Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134372e37382e3132382e302f32342d3234203d3e20313336373837.roa
File: 3134372e37382e3132382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Hz3jiSGOgrHnudCzAbIKue3K2dZctNmt1050un03a1s=
Subject key identifier: D6:5E:A9:63:F5:FA:8F:83:28:8E:B2:AB:56:98:EE:26:D2:80:59:A7
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0C1FE43FCE18400F17216AC41BDE3923C1930C12
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134372e37382e3132382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:23 +0000
ROA not before: Fri 27 Dec 2024 11:42:23 +0000
ROA not after: Fri 26 Dec 2025 11:47:23 +0000
asID: 136787
IP address blocks: 147.78.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:1f:e4:3f:ce:18:40:0f:17:21:6a:c4:1b:de:39:23:c1:93:0c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:23 2024 GMT
Not After : Dec 26 11:47:23 2025 GMT
Subject: CN=D65EA963F5FA8F83288EB2AB5698EE26D28059A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:96:1e:95:a7:4e:31:14:49:1a:ae:87:3b:
0d:3b:02:c7:55:37:98:ef:51:c5:85:dd:ae:08:02:
a3:74:12:70:73:1d:68:60:d9:d4:76:34:20:3d:fc:
b1:da:c1:96:f2:e3:c2:ec:3e:5b:ac:c3:52:cd:6b:
60:f2:25:06:d9:95:a4:7f:18:3e:25:72:c4:f8:63:
af:93:d2:ab:5a:2b:55:79:b6:b7:a4:4d:28:0b:2c:
6c:c9:ad:33:9b:9d:ed:cb:10:f1:4e:5b:24:b1:46:
37:9d:18:aa:16:e4:f5:1c:af:30:c2:4a:9b:ad:62:
7c:82:38:8e:41:dc:af:3b:e9:f7:a9:f0:e2:04:1e:
8e:65:32:e6:73:5d:66:bd:78:4d:ee:f8:20:dd:0f:
a2:25:b0:cf:fc:92:34:9b:06:67:42:11:87:08:2c:
2c:38:fb:df:f4:38:c6:f7:d0:ed:13:d3:fc:c4:47:
c4:7b:1a:de:ea:c7:e8:ec:6e:2c:fe:c9:23:0e:3f:
7e:52:1b:6f:8a:34:e1:61:72:7e:7c:c4:bf:43:39:
85:a2:fc:12:e0:7e:ff:7b:16:d0:8a:17:e4:bd:f2:
a6:19:bf:fd:21:71:21:b4:83:ba:7e:88:20:07:39:
0c:e3:b8:76:0a:cf:4a:4f:93:34:22:c2:a5:57:80:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5E:A9:63:F5:FA:8F:83:28:8E:B2:AB:56:98:EE:26:D2:80:59:A7
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134372e37382e3132382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.128.0/24
Signature Algorithm: sha256WithRSAEncryption
19:bc:f3:16:3f:f4:2e:56:80:ea:df:ab:ca:a0:da:23:29:2a:
42:2c:34:9e:dc:57:4d:a8:09:22:86:a2:94:14:67:aa:02:5e:
a1:9d:53:f1:e6:f9:3d:63:ac:bc:0f:3c:ea:fa:e6:c0:5d:12:
48:13:83:23:9c:ea:b6:7a:b3:25:20:45:1a:55:c9:d0:96:0b:
a8:63:4d:23:91:0c:77:86:dc:ce:2b:ca:c0:ac:90:88:33:f6:
18:3e:09:4b:4f:f1:7f:1a:fe:4e:ca:b0:0b:7b:83:b2:77:c6:
2e:b3:c3:fe:ac:e9:1c:40:cc:2b:f5:6c:f2:9e:27:47:41:5a:
9e:b6:ec:1a:14:b3:4a:01:e9:61:27:65:4d:23:32:5a:3c:76:
f0:1e:c7:8f:40:d2:db:11:93:6e:4e:e4:b7:fa:75:e2:5f:4b:
91:61:c2:a9:7a:8b:f5:f5:c7:aa:a4:1c:dc:d6:11:62:dc:74:
9e:9c:0e:38:9c:8c:a1:20:5e:83:f7:6b:68:e0:a4:4c:fe:85:
6a:1d:30:78:33:85:ea:5c:34:60:7f:f5:df:9d:bf:ad:fd:80:
0e:00:7d:07:ed:91:15:9e:ae:dc:59:7a:25:35:a8:7d:21:da:
f2:e1:0e:b4:8d:9e:de:7d:45:73:c7:6b:32:d2:51:29:68:e8:
80:54:79:9e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:16 2025 by rpki-client