Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37372e302f32342d3234203d3e20313336373837.roa
File: 3137362e3131332e37372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: cw5XLq2Cj6+v+w1AgIdv3uFZ+r5v9JRPjEzwV2si2Qk=
Subject key identifier: 2D:E3:3B:2E:48:8B:F9:32:ED:41:4B:E0:A6:64:04:57:D2:8C:E7:F8
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6D4299F96448A666673276443F1B0F7B73D44846
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:39 +0000
ROA not before: Fri 20 Dec 2024 15:18:39 +0000
ROA not after: Fri 19 Dec 2025 15:23:39 +0000
asID: 136787
IP address blocks: 176.113.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:42:99:f9:64:48:a6:66:67:32:76:44:3f:1b:0f:7b:73:d4:48:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:39 2024 GMT
Not After : Dec 19 15:23:39 2025 GMT
Subject: CN=2DE33B2E488BF932ED414BE0A6640457D28CE7F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ea:98:60:cd:84:b3:6a:a7:1c:b3:28:01:83:
ff:e4:f8:ae:a7:37:e3:a7:7e:a7:78:3f:11:84:24:
f1:71:b5:30:27:e3:97:09:70:2f:14:69:4e:a7:52:
f3:96:b4:bd:31:4f:41:20:fe:6e:38:a7:1a:5a:f0:
6c:da:d2:3a:e9:90:ff:13:2a:73:08:f8:7e:54:ba:
3c:39:3e:ea:fc:4c:7d:95:e0:e0:bc:2f:14:a9:a9:
ee:be:aa:32:3d:a7:b1:5d:0f:a4:48:35:ad:8f:6e:
59:c3:63:d5:0f:a0:a5:f7:01:35:c8:6b:ab:f1:7e:
1b:fd:51:45:46:25:43:c9:a2:d2:89:d7:28:3c:e0:
13:5d:ae:78:fe:ef:24:be:d5:61:0b:0c:72:4f:f1:
cb:f7:62:43:d4:ff:3c:36:b8:50:3e:ff:df:5f:cc:
a9:c4:e8:27:a1:76:91:b3:6f:00:64:2e:e5:7e:64:
3c:6e:9e:a5:c5:cf:c4:ff:1d:b2:67:6d:d9:91:2f:
3b:e6:42:1f:87:d6:92:38:97:f3:aa:27:c0:6e:11:
b2:d7:ce:e4:0c:25:4e:81:56:45:1d:6b:8d:b3:22:
94:cb:cf:a0:95:90:09:25:c8:17:49:1e:8a:f0:cc:
c2:b8:d4:cf:ea:aa:90:3b:33:33:4f:92:2c:bb:93:
5f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E3:3B:2E:48:8B:F9:32:ED:41:4B:E0:A6:64:04:57:D2:8C:E7:F8
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.77.0/24
Signature Algorithm: sha256WithRSAEncryption
51:6e:05:5b:3d:1d:67:57:d2:94:41:04:f9:d8:a4:d4:ba:66:
6e:8d:56:e4:99:9b:78:43:4a:60:a0:0b:e0:cb:5d:31:0e:90:
70:a5:67:65:de:2e:02:f9:a6:9d:dc:c6:06:ed:28:cf:53:45:
57:2e:46:f5:93:53:85:61:21:79:c8:24:2d:3c:e2:d7:10:2c:
80:71:b3:9b:6a:e7:ac:1b:82:3c:43:29:15:ad:b4:8c:6e:98:
b6:88:1b:30:ab:f3:cd:b0:1e:73:58:37:0e:c0:93:3f:d5:09:
9a:df:cb:78:47:f5:8b:46:4d:84:9a:7a:a7:52:fa:51:6b:24:
4f:22:c8:19:47:4c:43:52:ff:5a:0d:16:a0:cb:66:5a:fd:78:
aa:ad:bb:a1:f2:9c:e1:c5:a0:b3:f0:78:aa:30:11:89:22:2a:
bc:5c:6f:ec:89:82:34:61:28:ee:5e:f4:5e:c3:5b:de:75:00:
9d:fe:0a:cb:cd:e6:7a:30:3e:3c:ab:ba:ba:87:95:0d:8b:66:
00:b4:95:c5:d6:38:68:6c:a3:1a:f3:42:88:c8:88:41:cf:84:
d7:bc:33:d5:c7:ca:23:bb:3c:56:12:02:25:c4:46:dd:de:62:
89:74:76:97:c0:d6:a4:ba:fc:9f:3c:f2:f6:e2:6a:a5:06:a1:
ca:0c:78:ca
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUbUKZ+WRIpmZnMnZEPxsPe3PUSEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjAxNTE4MzlaFw0yNTEyMTkxNTIzMzlaMDMxMTAvBgNV
BAMTKDJERTMzQjJFNDg4QkY5MzJFRDQxNEJFMEE2NjQwNDU3RDI4Q0U3RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn6phgzYSzaqccsygBg//k+K6n
N+Onfqd4PxGEJPFxtTAn45cJcC8UaU6nUvOWtL0xT0Eg/m44pxpa8Gza0jrpkP8T
KnMI+H5Uujw5Pur8TH2V4OC8LxSpqe6+qjI9p7FdD6RINa2PblnDY9UPoKX3ATXI
a6vxfhv9UUVGJUPJotKJ1yg84BNdrnj+7yS+1WELDHJP8cv3YkPU/zw2uFA+/99f
zKnE6CehdpGzbwBkLuV+ZDxunqXFz8T/HbJnbdmRLzvmQh+H1pI4l/OqJ8BuEbLX
zuQMJU6BVkUda42zIpTLz6CVkAklyBdJHorwzMK41M/qqpA7MzNPkiy7k1+HAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQULeM7LkiL+TLtQUvgpmQEV9KM5/gwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM3MzYyZTMxMzEz
MzJlMzczNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEALBxTTANBgkqhkiG9w0BAQsFAAOCAQEAUW4FWz0dZ1fSlEEE+dik1Lpm
bo1W5JmbeENKYKAL4MtdMQ6QcKVnZd4uAvmmndzGBu0oz1NFVy5G9ZNThWEhecgk
LTzi1xAsgHGzm2rnrBuCPEMpFa20jG6YtogbMKvzzbAec1g3DsCTP9UJmt/LeEf1
i0ZNhJp6p1L6UWskTyLIGUdMQ1L/Wg0WoMtmWv14qq27ofKc4cWgs/B4qjARiSIq
vFxv7ImCNGEo7l70XsNb3nUAnf4Ky83mejA+PKu6uoeVDYtmALSVxdY4aGyjGvNC
iMiIQc+E17wz1cfKI7s8VhICJcRG3d5iiXR2l8DWpLr8nzzy9uJqpQahygx4yg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:56:42 2025 by rpki-client