Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e34302e302f32312d3234203d3e203437353833.roa
File: 3136372e38382e34302e302f32312d3234203d3e203437353833.roa (raw, json)
Hash identifier: 37fZ2xEG6MZe6E1X3pz/IoxL0o0ENCVymaqoDlGn6sQ=
Subject key identifier: B2:DE:65:50:31:74:9D:4B:E1:94:CF:A9:6E:1A:6B:9E:EB:B4:BF:4B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1D6E4D27011E1AA1DA202D968947E21EC36C2244
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e34302e302f32312d3234203d3e203437353833.roa
Signing time: Wed 27 Nov 2024 14:39:31 +0000
ROA not before: Wed 27 Nov 2024 14:34:31 +0000
ROA not after: Wed 26 Nov 2025 14:39:31 +0000
asID: 47583
IP address blocks: 167.88.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:6e:4d:27:01:1e:1a:a1:da:20:2d:96:89:47:e2:1e:c3:6c:22:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 27 14:34:31 2024 GMT
Not After : Nov 26 14:39:31 2025 GMT
Subject: CN=B2DE655031749D4BE194CFA96E1A6B9EEBB4BF4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:22:13:d9:fa:21:7f:42:8a:a6:db:ca:a7:
6f:37:21:24:6d:52:3f:70:4d:c9:b4:a1:d1:a0:eb:
ae:85:20:22:fb:e8:73:6b:80:90:95:24:0f:81:8b:
f4:31:74:7a:2a:0c:1f:01:82:e3:c6:a3:0a:10:af:
61:5a:de:74:63:37:12:e0:82:d8:26:76:44:06:ea:
f6:96:47:35:46:59:a2:b1:17:11:31:1c:d7:c6:bd:
d4:3b:ee:30:6a:20:08:b6:7f:08:71:9d:90:c1:ce:
1a:be:bc:4a:23:3a:f0:f8:ed:24:e8:8b:66:03:81:
9c:67:8f:7d:30:64:3a:5b:7f:a3:86:6b:eb:52:58:
4a:61:2d:7f:a4:03:1c:7f:46:c6:49:d2:fd:d2:3c:
fe:a9:db:e4:9a:43:45:96:e8:80:f8:b7:1c:56:b0:
8b:b7:fc:6c:14:f2:72:9e:86:b0:31:07:e8:58:de:
1a:d6:e4:b2:85:30:19:ad:01:ad:46:28:0f:6e:57:
05:19:59:5e:ac:fd:97:49:a8:e1:6d:c2:c0:a6:50:
13:ef:c5:48:a2:96:b7:3c:5a:e5:c5:81:0c:eb:3a:
46:43:3d:45:6e:b2:9b:64:3b:64:a1:8b:90:a1:fe:
a0:d0:83:81:e9:45:22:06:20:7e:45:6e:38:31:6c:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DE:65:50:31:74:9D:4B:E1:94:CF:A9:6E:1A:6B:9E:EB:B4:BF:4B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e34302e302f32312d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.88.40.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:b4:b9:59:22:db:0b:60:fb:cf:32:d7:98:85:60:eb:b0:54:
3d:bd:02:41:49:12:a6:b3:9f:f8:bd:51:ee:48:de:c5:f2:8c:
d4:de:8e:d1:87:72:bc:63:62:3e:b8:6c:a5:c3:26:f6:06:b7:
7b:6c:05:71:ac:b6:f7:62:c4:94:31:54:34:0d:e2:e8:79:c5:
82:53:df:97:97:4b:a6:ff:d9:fc:8d:f6:d3:d7:d8:16:f0:a2:
d1:68:58:f5:2c:cc:f3:31:52:33:57:c1:1b:38:7c:d4:ea:f9:
23:f9:76:43:b6:da:22:dc:c6:5a:b7:55:10:2d:72:64:1f:7a:
71:b4:2c:52:20:ac:7c:03:a8:3b:cd:d8:cb:dc:99:d9:8b:3a:
03:13:a7:36:30:f9:91:58:8e:7c:e7:46:cc:c8:cf:38:f8:ae:
b2:87:df:7e:58:a5:36:69:0e:dd:76:1a:38:3e:b6:f1:25:46:
4d:a6:b2:b1:bd:a6:47:a0:f2:d8:1e:69:2b:53:68:47:05:df:
af:d2:ff:a2:4d:d4:e0:40:76:f0:06:ac:4e:42:28:1e:32:cf:
b8:76:23:03:e4:46:5d:9e:19:e0:6a:23:1e:20:0f:75:ca:ff:
37:58:a7:1b:92:4c:c8:91:1c:5f:d0:14:80:6a:84:96:f5:e8:
4e:4d:fa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:58 2025 by rpki-client