Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36312e302f32342d3234203d3e20323133363133.roa
File: 3130392e3233362e36312e302f32342d3234203d3e20323133363133.roa (raw, json)
Hash identifier: RG1mTEOYK8Z2CppeJ8X4t59KKBxM66+t2oeAk0jWp1Q=
Subject key identifier: 7E:3D:EF:1B:3A:76:00:62:79:C2:88:68:EB:13:18:4B:9C:D2:7D:20
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6545C666812FACC7743C79551986DFAA1111A7BA
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36312e302f32342d3234203d3e20323133363133.roa
Signing time: Mon 13 Jan 2025 14:31:09 +0000
ROA not before: Mon 13 Jan 2025 14:26:09 +0000
ROA not after: Mon 12 Jan 2026 14:31:09 +0000
asID: 213613
IP address blocks: 109.236.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:45:c6:66:81:2f:ac:c7:74:3c:79:55:19:86:df:aa:11:11:a7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jan 13 14:26:09 2025 GMT
Not After : Jan 12 14:31:09 2026 GMT
Subject: CN=7E3DEF1B3A76006279C28868EB13184B9CD27D20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:fb:d0:b9:61:c7:39:8b:4b:e2:df:4a:b2:
e1:c4:71:11:81:62:af:4a:e1:e4:0b:5c:cd:07:a1:
23:2c:5a:c0:54:f8:a6:7f:00:8f:0d:ac:44:f2:75:
ef:e7:d2:5c:dd:68:15:49:48:14:22:6d:23:cb:83:
5a:ec:42:e9:16:36:f4:91:2b:19:85:2d:e2:bb:5d:
77:74:b1:69:c0:1e:37:d4:19:8c:7d:e9:56:4c:0a:
40:2d:b8:e8:ef:65:cc:47:91:97:3a:5d:4c:51:fb:
14:63:2a:07:47:84:c7:11:aa:e1:f8:4a:63:1b:75:
c6:3b:8b:d0:4f:9c:fd:a4:f9:82:9b:32:96:0d:58:
c8:2b:54:d1:d9:51:7d:05:a8:bd:1a:c3:b3:c2:0e:
b1:05:cf:ea:50:c9:29:17:b2:14:c4:be:c7:74:38:
b2:ec:4b:7e:82:79:31:bc:31:10:c7:83:fd:4d:c0:
71:cc:c3:d0:ca:ee:24:6c:a1:c6:c4:7c:2c:e1:84:
78:eb:f3:5f:e1:27:67:a7:30:42:39:74:26:a2:9e:
85:a6:3f:e0:28:78:1b:3a:5b:b5:30:e7:dc:1f:a3:
e2:81:e8:aa:e9:3a:53:d4:3f:f0:cc:c7:30:6c:2e:
ca:2c:a2:bc:27:6c:b4:4b:2d:24:f7:45:1f:b0:b7:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3D:EF:1B:3A:76:00:62:79:C2:88:68:EB:13:18:4B:9C:D2:7D:20
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36312e302f32342d3234203d3e20323133363133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.61.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e9:cc:12:cd:26:8d:f4:ee:96:1f:4d:1e:68:c1:dd:b7:34:
f1:2a:c6:93:b6:e0:5f:83:e8:71:2d:6b:b6:72:94:94:21:21:
05:9c:68:ae:c8:38:cd:06:b8:5e:9f:68:91:74:2f:60:6f:95:
57:0b:b1:e5:ac:9d:33:a1:55:89:3c:14:23:08:22:05:b9:45:
76:86:cb:bc:2f:c3:9e:23:6a:c2:97:14:87:37:2b:1e:37:53:
d7:b1:ce:b1:91:89:d6:7d:14:01:ff:ce:6a:40:bc:f3:33:7f:
51:17:3b:80:f3:e9:26:14:8f:59:fa:c4:18:e4:9c:eb:60:b2:
61:23:ff:d4:a6:22:48:c2:66:51:2c:f0:09:03:49:e8:a2:82:
6c:82:10:7d:da:b7:74:17:8a:1b:e0:71:3a:b3:ca:56:8a:49:
50:15:31:9f:71:d0:7f:78:fa:00:cf:c2:3d:32:6c:72:a9:c1:
25:64:7d:ef:67:c0:87:85:ac:d4:55:2f:a0:ed:cd:a8:64:a1:
f9:5f:00:69:c7:02:98:66:01:c5:aa:8e:7d:e4:9b:2b:61:93:
d8:d8:80:07:2a:29:24:d4:ab:62:4e:b7:dd:3f:84:4a:65:f4:
0a:d2:fa:a8:19:b5:e7:5c:4c:aa:9f:e6:22:cb:ff:d4:e6:f3:
5c:8d:f4:e9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:42 2025 by rpki-client