Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39332e302e302f32322d3234203d3e20323033303631.roa
File: 34352e39332e302e302f32322d3234203d3e20323033303631.roa (raw, json)
Hash identifier: PiatnZPqCpVg1C2lRfeCozVe1vqJPazVUXSr3aUXSAw=
Subject key identifier: CD:F4:7B:41:17:3F:6A:00:D9:43:B7:E2:AD:36:6A:E3:72:61:D2:1A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 53AEF948326ACB78D9522CC9D7D7F5C7C9F62D72
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39332e302e302f32322d3234203d3e20323033303631.roa
Signing time: Fri 27 Dec 2024 11:47:40 +0000
ROA not before: Fri 27 Dec 2024 11:42:40 +0000
ROA not after: Fri 26 Dec 2025 11:47:40 +0000
asID: 203061
IP address blocks: 45.93.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ae:f9:48:32:6a:cb:78:d9:52:2c:c9:d7:d7:f5:c7:c9:f6:2d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:40 2024 GMT
Not After : Dec 26 11:47:40 2025 GMT
Subject: CN=CDF47B41173F6A00D943B7E2AD366AE37261D21A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:ca:01:93:f8:03:77:98:fe:9f:9f:15:11:
84:c2:94:7c:2a:f2:27:42:c9:20:6c:ca:de:0f:97:
e6:dc:a6:9c:a2:d9:96:74:19:11:8a:70:9e:77:33:
29:1f:88:2a:14:ea:26:21:99:58:eb:0c:8c:04:77:
eb:ea:b8:f8:75:48:9d:6b:79:cf:89:6e:51:02:c5:
7d:b4:83:22:26:d5:8f:f5:98:58:78:28:6b:3e:9a:
65:e1:a6:28:bd:b2:3b:bb:9c:4a:b4:cb:cf:6b:7d:
70:b8:72:25:77:b8:83:8b:8f:5f:f3:5f:63:a5:c8:
59:eb:19:05:98:6d:63:74:37:ce:5c:56:89:1c:ad:
24:93:e0:c5:fd:21:fe:19:26:77:40:86:d3:eb:20:
1f:d1:33:11:38:71:3a:81:09:71:d3:a7:01:da:15:
eb:ef:ff:25:f2:ff:8a:8e:09:51:42:82:ca:ee:fe:
a8:49:85:fb:01:8a:a8:77:0c:7b:d9:80:2e:80:fa:
11:9c:bd:c3:39:df:31:16:52:19:42:45:44:92:1e:
be:fa:97:a5:10:99:cd:ce:22:70:77:ec:01:ad:99:
bc:c5:30:26:56:58:16:07:50:4b:0b:2e:d1:99:b4:
9c:21:09:0c:71:e9:ed:c6:37:d1:45:02:2d:d7:b9:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F4:7B:41:17:3F:6A:00:D9:43:B7:E2:AD:36:6A:E3:72:61:D2:1A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39332e302e302f32322d3234203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.0.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:c4:1e:20:b9:cc:d6:fa:8f:c8:71:8b:a1:de:4b:95:ff:37:
02:93:97:89:84:dd:cc:63:f6:f0:f4:90:9a:f5:79:46:89:3d:
35:71:1b:94:fe:f6:69:10:75:7d:c6:9c:b1:fb:e0:90:6d:02:
e1:bd:76:94:0f:23:3f:d9:dd:5a:cf:97:01:4d:42:7b:cb:cb:
54:cb:85:ad:e3:c3:55:cb:70:bf:31:79:88:a9:5e:bc:ad:bd:
5c:22:e0:ec:5f:70:08:30:c2:67:fc:58:3f:30:84:cc:2d:d5:
f6:94:71:f8:01:a7:96:75:2b:12:8e:0a:96:56:ef:f4:f0:91:
39:1a:1a:ca:20:da:79:54:33:0c:42:34:18:d1:62:b1:85:0e:
e4:57:2a:ed:28:79:88:3a:12:ed:ca:91:ca:61:fb:60:29:63:
9a:42:d8:e2:97:a2:ce:e1:b2:e2:b4:41:0a:d8:f2:69:5e:8f:
87:6c:39:08:e5:83:18:44:8b:a9:4b:71:ab:6a:a7:35:f0:7f:
64:87:cc:80:b0:2d:8e:cb:4f:3e:a9:70:8b:36:52:ac:c8:e1:
b5:a5:e8:e6:ec:45:00:20:bc:f4:28:70:0c:fb:51:25:34:c8:
f1:77:0c:70:c4:89:51:7d:74:49:51:93:76:38:cb:79:7f:b2:
14:ea:ef:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:12:39 2025 by rpki-client