Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33392e302f32342d3332203d3e20313336373837.roa
File: 3136302e3233382e33392e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: 0vlzsSNVl1oD1bWoGdlVKDnRfyKXY6ccUIzRZ12Eqg4=
Subject key identifier: A5:1D:2C:23:65:62:D5:E6:06:5F:CB:F9:C0:65:B9:E5:78:D4:C4:5F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 59FA198964E2D983AD8ED099D148D7997CE5E8BC
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33392e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:15 +0000
ROA not before: Fri 27 Dec 2024 11:42:15 +0000
ROA not after: Fri 26 Dec 2025 11:47:15 +0000
asID: 136787
IP address blocks: 160.238.39.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:fa:19:89:64:e2:d9:83:ad:8e:d0:99:d1:48:d7:99:7c:e5:e8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:15 2024 GMT
Not After : Dec 26 11:47:15 2025 GMT
Subject: CN=A51D2C236562D5E6065FCBF9C065B9E578D4C45F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c6:41:cc:a1:53:11:cd:b5:e5:60:04:57:c1:
b9:d0:55:e2:57:24:12:67:28:1d:95:5f:eb:21:5d:
ab:83:28:62:5e:81:04:2a:e7:71:5d:2a:01:df:7d:
05:d3:b1:bb:0c:7d:6b:7e:f4:0b:1e:29:ae:9a:77:
3b:66:99:42:5d:44:25:38:2b:ae:b1:6c:89:31:c9:
2d:a2:bf:34:ef:48:da:94:8b:bc:e1:05:9b:62:b1:
7f:83:97:20:0c:bf:cf:c7:6b:8f:e2:24:9f:2c:75:
1e:dc:1d:15:31:11:0c:84:63:ea:5f:49:6a:cb:80:
5d:cb:19:6c:3c:15:9a:47:57:97:77:cc:2c:3c:79:
d1:36:9d:07:5a:1e:94:2a:b2:da:01:a3:b3:52:d7:
ed:9c:58:c8:3b:e7:f3:5b:1b:50:c8:d2:26:57:18:
6b:5b:0e:a2:c9:37:4d:98:94:88:a6:b4:65:09:28:
b7:da:c5:d2:70:56:f4:82:e1:a5:6d:20:14:b2:5c:
3a:35:9a:b6:d4:c4:b9:00:65:9c:13:dc:7f:db:4a:
77:a7:dd:91:20:02:44:50:8e:86:5c:00:c3:fa:48:
c4:1e:73:58:43:6d:fe:2f:79:25:c5:72:55:9c:f9:
7a:58:75:18:e2:fa:15:70:60:b0:3b:87:f7:89:e9:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1D:2C:23:65:62:D5:E6:06:5F:CB:F9:C0:65:B9:E5:78:D4:C4:5F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33392e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.39.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:e3:5d:fb:4d:3c:a9:4f:17:2b:62:4b:e4:63:ef:fb:6b:59:
41:9b:a7:35:ae:ba:67:37:76:9b:eb:97:33:31:8c:46:fa:26:
8b:dc:af:e9:a7:76:95:5f:b0:4b:64:b0:02:45:78:bf:20:07:
e3:d1:f6:7d:e4:49:de:0f:c7:1d:82:0e:de:ba:4b:38:20:48:
ca:32:22:75:9e:fd:97:7c:dd:76:b2:c8:ce:ab:65:34:82:e0:
54:d0:d8:af:91:d1:62:23:81:c5:78:45:26:5e:98:4e:e6:31:
2f:f7:2f:33:f8:ea:65:f9:94:68:6b:2f:bb:4b:77:e9:41:13:
7b:b8:27:b3:b0:16:2f:c2:48:0a:47:60:70:7f:7c:3b:b6:35:
c1:98:09:87:e0:59:72:1e:32:c5:11:9f:eb:21:6b:97:6c:53:
81:8f:60:28:e5:83:89:2b:39:e2:87:d9:70:12:df:5a:68:4a:
5b:ca:c3:37:10:b2:b2:09:f4:84:40:da:94:ae:69:99:ac:49:
2e:6d:63:76:06:e3:e8:3c:8a:85:d4:c0:69:ee:d1:c6:c5:c0:
53:86:d1:90:ad:b4:a8:8f:d3:95:44:e5:7a:99:54:9a:ab:ba:
d1:5d:1f:7b:c9:03:6b:be:3d:ff:c3:69:7a:21:2e:81:7d:99:
89:a3:5d:35
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:28 2025 by rpki-client