Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36302e302f32342d3332203d3e203531313637.roa
File: 3130392e3233362e36302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: Bb9zJ5CGmoNv9ueiNCGq195Vd4s7p8XNoFvGUEGmecc=
Subject key identifier: 04:FB:39:1B:0F:A2:D5:B7:CA:6B:44:2E:2B:EB:94:5E:96:49:28:83
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 31899ECC930741C048041456EAD658712463DEB3
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36302e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Dec 2024 15:23:41 +0000
ROA not before: Fri 20 Dec 2024 15:18:41 +0000
ROA not after: Fri 19 Dec 2025 15:23:41 +0000
asID: 51167
IP address blocks: 109.236.60.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:89:9e:cc:93:07:41:c0:48:04:14:56:ea:d6:58:71:24:63:de:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:41 2024 GMT
Not After : Dec 19 15:23:41 2025 GMT
Subject: CN=04FB391B0FA2D5B7CA6B442E2BEB945E96492883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:01:42:b9:27:50:10:b2:d2:cb:74:a7:15:
c6:8f:92:28:b6:b1:ec:fa:64:91:21:e0:ca:35:75:
87:75:6d:b7:ea:a5:76:5a:a7:a6:5f:b7:c0:aa:d4:
e1:0c:1f:dc:f7:c1:fc:f8:83:cb:53:9c:84:89:b0:
cd:bf:03:6c:43:03:53:ed:92:49:a0:15:58:b4:47:
a7:58:d1:9b:4c:ba:bb:7a:b6:0e:6c:ff:22:bb:ad:
93:cd:1d:fd:3e:50:b4:67:06:39:2a:63:9f:1f:cd:
0e:69:5c:f9:1b:28:fa:5e:87:72:c5:04:50:34:b0:
07:ca:29:09:24:a3:a7:ee:51:9b:62:c7:14:64:fd:
ce:28:3b:37:32:b9:c7:25:1f:50:19:23:1a:09:a4:
e7:61:a8:3a:01:dc:e8:f6:48:51:d9:67:1b:66:3a:
74:39:f6:a9:76:2a:a9:48:c9:62:7d:2e:8e:5a:72:
d9:99:6a:56:6b:52:25:e2:af:08:c9:16:d1:23:0c:
a5:16:1c:72:ea:78:9b:67:11:22:ce:bf:73:09:60:
b2:a4:e7:3e:b8:66:1e:b3:ea:a7:bf:06:58:cc:fe:
2d:46:b0:92:95:eb:1b:c6:34:e2:13:c0:a2:f8:4a:
51:07:bf:5d:63:04:5c:ab:3c:19:fe:c0:84:1a:ae:
33:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FB:39:1B:0F:A2:D5:B7:CA:6B:44:2E:2B:EB:94:5E:96:49:28:83
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36302e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.60.0/24
Signature Algorithm: sha256WithRSAEncryption
26:de:8d:e6:10:0b:c0:89:5e:39:f4:5b:4a:1e:f0:0a:19:c5:
ad:2f:8c:27:ae:2e:48:59:6d:43:ec:98:fc:6b:ea:ff:78:fb:
4b:d1:f2:9e:93:58:55:4a:dd:ed:0d:08:a6:f7:5d:69:0f:2c:
fc:a8:99:d3:fe:1b:1d:69:d6:a7:f8:a7:c4:20:6f:aa:9f:8a:
30:69:c4:61:94:18:76:53:6a:ec:43:75:b2:fd:3b:f7:6d:1c:
2f:b2:1e:70:85:6f:7a:ec:23:1e:96:98:17:0a:36:62:5a:4c:
3f:1f:ef:b0:05:36:54:62:20:f9:ec:84:fe:7f:68:0b:f8:ed:
57:72:90:7d:0b:82:cb:4b:d1:a3:4f:79:68:31:2f:a5:dc:98:
4e:cd:1e:17:cc:f8:0d:1e:c3:37:7b:53:d3:c2:89:16:db:2d:
c8:6b:86:a4:c3:5c:30:0b:9d:fe:31:05:92:98:f7:31:b7:63:
be:b0:65:2e:b8:2c:73:ee:e3:ce:01:93:76:7d:0d:7a:eb:e5:
b4:6a:89:f6:4b:05:d2:d9:86:1f:eb:d7:db:3a:42:49:a9:f6:
b2:3f:32:32:49:72:01:62:aa:bb:71:f5:fd:b5:23:d4:fc:4c:
ff:84:aa:96:b4:fe:c4:9b:98:5f:70:d9:91:6d:d0:fd:72:19:
a6:45:cd:92
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUMYmezJMHQcBIBBRW6tZYcSRj3rMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjAxNTE4NDFaFw0yNTEyMTkxNTIzNDFaMDMxMTAvBgNV
BAMTKDA0RkIzOTFCMEZBMkQ1QjdDQTZCNDQyRTJCRUI5NDVFOTY0OTI4ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCycQFCuSdQELLSy3SnFcaPkii2
sez6ZJEh4Mo1dYd1bbfqpXZap6Zft8Cq1OEMH9z3wfz4g8tTnISJsM2/A2xDA1Pt
kkmgFVi0R6dY0ZtMurt6tg5s/yK7rZPNHf0+ULRnBjkqY58fzQ5pXPkbKPpeh3LF
BFA0sAfKKQkko6fuUZtixxRk/c4oOzcyucclH1AZIxoJpOdhqDoB3Oj2SFHZZxtm
OnQ59ql2KqlIyWJ9Lo5actmZalZrUiXirwjJFtEjDKUWHHLqeJtnESLOv3MJYLKk
5z64Zh6z6qe/BljM/i1GsJKV6xvGNOITwKL4SlEHv11jBFyrPBn+wIQarjM/AgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUBPs5Gw+i1bfKa0QuK+uUXpZJKIMwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTMwMzkyZTMyMzMz
NjJlMzYzMDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABt7DwwDQYJKoZIhvcNAQELBQADggEBACbejeYQC8CJXjn0W0oe8AoZxa0v
jCeuLkhZbUPsmPxr6v94+0vR8p6TWFVK3e0NCKb3XWkPLPyomdP+Gx1p1qf4p8Qg
b6qfijBpxGGUGHZTauxDdbL9O/dtHC+yHnCFb3rsIx6WmBcKNmJaTD8f77AFNlRi
IPnshP5/aAv47VdykH0LgstL0aNPeWgxL6XcmE7NHhfM+A0ewzd7U9PCiRbbLchr
hqTDXDALnf4xBZKY9zG3Y76wZS64LHPu484Bk3Z9DXrr5bRqifZLBdLZhh/r19s6
Qkmp9rI/MjJJcgFiqrtx9f21I9T8TP+Eqpa0/sSbmF9w2ZFt0P1yGaZFzZI=
-----END CERTIFICATE-----
Generated at Thu Apr 3 05:05:59 2025 by rpki-client