Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134372e37382e3132392e302f32342d3234203d3e20313336373837.roa
File: 3134372e37382e3132392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: rGm2N0vaAAwuA4zPlI/xydQrpK2vq1HY6EG93de2zoo=
Subject key identifier: 02:99:6E:A7:EE:BE:74:81:91:74:0C:87:FD:C5:5E:82:BA:E4:E9:31
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 56F763517C0587686D74EEB7CC582DC34D6ED4B3
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134372e37382e3132392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:26 +0000
ROA not before: Fri 27 Dec 2024 11:42:26 +0000
ROA not after: Fri 26 Dec 2025 11:47:26 +0000
asID: 136787
IP address blocks: 147.78.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:f7:63:51:7c:05:87:68:6d:74:ee:b7:cc:58:2d:c3:4d:6e:d4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:26 2024 GMT
Not After : Dec 26 11:47:26 2025 GMT
Subject: CN=02996EA7EEBE748191740C87FDC55E82BAE4E931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bd:02:77:aa:24:40:25:f4:38:b4:d6:13:f6:
a1:66:59:bf:ef:62:98:3b:52:c0:35:0f:21:d8:43:
a4:5f:f6:1c:e2:a6:13:0a:a0:54:de:9d:28:45:16:
cc:0c:b3:72:0c:ce:8c:ab:f2:7b:5d:17:87:5b:24:
fe:72:6b:ab:fb:3d:2d:dd:d8:49:e8:7d:2b:69:cc:
1a:97:4a:2c:4c:ae:8c:14:70:46:72:dc:38:fe:3c:
04:9d:cf:bc:cf:b2:b2:68:1a:19:df:4a:bb:af:e6:
cc:b8:f4:c0:6c:07:71:37:5c:4c:3c:93:48:e7:47:
11:71:82:55:ed:5b:88:e0:55:a7:db:bf:d1:41:ea:
e4:de:6e:4e:20:f4:c0:08:43:3c:2e:eb:eb:cc:83:
ea:5e:1e:91:0a:3e:99:57:16:87:e5:c7:fd:84:89:
d7:5e:73:86:b7:75:72:d4:61:3d:4e:8f:bc:07:b2:
f6:60:6e:34:13:de:2d:72:b9:7e:c8:e4:6e:5a:25:
0e:b8:33:88:e7:f9:68:3d:15:6f:85:57:0d:51:ee:
61:53:f4:2c:d0:0b:b6:6f:8a:65:a5:bb:cb:ed:0e:
e0:7e:77:48:f0:ed:0e:43:c1:ab:d3:f8:4f:4c:bd:
e2:a7:33:b8:8b:65:6d:90:b8:8f:18:7e:3c:19:d3:
65:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:99:6E:A7:EE:BE:74:81:91:74:0C:87:FD:C5:5E:82:BA:E4:E9:31
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134372e37382e3132392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.129.0/24
Signature Algorithm: sha256WithRSAEncryption
97:9b:c6:f1:1c:58:9a:d2:79:e6:80:c1:92:c9:7c:db:68:ed:
86:bb:27:1f:13:c3:d9:15:ac:8f:45:40:88:d4:1e:83:d3:76:
1c:d7:75:5d:70:af:01:15:5c:cd:ec:b6:74:cf:6e:08:59:cb:
0c:2b:10:89:41:29:02:91:54:7f:96:66:ba:2b:68:a6:3f:71:
09:8a:55:69:bf:c9:28:0a:35:90:7b:70:cd:b0:77:a6:20:1a:
9d:a8:d7:22:b0:b0:36:90:9d:88:de:dd:ee:c2:e5:c1:71:2a:
5d:e2:bc:26:2c:31:ec:69:e1:00:14:0a:ad:c6:4b:8e:52:8c:
d1:cf:c8:77:a5:30:79:42:45:84:26:d9:9c:6d:91:e5:e4:c6:
1e:f3:f3:c9:99:9a:7e:de:0a:6a:92:43:e2:8c:02:4a:8c:15:
46:43:10:e2:0e:7c:84:d5:f1:b2:1f:11:1e:01:c3:c6:07:3a:
33:b3:13:8e:30:b2:a4:82:52:d6:ae:df:2f:b4:32:23:23:a7:
71:ff:42:78:de:9e:df:59:8a:28:04:b9:13:df:0e:50:26:b8:
f4:58:dd:17:95:04:af:da:5a:61:c5:c6:17:09:7b:4b:cd:a9:
ca:9d:ab:38:c3:8c:63:23:8a:c8:8f:89:c2:3d:fd:de:ea:78:
fc:d8:8f:91
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:03 2025 by rpki-client