Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e31372e3137322e302f32332d3234203d3e203437353833.roa
File: 34362e31372e3137322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: nh+XG2cOHY5OpHhjVCPVoxuC/Tg6MbsPqDRFklkU70M=
Subject key identifier: 80:D9:64:A9:CC:39:B0:86:66:A5:2B:EF:1F:97:BD:65:F5:AC:5C:A5
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0B926C81B14DF4A11E50D5FF6A1B297F6761888B
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e31372e3137322e302f32332d3234203d3e203437353833.roa
Signing time: Fri 20 Dec 2024 15:23:36 +0000
ROA not before: Fri 20 Dec 2024 15:18:36 +0000
ROA not after: Fri 19 Dec 2025 15:23:36 +0000
asID: 47583
IP address blocks: 46.17.172.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:92:6c:81:b1:4d:f4:a1:1e:50:d5:ff:6a:1b:29:7f:67:61:88:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:36 2024 GMT
Not After : Dec 19 15:23:36 2025 GMT
Subject: CN=80D964A9CC39B08666A52BEF1F97BD65F5AC5CA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:12:db:88:0c:6e:06:a0:24:57:ea:29:af:4b:
bd:57:12:d0:cd:d9:99:4d:d3:12:da:0f:e7:0f:9b:
26:72:78:c8:19:0c:f5:c0:29:d8:cc:d6:23:c4:3d:
c5:f7:e5:97:4f:d4:34:74:e6:80:bf:72:0f:af:b7:
a5:0d:de:96:58:b1:5a:a4:c7:50:7f:d3:f5:5b:bc:
02:b9:5d:c6:72:c9:04:85:ce:d7:16:fc:73:65:ce:
ce:37:9c:62:be:3d:bc:16:f9:7f:5d:f1:c9:31:1f:
7f:1a:0b:3c:50:cd:3d:16:6a:4c:08:22:71:ae:bf:
0a:a7:e3:bf:50:8c:7d:7a:d1:3a:8f:cf:7b:b4:84:
0a:d1:a2:1d:84:97:df:35:f8:61:2f:6d:a1:c9:51:
64:3d:0c:2e:d7:9c:f7:4f:0e:c5:6d:83:7b:96:34:
77:01:92:1c:2f:0d:f8:0f:c0:b5:9f:28:68:63:84:
b3:03:30:e8:a9:5f:bd:3e:30:93:9d:cc:6c:2e:db:
92:1f:99:9d:75:83:a6:9c:3d:21:c2:b1:56:32:8a:
75:58:d3:81:ad:65:c1:8e:0c:a3:db:97:2a:1a:a2:
32:09:55:96:b0:6a:f0:05:6e:0c:e2:4a:9e:5b:aa:
54:04:76:40:1c:0a:11:96:5e:00:d5:5a:9f:23:07:
1c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D9:64:A9:CC:39:B0:86:66:A5:2B:EF:1F:97:BD:65:F5:AC:5C:A5
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e31372e3137322e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.172.0/23
Signature Algorithm: sha256WithRSAEncryption
20:56:e6:78:01:92:6b:e7:0f:09:b2:25:37:65:38:df:09:49:
a4:34:ad:a9:0c:dd:c0:88:c6:79:71:21:c8:84:b5:a5:e0:ae:
bd:65:3a:cb:df:b7:bf:9c:c1:bc:d9:a0:c7:9e:22:f0:09:02:
dc:4d:29:1e:58:50:5e:36:e2:d7:42:7d:c4:c2:81:47:15:09:
7b:75:f3:69:9a:71:b4:c4:50:0c:05:5a:e4:67:25:9f:fb:7d:
4f:3e:dd:42:37:e0:02:4c:30:5b:13:ba:28:0b:ca:bd:75:4e:
19:97:a0:bd:a8:04:c1:56:ee:6f:18:cc:41:61:f6:be:95:7b:
dc:c7:9e:3c:62:15:59:84:96:d8:5f:fb:6f:49:d0:ad:bb:2a:
4b:8c:d4:80:38:3c:6f:e6:f4:17:d5:2d:b6:31:d7:b0:91:b9:
11:b4:d7:ca:b4:40:1c:a2:c8:88:6b:8e:79:24:71:90:70:f5:
af:95:5e:22:67:54:05:44:85:e1:a8:0f:a1:bf:bb:3e:bb:23:
a1:ac:8e:20:c2:55:8f:f2:90:72:d5:35:bd:f6:f9:50:5a:59:
ed:b1:71:a8:1e:b8:1c:d0:18:fe:dd:11:84:9f:d3:cd:2b:02:
8f:b6:01:9c:8d:4e:d3:a7:1c:6a:1b:c9:bf:9c:90:fd:27:b9:
a3:71:b0:04
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUC5JsgbFN9KEeUNX/ahspf2dhiIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjAxNTE4MzZaFw0yNTEyMTkxNTIzMzZaMDMxMTAvBgNV
BAMTKDgwRDk2NEE5Q0MzOUIwODY2NkE1MkJFRjFGOTdCRDY1RjVBQzVDQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwEtuIDG4GoCRX6imvS71XEtDN
2ZlN0xLaD+cPmyZyeMgZDPXAKdjM1iPEPcX35ZdP1DR05oC/cg+vt6UN3pZYsVqk
x1B/0/VbvAK5XcZyyQSFztcW/HNlzs43nGK+PbwW+X9d8ckxH38aCzxQzT0WakwI
InGuvwqn479QjH160TqPz3u0hArRoh2El981+GEvbaHJUWQ9DC7XnPdPDsVtg3uW
NHcBkhwvDfgPwLWfKGhjhLMDMOipX70+MJOdzGwu25IfmZ11g6acPSHCsVYyinVY
04GtZcGODKPblyoaojIJVZawavAFbgziSp5bqlQEdkAcChGWXgDVWp8jBxxfAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUgNlkqcw5sIZmpSvvH5e9ZfWsXKUwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM2MmUzMTM3MmUz
MTM3MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBLhGsMA0GCSqGSIb3DQEBCwUAA4IBAQAgVuZ4AZJr5w8JsiU3ZTjfCUmkNK2p
DN3AiMZ5cSHIhLWl4K69ZTrL37e/nMG82aDHniLwCQLcTSkeWFBeNuLXQn3EwoFH
FQl7dfNpmnG0xFAMBVrkZyWf+31PPt1CN+ACTDBbE7ooC8q9dU4Zl6C9qATBVu5v
GMxBYfa+lXvcx548YhVZhJbYX/tvSdCtuypLjNSAODxv5vQX1S22MdewkbkRtNfK
tEAcosiIa455JHGQcPWvlV4iZ1QFRIXhqA+hv7s+uyOhrI4gwlWP8pBy1TW99vlQ
WlntsXGoHrgc0Bj+3RGEn9PNKwKPtgGcjU7TpxxqG8m/nJD9J7mjcbAE
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:42:39 2025 by rpki-client