Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39322e382e302f32332d3332203d3e203531313637.roa
File: 34352e39322e382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: fHog3V7+yiuQn48oov5fSVc/EJudWm08lrslF2Wp/Vc=
Subject key identifier: 97:AA:1D:11:2C:9F:3D:5A:47:9E:CA:D5:D7:25:82:AA:50:74:E3:2E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 65F7A1650310A21D139FD73854576456EF195093
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39322e382e302f32332d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:12 +0000
ROA not before: Fri 27 Dec 2024 11:42:12 +0000
ROA not after: Fri 26 Dec 2025 11:47:12 +0000
asID: 51167
IP address blocks: 45.92.8.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:f7:a1:65:03:10:a2:1d:13:9f:d7:38:54:57:64:56:ef:19:50:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:12 2024 GMT
Not After : Dec 26 11:47:12 2025 GMT
Subject: CN=97AA1D112C9F3D5A479ECAD5D72582AA5074E32E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:77:33:05:fa:ab:84:5b:e4:66:22:bc:2b:
68:0f:7b:8e:6f:4d:9e:5c:50:c5:f8:a5:01:e6:46:
a7:08:92:5d:b6:d0:b7:03:85:d6:a3:d3:f1:a1:85:
89:51:68:02:c3:35:2e:80:39:fe:eb:ae:54:04:b6:
79:ea:20:45:2f:23:92:51:ee:17:9a:5b:c4:aa:8c:
b0:6f:73:41:c3:4f:c2:a1:bb:ca:34:87:ac:1d:a8:
30:fa:2d:62:ca:65:42:e3:0e:77:9b:f1:48:b1:90:
eb:89:75:32:a1:64:75:6e:43:04:ea:1d:83:e6:6c:
11:d1:cc:cf:7c:39:28:cc:a3:5f:58:24:32:76:6f:
64:c9:c3:0c:47:81:35:4c:67:98:e0:68:22:6b:3b:
29:b2:b8:ef:d0:59:d2:2d:11:8c:a3:c7:a3:63:ad:
86:4c:de:53:9b:15:b5:2d:25:41:ac:e4:f0:64:4e:
04:76:a1:b7:c6:84:44:a1:9d:ad:64:44:87:56:1d:
a4:61:60:b4:12:62:73:91:d3:ec:3a:79:5b:68:70:
e8:4d:1a:66:d0:d8:5c:2d:52:ff:dc:83:3a:8e:e7:
2e:9d:37:4a:8e:4a:d5:9e:46:90:07:35:32:00:5e:
36:a9:77:c1:c2:56:9a:59:2c:b5:c9:05:a5:65:c6:
46:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AA:1D:11:2C:9F:3D:5A:47:9E:CA:D5:D7:25:82:AA:50:74:E3:2E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39322e382e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.8.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:36:e0:78:46:e2:83:54:02:c8:9c:9e:4d:86:ad:fe:9d:23:
16:a7:97:c3:57:84:13:62:03:28:32:fb:23:44:7c:ea:31:ba:
bd:8f:0e:03:8a:a7:49:b9:3f:aa:6c:d2:bc:82:62:5c:b4:86:
9c:58:b4:ff:74:2d:10:dc:b2:3d:40:78:2a:4f:2c:d8:ea:9c:
58:4a:eb:b0:33:70:a7:6a:d2:5e:0b:b7:f8:f8:39:9c:79:57:
76:a8:4e:56:3e:ed:ae:51:b2:b0:32:04:97:d9:7a:b7:24:8e:
00:b9:1d:e7:07:44:b1:5f:50:5d:45:05:30:00:5f:5a:75:db:
2b:50:93:d2:bb:3d:d7:47:6f:5a:3d:11:d4:4c:5f:be:22:72:
3f:26:e7:ba:1e:ce:35:6c:42:49:1a:81:4f:57:41:c1:b7:56:
a5:0b:22:48:37:ab:af:46:06:2d:43:56:52:16:8c:69:cd:f3:
c2:d8:f3:2a:21:fd:fd:c0:51:f5:26:99:28:27:a9:c2:c0:68:
b6:bf:ce:3b:16:f3:90:e7:dd:82:09:8e:1a:14:2d:52:3e:42:
59:93:27:83:5d:31:8d:8b:31:e6:c2:bb:63:c2:be:8c:d5:49:
28:33:da:e2:da:b9:bb:ae:28:ba:f6:08:87:a7:e6:77:25:c4:
9b:25:eb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:19:09 2025 by rpki-client