Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36322e302f32342d3234203d3e20313336373837.roa
File: 3130392e3233362e36322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 9U96Sb4u4Rw8FfsXcnrzZefGJCGeOMg9owpNitghvJY=
Subject key identifier: D9:4D:4E:9D:50:CD:4A:C4:C4:8F:EA:29:50:E4:30:D2:94:A3:B3:B1
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 64D6790F113F68BB14AE4E00824F5E5A4555BDA8
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:34 +0000
ROA not before: Fri 20 Dec 2024 15:18:34 +0000
ROA not after: Fri 19 Dec 2025 15:23:34 +0000
asID: 136787
IP address blocks: 109.236.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d6:79:0f:11:3f:68:bb:14:ae:4e:00:82:4f:5e:5a:45:55:bd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:34 2024 GMT
Not After : Dec 19 15:23:34 2025 GMT
Subject: CN=D94D4E9D50CD4AC4C48FEA2950E430D294A3B3B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:00:26:ed:8a:5e:e6:48:3a:94:47:24:4f:
7f:59:bc:d3:f0:51:b2:84:c1:56:3b:0d:d8:cb:93:
1c:c3:7c:5e:0d:a7:a5:2a:cf:8e:03:01:5c:7e:04:
07:c9:39:79:f6:b7:f2:8f:80:68:80:67:bd:46:3f:
97:1a:67:71:b3:47:a4:55:c0:cc:56:bb:c4:3c:77:
8b:06:7d:44:1a:e9:d3:d6:03:5c:e0:3a:dd:fe:0a:
dd:9c:02:6d:49:09:e5:cf:80:bd:cf:4a:eb:b7:f0:
e4:c5:82:9c:4a:19:dd:7e:e3:53:01:06:66:e9:c0:
45:3a:ce:06:06:6c:bf:8d:76:b2:8a:f7:17:13:4b:
be:c3:c7:5d:ba:b2:da:b8:51:86:09:4e:80:55:02:
e7:4d:1c:49:1e:fc:b8:c5:00:bb:e0:55:45:8d:7d:
30:5d:78:48:04:7e:2f:e9:5e:a4:ca:c9:c3:69:23:
9f:69:7a:21:96:c1:7c:db:26:4c:bc:14:9e:44:14:
e0:71:f1:2c:f2:17:d5:cf:5f:53:c4:e2:28:11:8a:
79:dd:f5:a5:53:48:d8:26:23:80:fa:f8:68:eb:34:
d3:0b:30:52:17:a7:b2:01:34:cf:11:0d:e0:00:37:
78:58:88:90:5f:e6:68:4f:8a:65:86:dc:fc:02:8e:
12:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4D:4E:9D:50:CD:4A:C4:C4:8F:EA:29:50:E4:30:D2:94:A3:B3:B1
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.62.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:cb:77:5f:88:ca:b7:5b:77:3b:46:17:7b:81:90:3a:a3:58:
32:00:ad:4a:0e:f7:40:33:fb:0b:f8:41:09:f0:88:bd:7e:f5:
a7:be:74:08:54:ac:bf:f8:f1:05:f7:75:f3:f8:d4:13:59:e7:
14:a4:d4:98:5c:81:01:e9:8e:55:43:8e:6a:69:07:da:40:5a:
cd:7e:f8:2d:89:97:50:c4:53:8f:03:f5:ec:b4:40:be:ad:33:
bf:5e:41:af:72:92:db:38:26:ee:0a:5c:7d:26:56:01:9f:ed:
9c:05:87:8a:f5:b9:ca:36:cd:bb:d9:dc:0c:e2:b2:b6:e6:80:
fe:5a:df:02:74:0c:b3:59:e1:53:7c:1d:20:23:37:d8:9b:b5:
e6:92:a0:6c:22:db:12:75:32:d0:0c:c6:64:a8:79:d4:af:00:
c3:a8:90:be:38:78:99:ba:13:eb:a1:97:79:b6:5f:81:91:55:
6a:52:22:33:71:80:8c:85:53:3c:38:3f:88:63:c2:67:e9:ca:
ad:59:e1:a3:9c:45:9b:1a:53:ae:5b:c0:56:1d:a3:2c:12:32:
fc:a6:65:79:83:a0:1f:09:29:f6:3d:9b:35:fd:08:31:fe:d0:
7e:30:7b:82:b7:5d:fc:a5:d2:cc:2e:e4:07:ab:aa:f2:d5:6e:
6b:71:bf:64
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:02 2025 by rpki-client