Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/644ca451-4ede-4f68-a705-2a2a510e28f6/0/3137362e3132362e3130352e302f32342d3234203d3e20383334.roa
File: 3137362e3132362e3130352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 7cA8UqwNP5TWi43hnIOjT6bUqSr5ZD6IqJGR7/HVkdo=
Subject key identifier: DE:27:8A:6F:C0:41:B0:1E:7E:19:D5:7D:EC:70:40:B0:5C:5C:6D:FB
Certificate issuer: /CN=a09effbd0b329b7aeebd1afbca5e7363f7e8ad5d
Certificate serial: 015881B8825A7F7427CA6B1462733EAE162472C9
Authority key identifier: A0:9E:FF:BD:0B:32:9B:7A:EE:BD:1A:FB:CA:5E:73:63:F7:E8:AD:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ7_vQsym3ruvRr7yl5zY_forV0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/644ca451-4ede-4f68-a705-2a2a510e28f6/0/3137362e3132362e3130352e302f32342d3234203d3e20383334.roa
Signing time: Wed 26 Apr 2023 00:00:13 +0000
ROA not before: Tue 25 Apr 2023 23:55:13 +0000
ROA not after: Wed 24 Apr 2024 00:00:13 +0000
asID: 834
IP address blocks: 176.126.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:58:81:b8:82:5a:7f:74:27:ca:6b:14:62:73:3e:ae:16:24:72:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09effbd0b329b7aeebd1afbca5e7363f7e8ad5d
Validity
Not Before: Apr 25 23:55:13 2023 GMT
Not After : Apr 24 00:00:13 2024 GMT
Subject: CN=DE278A6FC041B01E7E19D57DEC7040B05C5C6DFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:d1:37:56:23:ff:ed:a0:ef:eb:ab:eb:e3:
9b:d0:e6:21:02:63:ff:c5:90:3b:31:17:09:02:e9:
d5:21:65:f0:ff:28:9e:86:1c:56:5b:f0:90:85:32:
ea:aa:5f:a7:54:b2:d4:03:7e:29:db:c9:55:fa:17:
8f:b7:cd:ea:09:c9:db:a5:55:c7:64:18:54:c8:69:
b6:b4:52:42:d6:b6:a9:8b:29:71:b4:be:7e:38:06:
91:16:9c:95:be:ae:e5:a4:a6:a2:51:5d:90:ef:71:
ce:3e:a2:26:0a:20:f1:f9:66:be:d7:0c:8c:9e:7a:
7a:25:f9:5a:c9:0d:32:2b:71:66:2d:3f:02:14:c0:
b4:a3:ea:f1:2f:6b:93:0c:7a:1f:0a:8a:5d:d0:36:
b3:bd:09:a9:27:c2:09:b1:2a:2e:8f:d0:64:22:3f:
ac:33:af:5b:c5:bc:68:00:c8:40:d3:3f:50:dc:9b:
29:63:53:d7:e3:b1:4e:8b:fc:bd:af:6f:e0:da:98:
93:bc:12:d0:f4:0d:73:bb:53:13:b3:20:93:c9:6c:
82:b3:ec:42:c3:c2:9c:c6:a3:e2:be:e5:36:cd:4d:
58:97:21:6f:fe:4f:09:cb:b4:d1:49:52:98:72:a6:
9a:90:62:40:6f:db:0e:c4:93:1c:0a:a9:59:cf:8d:
ae:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:27:8A:6F:C0:41:B0:1E:7E:19:D5:7D:EC:70:40:B0:5C:5C:6D:FB
X509v3 Authority Key Identifier:
keyid:A0:9E:FF:BD:0B:32:9B:7A:EE:BD:1A:FB:CA:5E:73:63:F7:E8:AD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/644ca451-4ede-4f68-a705-2a2a510e28f6/0/A09EFFBD0B329B7AEEBD1AFBCA5E7363F7E8AD5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ7_vQsym3ruvRr7yl5zY_forV0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/644ca451-4ede-4f68-a705-2a2a510e28f6/0/3137362e3132362e3130352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.105.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ad:98:08:c0:66:e2:4e:1c:ae:e6:b9:2c:13:df:72:a8:95:
54:d7:58:ac:39:46:bc:86:89:a4:0e:7d:8d:6c:f4:51:ee:38:
3e:61:59:df:3b:af:6b:23:58:14:59:9d:cb:62:84:01:76:93:
7a:64:62:c7:41:ee:02:77:14:59:fa:f7:68:48:ef:64:b8:50:
eb:8e:59:41:75:ed:61:7b:d7:90:17:7e:41:4f:aa:cd:49:99:
f4:8f:e2:89:63:f2:fe:bb:53:77:d8:7a:d0:8c:f7:4a:e8:ae:
ad:46:1c:88:9e:be:78:e8:30:07:17:6e:ff:cc:ad:a9:10:ee:
85:41:63:35:86:45:81:bf:30:4c:c8:b9:35:52:a6:82:62:4a:
90:93:88:da:cc:38:72:cc:d5:b7:15:02:f1:94:a3:4d:d8:26:
ac:b8:8d:67:31:02:4f:36:7a:82:b9:95:fa:ff:b0:ba:1f:2a:
69:e2:cb:47:e7:03:5b:3e:3e:2c:a7:fa:a7:fb:3b:fe:2c:b5:
92:3e:86:07:e1:2d:56:46:0e:d5:1c:4b:95:ce:55:6e:3b:eb:
5c:4f:05:95:4e:20:03:36:0c:ae:6c:b2:b1:01:cc:7e:a7:35:
00:ef:61:b4:8c:9f:b9:a2:9c:c6:4c:0f:e8:6b:52:24:64:1b:
46:70:b8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:37:48 2025 by rpki-client