Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33372e302f32342d3234203d3e203437353833.roa
File: 3134392e36322e33372e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: uR/Sad/MAZ8RB5SxwCRCHd/XQbvwOIWSK6yro8ThUyU=
Subject key identifier: A2:15:28:22:E6:ED:D3:DF:AE:7D:B6:01:84:B7:A0:FB:9E:89:E1:08
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 656E55780E05A3DD3D83D37BB1CFAD1A9F3CF083
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33372e302f32342d3234203d3e203437353833.roa
Signing time: Fri 27 Dec 2024 11:47:18 +0000
ROA not before: Fri 27 Dec 2024 11:42:18 +0000
ROA not after: Fri 26 Dec 2025 11:47:18 +0000
asID: 47583
IP address blocks: 149.62.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:6e:55:78:0e:05:a3:dd:3d:83:d3:7b:b1:cf:ad:1a:9f:3c:f0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:18 2024 GMT
Not After : Dec 26 11:47:18 2025 GMT
Subject: CN=A2152822E6EDD3DFAE7DB60184B7A0FB9E89E108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d1:b2:73:7d:ce:02:a9:d4:30:53:01:2f:7d:
e3:9c:37:fa:85:93:8a:88:c2:ef:0e:8c:da:51:88:
20:10:f2:ee:f7:64:34:5a:e8:71:1a:9f:da:36:c4:
69:91:40:68:40:63:84:e2:75:08:ef:b4:3a:c7:ef:
30:6d:14:37:91:bd:46:b7:fc:46:1d:a7:42:c4:1b:
e4:f8:f2:fc:3e:8f:40:be:13:a7:c4:70:b1:6c:ba:
6c:cd:86:9f:75:fa:51:f8:f0:33:8e:2f:e0:74:cb:
44:da:49:01:ef:59:c4:1f:fd:9d:c8:a9:48:21:cf:
dd:cd:e9:fe:60:7e:6a:ab:80:15:5e:6b:5d:11:07:
46:d2:eb:7a:a0:42:56:1d:34:1c:8e:45:5b:97:d5:
d5:b3:9f:6c:e9:43:5f:9c:e6:1b:cf:bc:46:a9:ba:
05:a4:5e:10:50:7e:2c:be:50:17:ba:be:4c:37:8d:
29:67:2f:d1:6f:6f:d5:ba:e3:98:9a:bd:23:44:df:
fb:0d:0c:a5:d5:15:09:82:7f:e2:58:cd:2e:18:fa:
47:b2:c0:ab:71:2b:7f:da:d8:c2:53:cc:36:52:49:
22:c9:4b:18:8b:d3:e9:9b:9c:36:06:30:d1:ae:e7:
4e:ba:c9:f8:d3:e6:c3:92:c6:c5:4e:d7:a8:b1:5d:
bf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:15:28:22:E6:ED:D3:DF:AE:7D:B6:01:84:B7:A0:FB:9E:89:E1:08
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33372e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.37.0/24
Signature Algorithm: sha256WithRSAEncryption
92:fe:b4:c8:97:0f:41:49:b7:de:8d:82:ff:94:ed:f9:b0:ef:
a5:4b:fa:3c:32:2e:52:a4:81:e9:9f:8b:70:e0:11:69:eb:99:
94:45:0d:04:75:6c:51:73:32:86:48:78:22:3e:64:dc:f8:41:
db:fa:ac:f7:38:8b:0d:4f:d4:ac:c9:38:81:3c:d6:ab:25:8e:
90:f0:63:c9:a9:bc:f8:bb:86:59:99:ab:d7:6b:bb:cb:10:9f:
35:28:a5:aa:fc:be:16:32:24:3e:bc:e3:8d:0f:1b:03:e5:a8:
3d:d5:09:cb:c7:a3:af:0b:28:a4:83:6d:2f:8a:19:0b:e8:cc:
01:d4:55:95:e4:f8:b9:9b:89:fd:a1:d1:03:7c:c4:7c:f2:0f:
e1:e8:a5:76:d3:77:e5:11:e6:d8:19:3b:b6:dd:48:e1:2e:d1:
80:19:9a:fa:38:0c:1d:0f:b0:a8:d6:b9:86:1f:1d:1b:fd:84:
15:22:58:1c:16:44:b0:01:b2:e9:da:0c:49:6c:f7:a1:05:9e:
ab:1d:a9:19:ab:19:80:42:10:f9:e9:dd:59:83:c5:52:dc:49:
bf:bc:63:aa:a3:3f:9b:ec:22:c5:9e:b3:19:4a:89:52:f5:e8:
bf:7a:0f:11:fd:67:f0:e4:d4:d8:7d:92:c9:70:ea:59:e1:87:
b1:14:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:33:33 2025 by rpki-client