Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33392e302f32342d3234203d3e203437353833.roa
File: 3134392e36322e33392e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: 74+6Q4LY7uRbE/j3r7Ie4CBHDlxdN8bsm3DTQt8x7Gw=
Subject key identifier: 4D:A5:3C:6A:FF:09:29:EB:EB:19:A3:EF:6A:16:18:CC:E9:90:0E:92
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 571CBC00636F35286B5117F4B85DEC8303DC76F1
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33392e302f32342d3234203d3e203437353833.roa
Signing time: Fri 27 Dec 2024 11:47:20 +0000
ROA not before: Fri 27 Dec 2024 11:42:20 +0000
ROA not after: Fri 26 Dec 2025 11:47:20 +0000
asID: 47583
IP address blocks: 149.62.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:1c:bc:00:63:6f:35:28:6b:51:17:f4:b8:5d:ec:83:03:dc:76:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:20 2024 GMT
Not After : Dec 26 11:47:20 2025 GMT
Subject: CN=4DA53C6AFF0929EBEB19A3EF6A1618CCE9900E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ed:72:86:7b:38:22:a0:e6:42:60:b4:83:b3:
9d:34:2b:9e:06:ef:13:e8:4b:47:4c:48:2a:68:4c:
90:31:ab:5f:70:0f:bf:d0:92:d5:bf:71:20:6d:0b:
5b:d0:d4:75:d6:bd:1d:2b:28:93:63:5b:af:df:e5:
9f:d3:92:bf:20:0f:f5:35:a5:4d:76:21:21:b4:d0:
4d:3a:70:da:9b:9b:ae:2c:24:4b:61:46:fc:28:92:
4f:77:49:f4:dd:fa:0e:9d:a5:7c:11:47:87:99:74:
e4:24:99:3a:bd:80:7b:8b:23:96:f8:34:9e:5d:85:
2f:6c:7c:2f:2d:6b:aa:b9:a3:43:3b:a3:71:60:8b:
1d:4b:bb:a7:2d:88:03:0f:e8:14:f9:b0:93:62:ec:
3b:d0:8c:5e:fc:07:2b:ba:de:63:ad:a9:2b:eb:6d:
88:8e:25:e9:71:42:3f:2b:fa:f0:68:43:06:84:f3:
3a:3b:08:69:c1:43:2e:4e:fc:68:65:e6:04:f6:6f:
b8:04:3f:9a:cb:8d:13:3d:78:d6:44:8f:97:0f:6f:
91:1f:40:36:d6:00:7e:03:8d:5b:78:af:f0:11:f7:
e0:3d:7a:a2:a9:1d:5d:5d:76:79:30:6e:f3:5d:d5:
c9:48:a8:1f:b5:69:e0:91:b4:98:68:47:d1:12:36:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A5:3C:6A:FF:09:29:EB:EB:19:A3:EF:6A:16:18:CC:E9:90:0E:92
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134392e36322e33392e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.39.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:ac:c6:80:a4:81:4a:9b:76:ea:20:cb:31:ca:07:1c:f8:2a:
3c:b3:5a:7d:dc:22:4f:df:86:6d:d8:7b:c4:91:6c:8a:5c:fe:
c4:18:2c:ee:5c:20:e0:9c:55:07:46:4a:bb:a8:9c:d3:66:48:
b4:15:1f:ae:a1:45:38:51:4f:c9:78:bb:10:62:e3:16:07:b5:
99:49:b8:1a:7b:f1:77:4a:a2:41:4d:2f:9c:5b:67:5f:45:70:
b4:17:6e:31:bc:b7:a3:be:bf:e7:66:71:f8:40:3f:41:0a:20:
f1:ba:cf:f0:f3:46:01:d4:81:e7:b4:12:b9:2f:0f:8b:dd:48:
40:24:47:4b:60:f7:00:cb:e2:5e:ff:32:bd:7b:c8:4e:1f:34:
9f:0f:59:8c:67:e4:e1:ad:21:eb:5c:8c:28:10:67:2a:94:92:
81:e9:31:b6:44:0e:a4:77:52:bd:8d:7b:23:a0:43:9c:05:92:
d4:1a:a7:10:14:93:3e:45:f7:82:72:b3:d8:ed:22:51:d5:17:
16:3d:6c:b4:41:6b:bc:c2:8f:d8:c8:13:61:5a:62:4c:be:c5:
8b:93:ed:50:21:f5:c5:c8:fb:d3:d5:57:4c:cd:c7:f5:7e:31:
5c:59:b1:17:c7:59:2e:05:a4:46:39:dc:48:33:c7:d5:c8:ec:
db:f8:79:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:53:20 2025 by rpki-client