Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33382e302f32342d3234203d3e20313336373837.roa
File: 3134392e36322e33382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 297VzDZZJq+a0ZKt0RUoiLvB9tB7djGOjCMrV3x84Es=
Subject key identifier: B9:4C:12:90:03:D3:1A:C1:DE:08:7E:7F:F4:36:BB:C9:EA:4C:26:A6
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 53D01A9344A282C1E8E0E64CF01B7C2BB438C5FB
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:36 +0000
ROA not before: Fri 27 Dec 2024 11:42:36 +0000
ROA not after: Fri 26 Dec 2025 11:47:36 +0000
asID: 136787
IP address blocks: 149.62.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d0:1a:93:44:a2:82:c1:e8:e0:e6:4c:f0:1b:7c:2b:b4:38:c5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:36 2024 GMT
Not After : Dec 26 11:47:36 2025 GMT
Subject: CN=B94C129003D31AC1DE087E7FF436BBC9EA4C26A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:1d:89:c8:c6:69:d6:c0:5e:0e:29:3d:79:
16:12:6e:60:e9:c4:44:f6:bc:54:1d:86:e9:dd:1d:
44:51:73:25:48:0e:f9:b8:86:c4:c0:13:22:76:ef:
88:9b:7c:32:78:04:7e:07:e3:e6:4b:04:98:6d:34:
76:25:3a:cf:14:db:4a:68:fc:37:9f:56:46:10:c1:
8f:74:cf:5f:9d:19:82:6d:5f:a2:bb:86:0e:13:16:
9d:73:08:58:b3:c4:af:5a:7a:fa:b5:3a:8e:c4:6f:
80:02:28:49:01:33:cc:ef:08:e8:62:8a:34:b2:02:
bf:22:6d:87:df:30:65:d0:8f:63:87:11:c6:37:da:
8a:84:57:ec:0e:c6:91:8a:ef:7d:f3:d6:3a:1d:5b:
27:9d:93:4a:be:3f:ed:0d:ff:64:fb:9f:77:12:79:
ad:cf:3c:9a:2d:df:fc:ec:f3:c1:05:e1:69:73:fb:
4c:cf:7e:8f:88:3e:b4:83:46:a4:08:da:b1:ce:e2:
3b:8b:69:b2:7e:20:16:35:31:a8:f3:58:1e:ba:de:
cd:00:ba:01:2b:38:68:16:6c:95:36:8f:45:56:ef:
b3:f7:6e:07:af:fe:cb:ec:aa:b0:45:96:db:45:fc:
8e:58:3b:be:2c:42:3f:6e:52:df:78:3b:6b:4d:fa:
aa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4C:12:90:03:D3:1A:C1:DE:08:7E:7F:F4:36:BB:C9:EA:4C:26:A6
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.38.0/24
Signature Algorithm: sha256WithRSAEncryption
de:5a:5e:2f:25:3c:5d:44:8c:fc:ac:a4:76:59:2d:ea:08:e8:
be:37:d5:e9:4c:25:24:e8:bd:df:65:d6:3e:98:2e:4c:ae:95:
99:a2:a8:76:cf:86:b5:81:ed:a3:87:7b:9c:3b:d4:fa:f0:e7:
83:9d:e4:01:e0:11:79:b8:c9:c4:0e:a2:29:1b:50:4d:ca:3a:
b0:8a:19:26:a2:bb:ce:4d:fa:4f:f6:74:fa:d7:0f:29:ca:d2:
47:45:32:23:99:a4:ab:23:37:d6:42:e6:31:ac:48:65:b5:bf:
fc:08:fe:10:48:f3:9e:20:5a:4c:62:b2:db:30:da:d7:4f:8b:
90:f7:39:5e:9e:37:5d:ed:32:0b:87:bd:e3:18:c4:f1:89:82:
18:42:95:d9:bc:2d:f3:f7:2a:c8:8d:48:70:7f:9a:14:3c:16:
c7:5a:9c:4b:be:ca:da:59:5f:21:5b:73:0b:27:11:9f:7c:50:
47:1e:3f:05:22:96:0f:01:77:50:6f:4d:89:34:db:57:03:24:
dd:38:f8:bc:d5:f7:f7:a2:06:8a:ce:29:e4:8d:0d:f7:1c:dd:
9d:c1:dd:7c:2c:b5:94:ae:45:83:8b:f8:89:1c:8a:09:f7:03:
38:25:3e:6b:3d:a5:a8:b7:b0:23:dc:fa:2f:5e:3c:a8:2b:07:
af:b0:3a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:13 2025 by rpki-client