Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3133302e3138352e3131362e302f32342d3234203d3e203632323430.roa
File: 3133302e3138352e3131362e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: 5NTbEOjb0rG4QIG8ykZEXjB+X+r2lltwOr6Syd5NkiM=
Subject key identifier: C5:46:3A:C9:9A:B6:4D:96:88:AE:BA:82:A2:26:A8:FF:0B:58:DF:79
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 04B93C76F6080515B7D9F7B03490768867B5E90E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3133302e3138352e3131362e302f32342d3234203d3e203632323430.roa
Signing time: Fri 27 Dec 2024 11:47:14 +0000
ROA not before: Fri 27 Dec 2024 11:42:14 +0000
ROA not after: Fri 26 Dec 2025 11:47:14 +0000
asID: 62240
IP address blocks: 130.185.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b9:3c:76:f6:08:05:15:b7:d9:f7:b0:34:90:76:88:67:b5:e9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:14 2024 GMT
Not After : Dec 26 11:47:14 2025 GMT
Subject: CN=C5463AC99AB64D9688AEBA82A226A8FF0B58DF79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:12:b3:f8:27:e9:b4:c5:a4:ae:7f:af:12:
8f:3c:9d:e4:60:53:38:d0:3e:8e:55:5a:01:bc:55:
f8:be:15:bd:0e:b7:c7:2b:71:c4:c4:bb:41:ed:6d:
70:4c:cd:60:15:0a:3a:c0:cd:f6:7f:06:8c:ba:6c:
81:22:95:bf:0b:eb:96:59:00:22:78:12:93:a3:fe:
7e:47:70:18:03:e2:a4:eb:b6:93:e1:51:79:31:f1:
7b:3f:cc:75:71:9e:7f:63:cc:67:8f:0b:b1:67:b9:
0f:21:10:c9:32:0e:80:55:5e:98:ba:f5:5a:ef:d0:
83:77:40:3d:db:7e:6a:1a:d6:fc:fa:11:f3:f0:ba:
b4:9b:8d:2f:89:7e:db:05:2b:ed:cc:84:a7:bc:e3:
8c:7b:80:9a:28:ab:a3:19:b0:82:79:07:78:83:3d:
2e:53:86:7c:cd:93:bc:52:46:9d:af:1f:90:d8:13:
6b:fa:79:0a:e7:de:c5:99:74:a6:d4:3f:38:72:b3:
4a:40:06:08:fc:1d:f0:73:7e:42:ac:f9:49:d0:96:
f1:3f:21:aa:49:52:a2:36:c4:0d:66:73:4f:04:87:
27:cf:7a:5d:df:9b:e3:4a:81:b5:b2:75:c8:eb:22:
e2:0e:c7:1d:65:ca:cd:3b:8b:29:cd:12:25:15:7b:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:46:3A:C9:9A:B6:4D:96:88:AE:BA:82:A2:26:A8:FF:0B:58:DF:79
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3133302e3138352e3131362e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.116.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:93:15:23:e0:25:40:1f:da:53:50:55:ab:ea:d0:ef:93:f4:
5c:81:80:01:87:b9:00:ac:c0:f4:04:0e:1e:44:81:ec:67:92:
96:14:df:c0:7e:a8:eb:b9:f8:c8:2c:d3:d3:6d:e8:e4:d7:b4:
9d:59:25:6f:29:11:9f:b9:0c:10:32:7d:fe:00:1c:74:df:63:
ab:f6:22:3e:2c:ba:8e:1e:44:75:9b:41:8a:a5:1c:74:41:8e:
2f:50:51:4e:15:19:15:84:05:64:02:01:f1:3b:98:1a:10:c3:
13:cf:7d:d1:04:be:89:d4:25:e3:8b:ba:b9:60:0f:e1:13:38:
c7:20:ce:72:1e:5a:22:d4:ee:ae:a8:ae:9e:7d:11:24:25:de:
8e:38:8e:b9:72:3f:49:fa:31:56:1a:3d:b5:1c:37:68:6a:53:
31:16:35:69:fa:27:fe:5c:b0:5e:85:be:22:16:7f:ac:cf:76:
08:e4:a0:90:bb:78:c0:af:04:45:a5:81:9c:8c:fd:7c:06:76:
a4:11:c4:b1:f8:8f:67:d4:fa:c1:d1:8b:88:57:66:17:55:02:
47:30:e1:10:e2:f3:3b:d5:03:f3:b0:42:71:62:8c:cc:58:f1:
29:4b:00:6c:71:80:92:29:6f:d4:e1:42:9d:1f:77:f2:22:a2:
07:bd:9f:ec
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:22:47 2025 by rpki-client