Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37362e302f32342d3234203d3e20313336373837.roa
File: 3137362e3131332e37362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: xmP8mz5GZPhCp5TgUYDG1hsM5GrjesSOikEf2y/bQBY=
Subject key identifier: CF:F8:1E:8B:8C:26:1A:59:8F:BC:35:08:86:A8:D2:8D:E3:79:BF:B6
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 79C65A0BFE8DD70B88D14DEB3F6C368E2596222B
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:27 +0000
ROA not before: Fri 20 Dec 2024 15:18:27 +0000
ROA not after: Fri 19 Dec 2025 15:23:27 +0000
asID: 136787
IP address blocks: 176.113.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c6:5a:0b:fe:8d:d7:0b:88:d1:4d:eb:3f:6c:36:8e:25:96:22:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:27 2024 GMT
Not After : Dec 19 15:23:27 2025 GMT
Subject: CN=CFF81E8B8C261A598FBC350886A8D28DE379BFB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:16:55:3e:5b:00:24:61:ec:63:ef:fa:a3:
8f:b1:a1:17:a1:1c:99:3e:f4:b3:86:93:49:25:61:
49:33:2a:1a:e5:83:3f:51:ab:3d:27:81:51:0c:23:
96:36:c8:0a:f9:0d:af:a3:eb:75:24:c7:1d:83:71:
ca:a4:31:ad:d2:e2:88:75:e3:71:d5:66:34:4b:ad:
2c:c5:48:10:6b:a8:e4:a5:f3:5f:f3:bf:3a:0e:82:
b3:39:f5:f9:cb:d0:f8:01:e6:65:0e:41:7c:56:76:
d0:16:4a:18:2f:b6:68:69:42:3e:67:0e:2e:9d:5c:
55:09:c9:93:9b:42:06:24:42:68:ed:d7:ca:a8:bd:
8a:cf:c0:e0:cf:cf:c1:34:ab:29:5c:18:7b:cb:29:
53:28:5b:e3:79:ad:83:d5:61:d4:de:6f:c2:b5:a3:
07:8c:96:30:e0:e7:32:17:ef:39:b2:23:78:12:ca:
2c:ac:f8:dc:df:37:18:7b:2d:80:fa:09:6c:4f:bb:
de:c6:b6:26:63:16:6a:b5:33:99:e9:16:55:83:dc:
53:4e:b4:08:9d:ac:d2:cf:bd:48:f5:39:aa:f5:97:
64:fb:5c:ec:43:96:51:67:8f:d0:1d:c7:d8:7d:05:
5f:1d:1c:ff:18:7b:7f:a7:70:d5:9a:23:36:d9:ce:
35:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F8:1E:8B:8C:26:1A:59:8F:BC:35:08:86:A8:D2:8D:E3:79:BF:B6
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:2b:16:45:62:51:d4:05:17:c3:cf:51:ff:bc:3f:33:76:8e:
6e:00:43:39:a2:b8:b5:9f:9a:91:0e:8f:2d:b8:05:b7:50:01:
80:62:b1:d4:30:e4:f2:27:bd:91:3f:fd:1b:21:ae:cc:46:38:
9c:61:0e:d1:7e:f5:43:ec:74:44:7e:28:73:6b:53:24:a8:a5:
77:b2:5c:6c:cb:8b:28:b8:4c:a0:e6:b9:9a:83:0d:98:b4:47:
51:83:7c:55:58:c9:82:97:f3:5d:a4:4b:85:4a:3b:67:0c:34:
f7:d1:45:33:0c:b1:fb:34:22:73:b1:d8:65:4d:12:36:a2:a5:
d7:18:3c:b8:ce:b0:f3:33:5c:6c:9d:f7:f8:a0:41:88:37:0b:
d7:13:18:0c:f1:31:62:ff:42:4e:57:38:db:4d:63:e8:ed:86:
55:a9:65:db:e6:24:b6:cf:af:37:87:83:68:01:b2:42:7f:36:
86:d1:0d:b6:d0:e4:28:19:c7:4a:bf:fa:2f:2a:b4:83:fe:80:
c3:d0:35:ea:d6:5a:ec:ed:f2:5d:75:e2:d6:76:d2:f1:75:2f:
3b:ad:66:f3:2f:79:59:72:55:d9:fa:9d:3a:01:19:f5:8e:66:
08:ad:55:0f:98:ea:d6:e0:96:29:0a:ee:4b:5e:a1:19:43:68:
59:a5:ef:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:04:42 2025 by rpki-client