Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33372e302f32342d3234203d3e20313437303439.roa
File: 3136302e3233382e33372e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: aRVjRvvN9+ivcI4A0EbPKY4/3HOMhQ0hMU1XG2hajgE=
Subject key identifier: 1F:2F:D1:2D:B2:1A:78:BF:DB:FA:05:57:C3:C4:24:1C:3F:7A:51:0E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 616BB61A043F5AA8CDE2D94CFF4C30855CE5572E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33372e302f32342d3234203d3e20313437303439.roa
Signing time: Fri 27 Dec 2024 11:47:15 +0000
ROA not before: Fri 27 Dec 2024 11:42:15 +0000
ROA not after: Fri 26 Dec 2025 11:47:15 +0000
asID: 147049
IP address blocks: 160.238.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:6b:b6:1a:04:3f:5a:a8:cd:e2:d9:4c:ff:4c:30:85:5c:e5:57:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:15 2024 GMT
Not After : Dec 26 11:47:15 2025 GMT
Subject: CN=1F2FD12DB21A78BFDBFA0557C3C4241C3F7A510E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0c:73:4a:a2:8d:7e:ee:af:c2:0e:f8:e1:bd:
2b:c3:11:a4:68:55:69:88:08:6c:0a:c8:1d:dc:f1:
56:dc:65:58:e9:9d:2a:fe:d3:2a:fe:ff:8a:56:5e:
f8:0c:72:0c:79:e1:7c:ed:dd:a2:06:04:f0:75:e9:
e5:b9:e7:62:b1:17:02:be:8c:5f:dd:5b:51:c5:38:
98:0a:43:1b:64:29:d5:93:2c:75:c4:b4:9a:f3:91:
27:93:51:83:87:b9:5e:c0:97:fe:67:c7:c9:f1:1a:
b3:7e:e4:71:f7:cd:50:03:19:fa:f1:83:03:b0:20:
75:d1:ff:bb:80:e1:09:17:ce:4a:a0:45:c8:be:ad:
7a:73:00:9d:0d:8e:25:d7:0a:f9:42:b9:29:68:ba:
4e:ac:ca:b7:bd:b3:f8:7c:f5:7f:99:76:e7:70:40:
3c:9c:ac:17:5c:b9:4e:62:48:b0:dc:87:44:cf:a7:
14:ee:57:af:39:cc:46:a2:37:f1:5d:63:ef:9e:27:
14:19:c3:fb:dc:fd:3c:b2:c6:ac:08:31:1d:db:a1:
86:32:b6:fb:d4:7e:db:39:af:34:37:ee:c4:ed:1a:
6d:3c:55:f4:6a:df:22:17:6f:02:29:f9:c9:ee:36:
e8:06:4b:18:14:8f:c2:93:27:f4:e7:1d:f3:2d:22:
8f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2F:D1:2D:B2:1A:78:BF:DB:FA:05:57:C3:C4:24:1C:3F:7A:51:0E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33372e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:23:89:78:d0:4f:90:f9:42:3b:66:7d:69:97:b1:45:6d:1f:
16:28:b6:80:d6:3a:36:bd:cc:47:88:65:7b:50:26:ef:74:5c:
09:5d:7b:73:5c:63:bc:91:0d:7e:cf:86:99:77:18:2e:73:5b:
8a:f8:0a:fb:0c:a1:07:b9:52:31:1b:76:d2:4b:09:21:d1:54:
19:1e:b6:90:bb:3b:24:c8:36:93:42:ef:d0:ce:ac:72:d4:e8:
d7:29:fa:52:1d:14:94:19:fa:0b:28:50:22:b6:ec:c6:1e:f0:
51:53:90:d0:8f:ca:19:ec:62:6a:16:ed:da:93:79:13:a3:f5:
b5:fe:6d:8c:fe:05:12:ca:68:7d:2a:bf:b6:24:55:69:e9:1b:
bb:41:9b:58:de:96:3e:2a:a9:fa:d3:4d:b1:b9:89:2b:d7:75:
bd:52:42:6c:a2:7d:63:28:a7:4f:d8:b1:68:69:42:d2:76:0d:
95:44:0f:2b:a3:4a:7c:e6:33:74:96:7d:0b:6a:70:82:98:ce:
8c:50:e9:e0:ae:aa:a0:a1:63:14:42:50:73:12:c9:fd:78:c3:
34:41:27:50:f2:67:69:3c:ff:39:1c:b8:11:46:a6:d7:cd:1f:
8b:04:28:b1:68:53:b8:d1:dc:11:fc:15:54:8a:be:04:ad:d4:
08:89:4c:81
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:35 2025 by rpki-client