Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e31372e3137342e302f32332d3234203d3e203437353833.roa
File: 34362e31372e3137342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: uJqurGH5kh49ywqvIgyeaLyY9g4CNRtjbNqC2PJX6pA=
Subject key identifier: 88:4C:C3:92:66:30:B6:9A:79:E3:28:C0:06:DB:BB:1B:FC:8B:B8:E7
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4DB768040BD02D41C147CAA3616B95D1774103E0
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e31372e3137342e302f32332d3234203d3e203437353833.roa
Signing time: Fri 20 Dec 2024 15:23:40 +0000
ROA not before: Fri 20 Dec 2024 15:18:40 +0000
ROA not after: Fri 19 Dec 2025 15:23:40 +0000
asID: 47583
IP address blocks: 46.17.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:b7:68:04:0b:d0:2d:41:c1:47:ca:a3:61:6b:95:d1:77:41:03:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:40 2024 GMT
Not After : Dec 19 15:23:40 2025 GMT
Subject: CN=884CC3926630B69A79E328C006DBBB1BFC8BB8E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:1b:36:8a:e5:d0:60:26:1c:1e:ce:d9:b9:
05:69:91:30:bd:17:f1:ed:06:3e:12:6c:6f:3e:3d:
f1:41:51:13:2d:4c:38:00:d5:91:38:77:1b:7b:b0:
89:ec:56:c9:1e:aa:7d:48:ae:07:6a:d6:c9:fb:96:
83:ce:3f:57:ce:01:68:32:e7:18:fe:41:63:16:c3:
58:c4:c4:60:60:00:0c:3e:a8:73:2e:1c:91:5d:1b:
11:24:e1:d1:59:a5:5a:97:3a:27:92:1a:71:5e:cd:
39:58:51:13:3e:f9:cf:0f:91:78:d6:54:5d:64:b3:
f7:c8:e5:a1:ec:6a:7b:6e:de:f9:c2:c4:2f:fd:c6:
69:78:34:8f:2c:fc:99:d7:53:70:51:6d:46:c6:f4:
c7:1d:b3:d7:2b:89:74:94:7f:ec:7a:b0:9d:a1:90:
1b:b4:a6:3f:ef:91:45:b3:d8:66:79:d6:cb:6f:ae:
8f:4f:51:38:09:ba:0d:84:03:ee:1b:1c:cb:20:54:
1e:33:60:cd:95:42:84:ae:45:ca:95:f7:40:cd:6a:
d8:5f:ad:8c:d3:d5:1a:cd:fc:56:b5:90:47:91:9f:
4b:d4:e0:b8:54:1a:1b:49:7e:ac:c5:7e:b6:c5:14:
e2:5d:4a:e9:23:61:5b:50:9b:24:58:43:c5:20:0d:
e3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4C:C3:92:66:30:B6:9A:79:E3:28:C0:06:DB:BB:1B:FC:8B:B8:E7
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e31372e3137342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.174.0/23
Signature Algorithm: sha256WithRSAEncryption
82:f4:29:6a:23:52:01:62:3f:d7:80:52:0b:fa:c9:a3:dd:25:
cb:9d:04:80:a0:d3:c8:fd:80:f9:1f:18:88:27:e1:d7:6c:2e:
46:ee:43:97:83:59:4f:52:26:7c:b0:bf:4c:1a:7b:5c:ec:85:
9d:13:ab:e0:a7:56:90:55:fa:79:cf:6c:d7:4a:34:b2:23:eb:
2e:f6:35:bd:31:2d:8e:88:6f:ae:56:41:c1:28:22:65:c1:67:
1f:e0:55:5f:e2:5c:6d:27:53:b8:7d:fe:4d:8a:b1:7a:a2:a0:
26:88:d5:4a:8a:34:26:1c:62:c8:2b:c6:db:61:96:4d:0f:d2:
d0:38:ed:ba:05:8d:5d:80:39:e8:b1:5f:7b:0f:04:d4:ba:83:
f2:fd:85:2b:5f:78:e1:c4:e7:a0:6e:d5:a9:77:45:d8:02:44:
32:40:da:62:91:65:08:a1:6b:c8:d4:fb:74:37:83:9c:c3:05:
a9:16:55:e5:73:f1:28:9d:a6:81:7d:b5:03:0b:bf:fa:77:2f:
8b:d8:ef:8a:73:e9:0d:fc:7f:57:9c:be:c7:d6:5d:89:0a:b9:
9d:22:66:27:29:6d:15:0c:36:f8:04:1f:9c:8f:09:71:0b:b0:
f6:fb:d1:28:d5:6d:f3:21:bd:b4:7f:fa:69:bb:2d:90:25:36:
21:ec:b6:34
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUTbdoBAvQLUHBR8qjYWuV0XdBA+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjAxNTE4NDBaFw0yNTEyMTkxNTIzNDBaMDMxMTAvBgNV
BAMTKDg4NENDMzkyNjYzMEI2OUE3OUUzMjhDMDA2REJCQjFCRkM4QkI4RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtahs2iuXQYCYcHs7ZuQVpkTC9
F/HtBj4SbG8+PfFBURMtTDgA1ZE4dxt7sInsVskeqn1Irgdq1sn7loPOP1fOAWgy
5xj+QWMWw1jExGBgAAw+qHMuHJFdGxEk4dFZpVqXOieSGnFezTlYURM++c8PkXjW
VF1ks/fI5aHsantu3vnCxC/9xml4NI8s/JnXU3BRbUbG9Mcds9criXSUf+x6sJ2h
kBu0pj/vkUWz2GZ51stvro9PUTgJug2EA+4bHMsgVB4zYM2VQoSuRcqV90DNathf
rYzT1RrN/Fa1kEeRn0vU4LhUGhtJfqzFfrbFFOJdSukjYVtQmyRYQ8UgDeNtAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUiEzDkmYwtpp54yjABtu7G/yLuOcwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM2MmUzMTM3MmUz
MTM3MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBLhGuMA0GCSqGSIb3DQEBCwUAA4IBAQCC9ClqI1IBYj/XgFIL+smj3SXLnQSA
oNPI/YD5HxiIJ+HXbC5G7kOXg1lPUiZ8sL9MGntc7IWdE6vgp1aQVfp5z2zXSjSy
I+su9jW9MS2OiG+uVkHBKCJlwWcf4FVf4lxtJ1O4ff5NirF6oqAmiNVKijQmHGLI
K8bbYZZND9LQOO26BY1dgDnosV97DwTUuoPy/YUrX3jhxOegbtWpd0XYAkQyQNpi
kWUIoWvI1Pt0N4OcwwWpFlXlc/EonaaBfbUDC7/6dy+L2O+Kc+kN/H9XnL7H1l2J
CrmdImYnKW0VDDb4BB+cjwlxC7D2+9Eo1W3zIb20f/ppuy2QJTYh7LY0
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:29 2025 by rpki-client