Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/644ca451-4ede-4f68-a705-2a2a510e28f6/0/3137362e3132362e3130352e302f32342d3234203d3e203434343836.roa
File: 3137362e3132362e3130352e302f32342d3234203d3e203434343836.roa (raw, json)
Hash identifier: HmA+qmnnAnPcppgbmdBBl8Es3y/m+AzbYi9nI8X18Ao=
Subject key identifier: E0:50:7B:75:2B:CD:8B:93:B6:2C:7D:3F:41:5C:F3:A4:2E:44:43:23
Certificate issuer: /CN=a09effbd0b329b7aeebd1afbca5e7363f7e8ad5d
Certificate serial: 1079F2F8486086FC64E97715ECC53ED6D99CA5F5
Authority key identifier: A0:9E:FF:BD:0B:32:9B:7A:EE:BD:1A:FB:CA:5E:73:63:F7:E8:AD:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ7_vQsym3ruvRr7yl5zY_forV0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/644ca451-4ede-4f68-a705-2a2a510e28f6/0/3137362e3132362e3130352e302f32342d3234203d3e203434343836.roa
Signing time: Wed 22 Mar 2023 20:13:35 +0000
ROA not before: Wed 22 Mar 2023 20:08:35 +0000
ROA not after: Wed 20 Mar 2024 20:13:35 +0000
asID: 44486
IP address blocks: 176.126.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:79:f2:f8:48:60:86:fc:64:e9:77:15:ec:c5:3e:d6:d9:9c:a5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09effbd0b329b7aeebd1afbca5e7363f7e8ad5d
Validity
Not Before: Mar 22 20:08:35 2023 GMT
Not After : Mar 20 20:13:35 2024 GMT
Subject: CN=E0507B752BCD8B93B62C7D3F415CF3A42E444323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:10:1e:9a:79:89:40:67:f0:75:7e:15:96:67:
9e:74:86:49:1c:37:cd:bc:3e:f5:7b:d2:36:1d:24:
72:f3:83:33:6f:95:0f:a3:ea:ee:e2:9b:9d:36:22:
86:34:01:8b:7e:23:ac:8f:76:80:9c:f3:4f:67:99:
1d:97:eb:bc:51:14:fc:7f:28:c7:1a:08:78:b3:72:
36:56:b9:c5:a8:98:c7:84:18:fa:3b:07:15:c7:1e:
5b:1a:aa:37:b4:a1:18:4e:81:48:63:a0:f0:1d:75:
d1:69:51:28:ab:86:ba:d5:8e:73:af:e7:6e:67:cd:
19:96:ab:0a:a5:8f:87:ba:a5:19:51:40:92:f0:de:
d2:db:13:fc:97:c6:b8:24:eb:2c:c0:06:7b:93:78:
3b:29:16:b8:ee:9f:34:28:5c:af:7c:a7:7c:8b:a9:
a6:e3:6e:99:55:45:4b:04:09:72:2a:7d:bf:f4:6c:
7c:47:77:97:27:e9:6a:b3:5e:da:4d:77:e8:38:bb:
a0:9e:73:fb:6e:af:bc:6e:08:c8:a2:1e:7b:b4:72:
2a:0f:6c:57:0d:fe:33:d9:03:70:33:b5:a8:67:96:
3b:23:cf:21:3a:e9:b5:ee:34:56:6e:2c:4d:59:09:
5d:41:ae:cc:f1:23:15:7d:f6:80:61:e5:bc:b3:8f:
86:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:50:7B:75:2B:CD:8B:93:B6:2C:7D:3F:41:5C:F3:A4:2E:44:43:23
X509v3 Authority Key Identifier:
keyid:A0:9E:FF:BD:0B:32:9B:7A:EE:BD:1A:FB:CA:5E:73:63:F7:E8:AD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/644ca451-4ede-4f68-a705-2a2a510e28f6/0/A09EFFBD0B329B7AEEBD1AFBCA5E7363F7E8AD5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ7_vQsym3ruvRr7yl5zY_forV0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/644ca451-4ede-4f68-a705-2a2a510e28f6/0/3137362e3132362e3130352e302f32342d3234203d3e203434343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.105.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:54:0a:17:9c:7d:56:2f:68:98:73:2c:7c:38:39:e4:2e:8d:
c8:e9:05:00:43:e4:e9:b8:9f:1e:9c:d1:21:78:d2:4b:fe:56:
bb:6d:3c:a8:36:a5:c7:99:68:d5:de:14:78:b1:c7:d4:22:4d:
6f:c8:57:14:c9:1d:81:e5:9c:b8:e4:31:25:15:42:cf:49:3d:
fc:1a:da:f3:88:c8:24:2f:4f:5c:c2:17:5d:a3:96:af:bb:36:
d6:d4:0a:dd:6d:c5:46:bd:f9:f7:90:c1:1d:87:b7:8f:32:03:
0d:a3:b8:f6:33:c4:1a:00:ed:59:42:81:ef:c4:35:4d:9a:49:
bb:02:a1:f6:c2:b0:94:3e:51:c7:77:51:f4:e0:88:32:48:e8:
86:06:a4:7b:cb:e4:45:7d:ee:1d:37:54:c2:26:fe:1f:66:2b:
c8:8c:b1:d2:94:d7:40:25:8f:7e:ed:a3:61:a4:97:6c:26:21:
ff:33:74:06:6c:fc:cc:53:2d:93:34:d6:56:cd:54:0e:fe:81:
5b:63:90:b0:2b:1d:28:30:ae:d9:38:be:15:d5:63:e4:13:36:
fa:d4:b3:8f:82:c8:76:b4:ae:ad:fa:a8:69:68:36:59:25:41:
58:73:76:76:fc:cd:ae:0d:a7:09:40:3f:22:6b:95:59:c0:8a:
a6:2d:c2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:53 2025 by rpki-client