Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36332e302f32342d3234203d3e20313336373837.roa
File: 3130392e3233362e36332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: eSIJG467xPdvZjV4MQdpOPWXruCcNjY0tueXITp5R/Y=
Subject key identifier: 13:8C:F8:06:E4:07:F4:4C:75:50:E3:53:4C:6C:BA:CB:60:89:CC:6D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 026B7AEB1AD21CF573B996073F09725FD5E53921
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:33 +0000
ROA not before: Fri 20 Dec 2024 15:18:33 +0000
ROA not after: Fri 19 Dec 2025 15:23:33 +0000
asID: 136787
IP address blocks: 109.236.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:6b:7a:eb:1a:d2:1c:f5:73:b9:96:07:3f:09:72:5f:d5:e5:39:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:33 2024 GMT
Not After : Dec 19 15:23:33 2025 GMT
Subject: CN=138CF806E407F44C7550E3534C6CBACB6089CC6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:46:22:c2:49:29:2b:55:22:3b:91:38:6f:
aa:05:0a:33:61:99:6b:8d:f0:9d:5e:16:bc:11:64:
44:22:cf:1a:ca:9b:e3:92:00:84:93:4a:f2:31:38:
ee:41:ae:bf:68:98:a5:7a:51:ac:c9:ac:a0:b0:fc:
03:1a:d5:7b:60:32:1b:8c:21:15:49:e0:27:1b:59:
88:a4:d4:ba:f3:8f:a0:33:a7:19:79:65:ea:c0:88:
9b:75:27:d2:e8:d6:ac:99:b4:bf:21:22:1f:db:f6:
9b:66:7b:3a:a1:4a:28:42:be:e9:df:1b:69:b9:09:
0c:43:98:30:ae:48:3d:60:64:af:fc:e5:c3:4f:b9:
5b:76:84:ae:f7:d4:ed:d1:f2:a2:48:f4:18:fd:a5:
56:a3:b6:67:52:27:40:57:24:ff:ab:00:bb:6b:f6:
fd:ac:bc:6a:dc:ea:b8:67:45:b2:16:49:62:a5:65:
15:5c:59:2b:ea:a4:7a:26:6c:d0:48:55:36:c9:76:
57:56:24:13:8f:f5:57:60:4c:86:3d:06:a0:11:b2:
35:00:2d:d2:77:d2:0b:59:50:2c:b3:53:cc:eb:b4:
69:38:bb:87:f8:c8:a8:a0:d3:dc:3d:ae:7e:75:49:
de:9d:54:ad:ac:f3:ce:3c:6e:d8:51:14:1d:95:2c:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:8C:F8:06:E4:07:F4:4C:75:50:E3:53:4C:6C:BA:CB:60:89:CC:6D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.63.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:f9:9c:84:93:c2:d9:2f:a8:14:e1:03:a8:25:c2:ea:87:e3:
75:11:f2:3d:35:51:56:16:df:e6:bf:45:f4:53:2a:df:25:97:
2b:90:91:e8:47:37:ea:46:06:dd:ac:da:59:44:96:68:87:dd:
46:92:f4:17:f6:be:49:8f:d6:e9:b4:29:8f:61:75:69:6b:dd:
a9:e5:7a:45:af:b4:2c:c1:83:eb:8c:aa:cc:c3:20:c0:16:72:
54:4b:12:e8:52:cf:84:64:ac:86:45:50:3c:8c:df:40:5d:53:
56:c4:26:92:2a:1e:e3:40:df:cf:f4:43:41:a6:d6:dd:34:ff:
56:ed:36:eb:43:e9:7e:b7:72:18:01:22:94:4d:34:fd:f9:65:
54:7d:aa:8a:6b:f0:09:ac:99:78:c4:4b:1e:0c:c4:40:e8:f1:
f3:34:a2:a7:26:93:af:20:35:62:8d:1d:d4:86:b7:64:68:93:
32:4a:a0:b6:36:da:a7:ab:73:f5:44:41:78:56:f2:11:b7:3e:
d2:5e:78:5d:27:05:7b:ed:84:6d:82:d1:e8:9f:8d:91:0d:ed:
c8:15:1a:b1:7a:b5:71:71:fa:e9:5c:76:31:93:60:aa:e5:fb:
f9:e9:6a:b9:3f:5e:bc:98:4f:c1:42:06:b5:e9:36:7a:e6:36:
06:7b:ea:47
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:24 2025 by rpki-client