Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39332e3132342e302f32322d3234203d3e203437353833.roa
File: 34352e39332e3132342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: d8hsoHdRnIOOqwU4zgE/6RLYtcnl9zb+wuMb5drbsks=
Subject key identifier: 18:62:8B:0D:17:26:0F:50:39:CA:C4:E7:C5:5A:03:3D:DD:A7:C3:72
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1B62D61C40516782DE80C78D37CF009987398708
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39332e3132342e302f32322d3234203d3e203437353833.roa
Signing time: Fri 20 Dec 2024 15:23:32 +0000
ROA not before: Fri 20 Dec 2024 15:18:32 +0000
ROA not after: Fri 19 Dec 2025 15:23:32 +0000
asID: 47583
IP address blocks: 45.93.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:62:d6:1c:40:51:67:82:de:80:c7:8d:37:cf:00:99:87:39:87:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:32 2024 GMT
Not After : Dec 19 15:23:32 2025 GMT
Subject: CN=18628B0D17260F5039CAC4E7C55A033DDDA7C372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:5d:40:ae:2f:f1:8f:c5:9c:9b:46:a8:4a:
ed:48:8d:60:6f:62:0a:d2:a2:36:68:a4:1d:1f:f1:
53:7f:6c:58:55:3b:40:6a:3a:9c:81:1a:8b:e8:7f:
2d:cb:0b:1f:23:ca:61:78:fd:ca:f2:74:b2:cd:3c:
f6:97:ae:a1:98:95:90:d7:72:09:2e:5c:cc:bc:3f:
32:1d:88:3a:6c:05:ff:7c:81:20:17:c7:b5:9f:48:
3b:6b:97:76:0b:c3:67:b7:6c:ee:8c:55:fc:7a:23:
67:97:bf:09:2b:0b:9a:7b:6e:2f:4f:dc:87:33:4b:
7c:16:70:eb:88:61:54:2e:7a:c0:e0:e8:f4:14:98:
73:fe:7b:29:28:2e:f6:e2:76:0d:3f:3e:6d:58:59:
6b:0f:a0:c9:f8:6a:46:2e:43:83:f3:85:7c:f8:7d:
a9:0c:1a:60:43:19:ad:08:c9:b6:d4:fa:f1:bb:b5:
0b:ed:3d:50:b1:fb:ff:50:4a:27:c3:2c:82:d0:a3:
4c:f7:b1:4a:f1:36:18:a7:fe:5a:4b:73:62:cf:a8:
51:88:84:e2:21:d3:b6:ef:08:73:12:89:73:4d:70:
db:1a:e7:6d:29:94:5a:d3:b5:30:75:81:b5:59:60:
3f:e7:e0:bc:84:60:d1:ea:ea:a4:64:48:b7:df:f3:
a5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:62:8B:0D:17:26:0F:50:39:CA:C4:E7:C5:5A:03:3D:DD:A7:C3:72
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39332e3132342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.124.0/22
Signature Algorithm: sha256WithRSAEncryption
18:9f:45:93:21:79:3b:a0:0f:d7:50:3a:e4:93:f4:29:d8:e5:
01:72:ea:e6:0a:8c:7d:3f:8e:a1:be:00:5d:c0:b5:38:5c:62:
72:03:f8:70:3b:7a:7b:62:ec:78:c8:c6:8d:bd:82:ab:51:40:
08:f2:08:13:97:e0:01:83:1b:7c:e9:0a:0b:a0:35:95:e1:59:
27:f6:c2:a9:bb:d9:cb:6e:70:2e:d4:8b:78:72:12:5b:2e:b9:
fe:48:7f:09:d7:2c:e7:16:db:d7:fe:8f:a3:e2:63:93:b8:14:
ac:aa:f2:c5:6c:ef:6e:fc:26:6c:84:06:5f:50:32:c5:ab:db:
07:7c:b7:d4:5d:26:99:e5:52:31:27:5e:7e:b9:1c:60:ef:52:
d3:58:18:43:22:28:63:77:97:b9:68:8c:d4:dc:91:99:7a:a2:
42:e5:47:2b:20:d4:78:df:94:54:a3:34:3f:85:dc:6a:57:84:
84:cd:38:e7:20:c4:e4:f2:25:31:95:f6:8a:01:16:de:08:60:
21:c8:aa:74:9a:11:73:17:b4:a0:87:2b:c4:24:a3:11:61:9b:
bf:aa:d7:93:46:97:ef:1b:3f:8a:26:46:d3:e7:97:9a:38:9d:
89:2e:da:2a:cd:f1:73:8e:b7:c4:79:69:fc:5f:5b:53:cf:ee:
cc:cb:d1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:30:25 2025 by rpki-client