Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33342e302f32342d3332203d3e203531313637.roa
File: 3137382e3231322e33342e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 62pd8uNEYF22NaY76QutXO5xh+TfABWEbehsBbUShXw=
Subject key identifier: 1E:E6:70:A6:F9:66:BC:A6:47:21:55:CE:03:60:50:4A:28:C2:E9:42
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 31A1E8A8A1DF50159415B4DE0AC060CB4FB96AE2
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33342e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Dec 2024 15:23:34 +0000
ROA not before: Fri 20 Dec 2024 15:18:34 +0000
ROA not after: Fri 19 Dec 2025 15:23:34 +0000
asID: 51167
IP address blocks: 178.212.34.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a1:e8:a8:a1:df:50:15:94:15:b4:de:0a:c0:60:cb:4f:b9:6a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:34 2024 GMT
Not After : Dec 19 15:23:34 2025 GMT
Subject: CN=1EE670A6F966BCA6472155CE0360504A28C2E942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:61:d4:48:88:0b:f1:d4:b4:29:93:29:b7:
f9:ab:3a:3c:2d:57:32:49:03:f7:a9:93:e8:c9:38:
b4:46:81:50:0d:82:a5:cf:46:bb:30:32:6f:1b:4d:
86:52:94:50:dd:49:46:1e:5b:af:b8:6b:46:08:8d:
1e:25:11:14:26:ae:92:d7:4a:67:0c:16:0d:c7:87:
50:29:cc:80:91:e1:32:c5:79:a1:4d:6f:6c:ca:71:
d8:8d:33:f4:2e:71:81:44:3b:c5:ec:c9:7b:5f:56:
48:11:6e:1e:e8:19:11:5f:ea:a0:3e:8f:47:a9:ca:
4a:ee:fd:e4:bf:5f:05:30:3c:66:2a:ed:a3:e3:2e:
97:8b:21:20:ce:bf:82:1b:90:e8:dd:d0:bd:0c:ec:
d0:a4:02:e4:64:3e:27:f5:4f:97:d1:dc:5e:f7:5b:
a9:57:9d:e0:cf:c1:54:b9:e9:9e:9b:38:82:4f:0a:
a7:47:82:57:b8:24:44:29:2c:ce:3e:58:9a:59:a2:
de:49:64:64:05:11:e6:24:e1:5f:7f:be:9c:6e:ea:
c2:72:8e:f2:09:83:33:a8:92:00:e2:8e:55:84:77:
ff:be:dd:a2:f6:e3:b2:c8:94:49:9a:34:2c:ed:bd:
cb:e6:a8:e4:1b:f5:16:d9:c2:6b:28:32:95:8f:70:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E6:70:A6:F9:66:BC:A6:47:21:55:CE:03:60:50:4A:28:C2:E9:42
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137382e3231322e33342e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.34.0/24
Signature Algorithm: sha256WithRSAEncryption
13:de:d8:34:80:68:43:0d:36:60:54:86:12:ef:12:99:88:a1:
3b:3d:1f:01:e9:d7:46:bc:b9:8b:70:bf:b4:de:b5:6d:fe:9b:
ca:df:02:f8:41:9d:68:45:32:90:cd:62:31:70:00:79:d1:d4:
62:3c:63:37:eb:a6:32:b6:27:bf:bf:7d:55:40:76:e3:0d:19:
a6:25:c0:55:73:ef:8e:df:36:8b:31:07:49:75:a5:41:4f:16:
12:15:50:8c:78:79:ca:a3:b3:d5:dc:bb:c1:22:be:7e:71:f0:
4b:dd:84:c4:57:51:92:95:5d:4e:37:6f:bb:b4:be:fd:4d:26:
17:eb:74:70:4b:1b:5d:c8:88:67:a8:bd:fd:c4:22:7a:a6:c6:
46:27:8d:ba:97:f3:92:1d:f7:ea:5d:69:0b:4e:c1:7c:63:3a:
0f:5a:6f:75:f1:62:db:57:3a:69:ad:a7:04:d8:8f:a4:24:ed:
cf:b4:d6:15:1e:03:d1:f0:dd:22:86:70:c8:71:4f:5d:26:30:
3b:37:d7:a4:15:dd:38:45:16:f2:ee:7b:3d:17:55:5a:c7:07:
8c:04:f9:9f:0c:5e:67:0c:c9:e8:bb:d9:40:ae:d8:15:82:b1:
b1:a7:32:18:ab:84:23:65:a0:97:17:f7:a9:02:ca:a8:2b:a5:
b3:fc:54:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:05:58 2025 by rpki-client