Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3231302e302f32342d3234203d3e20313437303439.roa
File: 34352e39342e3231302e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: 7NwW7jNj+ll7VP5Hidm/QlM1Q+swEX0Lj5jxdjzlVwU=
Subject key identifier: B6:0C:6D:CA:01:3C:38:A6:3B:B3:AD:BF:4E:0B:BB:59:ED:3E:C9:CC
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 12DF13E707D1ADD0A084DD9611A26010EB0B04EC
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3231302e302f32342d3234203d3e20313437303439.roa
Signing time: Fri 27 Dec 2024 11:47:18 +0000
ROA not before: Fri 27 Dec 2024 11:42:18 +0000
ROA not after: Fri 26 Dec 2025 11:47:18 +0000
asID: 147049
IP address blocks: 45.94.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:df:13:e7:07:d1:ad:d0:a0:84:dd:96:11:a2:60:10:eb:0b:04:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:18 2024 GMT
Not After : Dec 26 11:47:18 2025 GMT
Subject: CN=B60C6DCA013C38A63BB3ADBF4E0BBB59ED3EC9CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:91:bd:ac:8a:47:11:23:2b:31:58:34:f5:
39:67:f8:bc:25:b8:bd:36:ef:5c:35:7c:62:a2:dd:
f1:e0:9a:f9:14:9f:ed:95:45:0f:f5:15:da:5d:3f:
ef:1d:66:59:cc:15:03:09:e0:56:71:6b:85:50:14:
51:70:70:6c:55:d7:40:2f:06:68:6a:bd:81:ec:9a:
16:64:38:5b:54:58:bb:50:ea:ea:b6:7e:6e:da:ba:
a5:a4:63:cf:f8:d0:5b:eb:48:65:66:b8:a0:58:8e:
bd:d4:df:84:6a:e8:c4:3c:7a:79:96:78:df:25:aa:
6f:32:fa:9a:75:69:82:74:b1:c3:5e:88:51:12:46:
e0:61:42:34:c7:e6:0a:f8:b3:2b:41:5f:b2:53:24:
47:fc:f4:6c:be:bb:7d:a2:f3:39:71:d5:90:31:b8:
c4:db:ec:c8:c4:c2:9c:16:10:0b:8e:60:d5:0e:3e:
c0:ce:ac:0f:1d:5a:be:40:eb:4c:4c:5f:3e:33:c7:
7d:30:f5:54:5a:4f:23:2c:b4:4b:0c:ce:bb:92:f9:
9c:29:1c:a8:c9:0b:a6:ff:f9:91:f5:21:0b:d2:f7:
db:45:09:c1:7c:e6:40:5a:90:bc:36:2c:f2:2a:96:
4e:9d:00:95:57:f3:8a:5d:e1:9e:45:74:46:6d:76:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0C:6D:CA:01:3C:38:A6:3B:B3:AD:BF:4E:0B:BB:59:ED:3E:C9:CC
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3231302e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.210.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c1:f2:77:4d:a9:fd:2b:4f:f6:48:3c:dd:f0:4b:8e:14:f5:
81:75:57:f5:31:87:ae:7c:3e:61:bb:22:54:d7:36:17:2f:bc:
07:ea:4c:bd:6e:cc:09:e3:c2:1d:38:97:37:0e:d4:86:42:40:
de:83:8d:9b:f5:a3:94:2b:41:1a:ad:e1:6a:1f:af:fb:4f:d3:
19:88:3c:d0:4c:ae:86:ac:8c:59:ce:5c:d7:e3:a8:a8:6c:d8:
02:86:80:1d:d7:06:14:15:ef:a6:c9:2a:47:a5:45:3c:f7:36:
53:f3:49:33:eb:03:ac:d6:5a:20:48:86:4b:84:44:e6:b6:25:
1a:9b:91:1c:3b:9e:ce:8f:09:09:a8:df:a1:28:3a:ae:74:f1:
a7:f1:67:49:d9:5c:7e:9c:98:a6:86:1c:ee:4a:d4:f1:85:60:
4f:fc:11:68:1f:81:85:32:e6:a6:29:be:7e:05:83:12:40:2c:
a5:7b:b6:d5:db:bc:05:ff:db:ac:a8:97:52:e6:28:e0:af:f5:
fd:f7:ff:a6:e0:8f:c0:76:04:14:7d:dd:02:fd:81:a4:b6:ac:
a3:bb:ad:1e:c4:7b:dc:a9:da:25:68:97:da:0e:d6:d3:1b:22:
78:8e:19:9f:31:35:18:92:b1:20:fd:d6:d7:52:c7:a5:59:08:
52:fc:95:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:44:49 2025 by rpki-client