Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33362e302f32342d3234203d3e203232343237.roa
File: 3134392e36322e33362e302f32342d3234203d3e203232343237.roa (raw, json)
Hash identifier: uaOIGwr1CzS12wFmm07puKKVTXTc17FXvuhCjvAa4Yg=
Subject key identifier: 79:D0:A8:B0:C7:7A:0C:F2:F9:3B:72:82:44:9A:28:B9:DF:E3:73:FE
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 68B516B66C21DCF2476F66374352FD0DEDDD12DB
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33362e302f32342d3234203d3e203232343237.roa
Signing time: Fri 27 Dec 2024 11:47:13 +0000
ROA not before: Fri 27 Dec 2024 11:42:13 +0000
ROA not after: Fri 26 Dec 2025 11:47:13 +0000
asID: 22427
IP address blocks: 149.62.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:b5:16:b6:6c:21:dc:f2:47:6f:66:37:43:52:fd:0d:ed:dd:12:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:13 2024 GMT
Not After : Dec 26 11:47:13 2025 GMT
Subject: CN=79D0A8B0C77A0CF2F93B7282449A28B9DFE373FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:d8:c3:9b:ad:15:df:c2:c3:15:48:99:85:
6a:38:54:70:83:a5:28:0a:92:fe:c5:62:5e:ad:f5:
92:9a:fc:62:8f:aa:0b:59:3f:16:94:d4:ad:2a:98:
e3:aa:ee:dc:3a:7d:9f:65:0f:92:86:54:89:18:79:
98:d4:c4:7a:01:30:e2:65:fd:a6:91:ac:6f:f1:0e:
b8:11:85:88:dc:33:b2:ee:7f:4b:32:16:39:3e:7d:
ce:af:51:51:23:f1:85:18:3d:43:28:5c:9c:c7:88:
48:f0:8d:39:aa:a3:21:08:16:e2:4a:bf:ac:8c:f8:
70:a5:59:e4:1a:21:39:e9:58:18:9a:00:24:b5:c7:
12:d0:2d:8f:31:fc:77:12:a8:2b:69:92:af:da:e5:
a6:ad:72:13:a6:d7:4c:57:92:83:d9:32:29:6d:c5:
eb:4c:12:a9:07:08:2e:80:1f:56:9e:61:ff:60:50:
d3:c0:5c:d1:8d:4b:72:18:eb:ba:b1:cf:59:7a:1f:
af:88:6f:55:1b:22:a6:b6:a2:6d:88:62:8f:ad:1f:
fe:31:58:17:72:a2:c4:94:99:b0:36:27:f3:e0:b1:
2d:cd:b9:7c:ad:e2:18:cd:b1:55:6e:bf:ce:3a:a8:
b8:b1:26:07:56:3a:8c:f8:14:38:00:51:4b:9b:44:
3b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D0:A8:B0:C7:7A:0C:F2:F9:3B:72:82:44:9A:28:B9:DF:E3:73:FE
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33362e302f32342d3234203d3e203232343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.36.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:18:35:64:11:7d:b2:b6:ae:6c:5b:a5:91:28:95:34:31:98:
dd:93:12:67:5c:d4:db:ba:62:43:01:d9:e7:77:05:81:16:84:
4d:05:bc:84:c2:84:9e:dc:c1:19:d7:b0:d0:40:0b:5e:8c:1d:
c5:a9:36:ee:67:da:04:93:bb:b3:49:82:88:ad:cf:a5:f0:33:
44:87:fe:ee:95:1e:34:c8:61:23:25:85:2c:cf:c6:17:2c:c5:
95:63:0a:29:fa:59:59:51:f8:88:d5:1e:5e:e6:1c:c3:d9:30:
da:ab:dc:83:ed:a9:1f:b0:e2:30:12:de:6f:af:41:5d:12:0e:
77:a5:3f:00:af:36:e2:d1:e3:71:26:f8:7a:04:02:ea:10:d6:
64:23:84:9c:15:1d:3a:b5:97:fa:60:4c:6e:6b:19:ab:c9:fb:
5d:40:01:56:e2:32:15:80:f6:60:70:1c:41:2d:eb:bf:fd:7c:
90:14:9a:cb:22:5d:4e:f5:51:7e:da:c7:0e:37:d1:c6:49:2f:
77:1f:3e:56:a2:ef:fb:5d:60:4d:32:d9:4a:b1:ab:56:17:21:
83:d7:35:2c:d7:3b:03:fa:7a:65:86:02:32:cb:92:04:cd:55:
06:a9:c6:c2:01:c2:b2:95:a5:0d:9f:37:19:1f:2f:33:76:7c:
71:d8:93:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:30 2025 by rpki-client