50:45:c3:
c5:e8:a3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:33:43 2025 by rpki-client