Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3232372e3234322e302f32342d3234203d3e20313336373837.roa
File: 3137362e3232372e3234322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: gzvtQROu2d6s2JXAZs8/G8e5VHYjOgzpU/v6ccvF0Bo=
Subject key identifier: 6E:B6:BB:A1:A6:6E:DA:26:3E:1E:F8:D3:6C:DD:3C:6F:F9:6F:DB:3A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 022D2AF0F7F6AD9F49585F3F21A1A30D6A535ECC
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3232372e3234322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:38 +0000
ROA not before: Fri 27 Dec 2024 11:42:38 +0000
ROA not after: Fri 26 Dec 2025 11:47:38 +0000
asID: 136787
IP address blocks: 176.227.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:2d:2a:f0:f7:f6:ad:9f:49:58:5f:3f:21:a1:a3:0d:6a:53:5e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:38 2024 GMT
Not After : Dec 26 11:47:38 2025 GMT
Subject: CN=6EB6BBA1A66EDA263E1EF8D36CDD3C6FF96FDB3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f9:f8:ad:cb:f3:4f:68:b8:11:d1:14:14:4f:
1f:04:ab:a0:f9:7e:a0:5b:21:a6:b1:8f:7f:04:d0:
08:56:6f:29:1c:29:89:5b:8b:f4:ab:ed:91:3a:aa:
1c:53:a1:5f:5d:5f:f9:27:f9:60:12:93:2b:57:33:
c9:00:52:58:6c:c4:40:f0:51:73:f0:3f:52:81:d3:
80:a0:d5:8c:03:13:ac:08:60:c9:74:3e:da:2d:c1:
b3:1b:dc:74:66:b0:b0:6d:e1:9a:6e:83:b7:c5:59:
e1:a5:47:05:05:8d:61:5c:27:03:88:39:ad:8a:fa:
71:dc:fa:55:f4:9a:b4:2a:86:2a:9f:0b:f6:39:57:
3f:23:22:1d:5d:f0:cc:6f:1d:6e:b8:d8:42:09:eb:
e9:40:6b:6b:25:d0:bd:a4:c5:c0:ac:bb:c1:d9:c1:
e7:37:33:65:ec:1e:b4:75:36:8f:23:79:13:d1:05:
db:f6:88:29:ec:55:20:12:71:52:2a:50:9a:af:f8:
77:1c:9a:45:ed:3d:97:ca:84:ab:fd:07:91:15:91:
7a:32:8a:20:bc:26:5c:86:21:7a:23:c0:07:08:9e:
6f:9c:51:fa:35:ae:55:83:7a:4e:17:2a:a9:60:b0:
59:99:55:da:2c:3a:44:99:63:5b:3a:b4:ce:ae:5d:
80:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B6:BB:A1:A6:6E:DA:26:3E:1E:F8:D3:6C:DD:3C:6F:F9:6F:DB:3A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3232372e3234322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.227.242.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b5:fd:94:c6:84:60:06:c5:f5:b8:ab:e4:25:6f:85:7c:47:
11:d6:c1:72:c0:e9:e0:fa:ed:35:fb:5e:16:d2:01:df:89:57:
e3:ec:c6:20:e1:32:9b:58:a1:62:d9:63:4e:81:f9:d3:99:ae:
73:a0:83:48:bd:1e:ff:76:c5:45:0b:8a:81:9b:f9:8a:b9:df:
ae:4b:0b:ff:25:7f:89:5e:bd:19:9c:ee:6b:3d:87:cb:1a:30:
c4:14:15:ce:76:00:5a:7d:41:d1:b0:50:90:bf:64:13:7e:dd:
50:f8:41:af:79:8a:15:ef:2b:d4:8e:d0:f1:92:b3:0d:cf:32:
1d:7a:c3:29:b6:63:c6:98:e7:ff:9d:5a:0c:7a:bb:c9:e1:ff:
5f:31:8a:bc:70:40:44:8f:6e:68:dd:6c:95:c6:7a:0e:f2:9c:
c2:00:81:a4:88:be:7f:90:e9:cd:c9:e9:44:ca:fc:ac:19:39:
24:24:e0:68:2d:45:54:2d:94:ab:2a:87:4f:f1:c9:16:79:b6:
42:bc:08:d6:14:45:31:62:44:9c:89:a2:09:68:f4:1e:e8:e9:
e9:54:4c:c9:02:d7:00:b0:07:35:26:08:04:ae:96:9a:65:eb:
30:b6:e9:be:33:76:be:36:15:57:57:23:1a:12:89:1f:ef:59:
6f:d6:c6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:05:19 2025 by rpki-client