Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3232372e3234312e302f32342d3234203d3e20323039383534.roa
File: 3137362e3232372e3234312e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: r+FSEPXfQtetaCAt5PD2Jtk8VBjhX8UVzP/m9yOhP5I=
Subject key identifier: C4:55:8E:23:7C:EE:CC:52:6A:DB:F9:F3:E9:43:4E:74:DB:16:19:2C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 028058D62FE5F05EFC4C52B46AA259465D00D6F8
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3232372e3234312e302f32342d3234203d3e20323039383534.roa
Signing time: Fri 27 Dec 2024 11:47:19 +0000
ROA not before: Fri 27 Dec 2024 11:42:19 +0000
ROA not after: Fri 26 Dec 2025 11:47:19 +0000
asID: 209854
IP address blocks: 176.227.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:80:58:d6:2f:e5:f0:5e:fc:4c:52:b4:6a:a2:59:46:5d:00:d6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:19 2024 GMT
Not After : Dec 26 11:47:19 2025 GMT
Subject: CN=C4558E237CEECC526ADBF9F3E9434E74DB16192C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:74:f9:d1:21:0d:03:76:50:54:e0:4e:a1:
eb:08:59:ab:6b:5e:ec:1f:f8:ca:57:09:49:58:9b:
33:b8:ce:b8:9e:7f:ae:a2:49:a8:33:ee:29:55:06:
63:b6:59:95:ec:24:ff:4e:6b:2a:da:80:29:69:45:
28:3b:d0:bb:72:b6:4c:59:32:ce:55:8e:d3:db:f9:
bb:b4:73:78:47:0a:90:17:07:85:42:0b:65:ce:71:
8e:ba:fd:05:fd:75:20:89:4e:e5:0c:e1:57:4a:44:
77:ff:97:b6:54:73:c0:21:90:5c:6f:95:81:f5:e3:
7a:27:95:29:c4:51:81:b5:35:9f:7c:49:26:bc:7f:
9b:fa:a7:72:da:ce:45:cf:7b:19:e8:21:f6:9c:63:
f0:5d:d6:19:a1:05:9c:6e:33:f4:33:91:43:38:a8:
a4:56:00:cb:74:41:4e:8e:dc:e9:ad:bd:0b:37:33:
f5:9a:3f:64:15:a9:c6:64:76:dc:c6:bd:cb:13:08:
9a:16:d2:1b:c7:51:58:38:43:2f:cc:4d:8a:a3:1c:
c6:e5:9e:ba:66:5b:6b:3b:58:6d:91:6d:92:7d:c5:
f7:8a:8a:5e:ba:07:88:c8:a9:8c:90:1b:b2:b2:f1:
df:62:b9:f0:1c:3e:12:d0:a7:91:c3:56:c3:5b:ef:
4d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:55:8E:23:7C:EE:CC:52:6A:DB:F9:F3:E9:43:4E:74:DB:16:19:2C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3232372e3234312e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.227.241.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:b4:aa:b5:d8:a3:62:63:62:33:83:33:7b:ee:bc:e6:32:69:
7e:e2:2c:55:89:f6:11:be:8c:dd:c8:e6:3b:68:40:d1:14:08:
b4:74:b3:9c:5c:a6:07:75:ba:73:4a:83:71:ae:9f:fb:be:ed:
18:d4:33:b5:65:33:2a:aa:0e:5d:23:a6:c4:e9:35:29:46:c5:
be:c2:a1:03:49:e2:d5:a9:6c:a8:11:20:a9:1a:56:3c:4f:94:
c0:f1:37:44:72:c8:ca:6b:27:00:98:eb:10:9d:ab:09:5f:e8:
7d:da:ca:d6:da:95:bc:66:0a:8c:ff:7f:a1:86:61:7e:cd:aa:
f3:9c:34:a8:88:7a:ee:94:ba:06:f6:2f:d9:c6:8d:06:0e:8a:
a8:06:ec:54:5a:da:fe:7f:79:02:b8:ef:b1:a8:ba:a6:e8:10:
f3:31:46:d5:f2:96:d1:29:bb:c4:1e:cf:90:11:58:f5:7b:c4:
80:4a:06:53:76:f6:61:ed:6c:38:22:dc:3a:59:1b:ec:d0:1f:
6c:88:90:91:47:b7:9e:88:e0:9f:f5:67:34:3e:48:3a:f0:32:
9e:2d:0b:54:4b:13:42:38:6a:c8:b4:1f:fe:5a:40:a7:37:6c:
76:18:91:62:27:43:3c:24:8b:3a:0e:fe:67:30:ae:e0:28:e9:
7c:29:4f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:40:11 2025 by rpki-client