Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e3230342e34352e302f32342d3234203d3e20313336373837.roa
File: 36322e3230342e34352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: nMIym7qd7DAUQoSWvwXYTTp0Z3ogpiEtRd08IvPqVfs=
Subject key identifier: 2C:43:EB:C4:57:04:B8:F7:96:02:3C:5E:9C:12:9A:82:64:18:12:D3
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 21D1EB51127CA346A88F498CEA8A2E02EF8E17E1
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e3230342e34352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:33 +0000
ROA not before: Fri 27 Dec 2024 11:42:33 +0000
ROA not after: Fri 26 Dec 2025 11:47:33 +0000
asID: 136787
IP address blocks: 62.204.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:d1:eb:51:12:7c:a3:46:a8:8f:49:8c:ea:8a:2e:02:ef:8e:17:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:33 2024 GMT
Not After : Dec 26 11:47:33 2025 GMT
Subject: CN=2C43EBC45704B8F796023C5E9C129A82641812D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:72:d6:e9:74:c3:13:c2:9c:ee:d6:96:33:
16:4c:4b:f5:a1:5f:db:2a:39:f2:1a:09:e3:de:4a:
ba:d8:d7:e5:ae:a4:12:cc:cf:cf:76:bd:b2:84:28:
2e:df:b3:5f:f8:b1:59:52:84:1c:dd:29:e3:ac:da:
67:c4:64:2a:8d:81:d6:a8:99:0a:f5:19:32:02:f0:
a4:67:2c:c8:c3:e0:6f:2c:36:cb:3a:b1:b6:b4:37:
96:6e:24:20:b6:31:db:27:03:47:2c:62:6a:41:00:
64:84:ef:61:ba:f7:c6:4a:15:8b:87:a7:bc:fa:d5:
ad:e4:ba:c7:92:00:07:a9:cc:75:5c:1c:1a:6f:db:
29:24:c1:32:5d:7d:0e:ac:9a:a6:7c:c1:17:99:47:
65:0c:39:17:81:00:a1:20:a2:e8:23:65:63:17:7f:
85:18:e8:03:e5:ea:44:24:92:ea:a5:96:06:85:4d:
3b:82:5e:28:69:66:7e:f8:98:31:6d:c4:a3:5b:79:
f0:76:f6:a9:05:89:72:93:df:6b:40:c8:99:cc:75:
92:b2:1a:c5:22:b0:03:2d:6a:3f:c0:da:8b:e2:70:
a3:24:61:e1:e5:23:53:9a:7b:7d:d8:6c:1d:94:ba:
fd:a1:3d:9b:30:b3:70:08:3b:65:9a:f6:fb:d6:1a:
7c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:43:EB:C4:57:04:B8:F7:96:02:3C:5E:9C:12:9A:82:64:18:12:D3
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e3230342e34352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.45.0/24
Signature Algorithm: sha256WithRSAEncryption
82:d6:7a:a3:c3:5b:9a:be:92:6f:2f:77:97:ca:10:c0:ad:b7:
74:9d:4d:c7:ea:64:1c:24:55:8a:77:80:3a:09:05:d7:14:27:
2b:35:d5:06:1f:07:85:f3:f7:67:60:a6:86:04:fa:d0:b4:b7:
1f:da:08:11:eb:23:b1:4d:2b:16:52:a3:a1:be:ac:13:9e:76:
12:b9:55:97:43:84:40:e4:43:d4:a2:fd:93:fc:4e:13:fc:26:
d9:fe:a3:e6:0a:69:72:e6:a7:38:a6:96:84:60:39:43:80:69:
b8:7b:6b:e5:82:7d:5d:76:32:f7:5a:1a:a6:1e:95:31:13:6c:
b0:31:71:ec:3e:c0:c1:f0:55:9d:a9:06:c9:b6:9b:25:0d:ff:
95:47:06:3c:5f:f5:91:9f:e7:c4:f4:70:42:2a:bc:1d:3e:43:
06:ab:63:bc:5a:30:b5:80:34:9a:a2:ed:dc:2c:f0:26:ba:ee:
d5:c0:74:3e:77:01:21:51:7d:ae:e9:48:68:a5:93:e7:e5:62:
7d:f0:0c:51:8c:08:79:41:ad:3d:3c:a8:58:94:32:50:83:29:
b7:af:11:a3:bb:8f:75:f5:c5:5a:ab:6a:05:dc:3b:52:67:55:
82:74:24:df:ee:ce:47:8a:62:7f:38:34:2d:32:66:73:8a:13:
be:cd:dd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:05:20 2025 by rpki-client