Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134312e39382e3135322e302f32322d3332203d3e203531313637.roa
File: 3134312e39382e3135322e302f32322d3332203d3e203531313637.roa (raw, json)
Hash identifier: yU87onnCA6q+Q+hvisp+DpIWJucD4BDQsixJM8cjSXE=
Subject key identifier: D9:C1:F0:3B:9C:B6:7E:4F:86:A5:CA:7E:1F:F2:89:EB:F5:AD:D6:FC
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 252A69BA4C5CB53CFEAF8CA955979D0DFA3726BD
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134312e39382e3135322e302f32322d3332203d3e203531313637.roa
Signing time: Fri 20 Dec 2024 15:23:38 +0000
ROA not before: Fri 20 Dec 2024 15:18:38 +0000
ROA not after: Fri 19 Dec 2025 15:23:38 +0000
asID: 51167
IP address blocks: 141.98.152.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:2a:69:ba:4c:5c:b5:3c:fe:af:8c:a9:55:97:9d:0d:fa:37:26:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:38 2024 GMT
Not After : Dec 19 15:23:38 2025 GMT
Subject: CN=D9C1F03B9CB67E4F86A5CA7E1FF289EBF5ADD6FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:62:69:b8:b5:1a:67:14:6c:41:b2:9c:18:
54:1e:b1:99:10:9b:7b:18:cf:fc:18:94:f4:4c:6e:
56:b5:a8:2e:49:2f:8b:3f:47:7e:e7:5f:f9:44:06:
5c:f2:c8:68:76:c5:26:f4:3a:9f:cd:3d:2b:3c:a3:
fc:ac:be:f9:12:03:99:74:04:92:ea:69:49:58:29:
5a:2d:ad:90:cb:bf:47:94:9d:2d:37:16:8e:1a:7d:
d1:74:89:a3:ad:b1:37:f6:60:51:ea:99:c3:58:09:
b6:3f:bb:ab:ed:97:53:4d:bc:60:4d:9d:74:14:74:
8d:d5:e7:3b:b9:91:ec:29:6c:f4:55:92:af:bd:14:
91:3b:ae:e9:07:d1:fe:78:82:67:44:05:b1:c5:6c:
6d:33:ca:9e:8f:8a:45:2e:95:7a:16:d5:97:4e:ea:
29:1e:21:3b:48:56:5a:71:4c:a2:bf:34:2c:37:f6:
32:e7:6b:7e:0e:bc:1f:7b:66:e0:c5:29:bd:36:b5:
a6:a2:72:ee:64:87:de:65:d1:b6:c5:32:4f:8b:e6:
13:c0:c8:e6:6e:89:57:8b:5d:ec:cf:65:c5:6d:b7:
e9:fd:43:bb:29:15:d1:c8:bc:61:44:15:7d:7d:b8:
d3:0f:6a:bc:b9:c3:d9:b3:e7:3d:ae:f2:2c:30:37:
7c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C1:F0:3B:9C:B6:7E:4F:86:A5:CA:7E:1F:F2:89:EB:F5:AD:D6:FC
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134312e39382e3135322e302f32322d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.152.0/22
Signature Algorithm: sha256WithRSAEncryption
10:45:f2:96:d2:aa:81:04:26:7d:36:30:b1:14:76:97:68:fb:
a6:c5:f7:83:6e:61:a9:50:c7:6c:fc:dd:c6:4b:a1:be:6a:1f:
a2:7e:0a:9d:96:0f:05:47:fb:ba:c4:6c:86:e6:86:b8:46:f0:
6f:ef:1a:d3:e8:38:67:28:cd:03:b9:4d:9b:6d:44:35:67:44:
37:7e:92:a7:17:85:98:4d:77:ff:28:d3:c4:ce:e7:87:44:4e:
fe:33:ed:9a:97:73:57:b7:d6:c1:c5:73:7a:6e:ed:82:46:2c:
a1:0d:e7:f3:23:6d:7e:af:90:a7:99:24:75:8d:87:be:3a:dd:
d0:ba:35:b0:05:fe:75:f6:a4:ae:91:9b:71:f0:b2:9f:d1:b4:
7c:4e:64:d1:b4:a4:c7:b7:27:b1:00:50:4b:5d:ac:10:8c:85:
5e:ab:16:65:bb:39:77:7b:15:15:76:56:39:2f:0c:b2:60:59:
47:85:3c:4b:09:2d:b5:10:85:81:40:df:a8:77:94:e2:75:ac:
7c:8f:00:d7:04:58:dc:ae:24:51:f8:af:d8:84:c8:c1:e5:7d:
0e:c5:ae:80:8c:53:45:9d:1d:22:a2:bd:26:41:df:5a:ad:a7:
44:84:23:12:97:97:5c:3a:1a:3f:7a:3a:bb:45:09:d6:22:a5:
86:74:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:20:32 2025 by rpki-client