Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31362e302f32342d3234203d3e203631333137.roa
File: 3138352e3139332e31362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: g9UoPnEjmMKbYhSl7M5PNlxL4j/UWHhZ3YNR0wTGH1Y=
Subject key identifier: 43:05:2F:0E:6A:AA:AF:93:53:08:18:78:7B:51:E8:97:DA:67:66:FD
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 652442B11371CCB6AE90C57527D2DDC9D0217600
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31362e302f32342d3234203d3e203631333137.roa
Signing time: Fri 20 Dec 2024 15:23:34 +0000
ROA not before: Fri 20 Dec 2024 15:18:34 +0000
ROA not after: Fri 19 Dec 2025 15:23:34 +0000
asID: 61317
IP address blocks: 185.193.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:24:42:b1:13:71:cc:b6:ae:90:c5:75:27:d2:dd:c9:d0:21:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:34 2024 GMT
Not After : Dec 19 15:23:34 2025 GMT
Subject: CN=43052F0E6AAAAF93530818787B51E897DA6766FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:b5:ea:97:b0:d3:40:63:4b:ea:e0:f6:5d:
4b:02:48:72:46:8b:cf:0f:94:ee:a6:39:59:6b:e2:
97:c5:68:c8:de:c4:9b:8c:54:88:c2:be:ea:e9:dc:
91:c9:81:c1:5b:d7:9d:33:36:75:f9:60:fe:27:b1:
53:8e:6a:f4:7d:b5:1e:a6:59:8d:b0:4c:af:b3:11:
6b:6d:1c:61:e5:f9:f2:2b:fa:79:15:e5:5f:21:82:
ea:15:a1:50:f3:51:f1:c8:1f:99:97:20:24:42:3b:
ec:a4:18:b8:d5:1b:37:fd:71:cf:15:09:55:91:c3:
cc:8c:89:07:09:39:36:9c:23:65:ee:fc:ef:7c:0f:
37:3e:83:9a:e3:e3:64:1a:b1:c7:57:74:a6:01:93:
5c:d4:2a:48:72:77:5e:04:12:16:18:01:0b:48:79:
ed:4d:38:00:8d:98:62:e3:ee:29:ef:4e:73:fa:31:
83:94:39:30:0a:2c:d9:41:1d:fb:ef:20:86:60:35:
84:88:2f:ed:47:a6:ea:ad:45:68:36:27:ea:03:6e:
c4:c7:ad:b5:b4:ec:7e:c1:4c:e9:55:05:8a:bd:4d:
80:3c:b0:da:30:0f:6e:97:5f:1b:58:84:6c:25:e3:
29:cc:07:cf:b3:55:43:d2:33:f4:f1:b4:66:2d:05:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:05:2F:0E:6A:AA:AF:93:53:08:18:78:7B:51:E8:97:DA:67:66:FD
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31362e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.16.0/24
Signature Algorithm: sha256WithRSAEncryption
40:45:f0:03:d6:45:b0:5a:5e:94:d5:64:d9:22:17:a5:06:1f:
73:cc:b1:11:5d:f9:65:04:46:f0:62:f8:d2:f6:d2:c2:39:cd:
c1:e9:60:51:80:e6:24:9d:c0:60:83:68:5f:6e:af:29:ba:f2:
90:c6:fc:c0:d9:22:0b:72:9c:40:a7:fa:f9:99:d7:73:3e:c8:
8d:6f:a0:56:d9:39:91:6c:69:58:4e:60:ca:ba:61:6c:88:e4:
a2:a1:3d:d7:cb:4e:ca:7d:b1:a0:51:00:18:3c:02:7f:51:f7:
27:d6:cd:a6:d7:97:bb:74:e3:bb:79:fc:45:e8:4b:e3:63:ca:
68:50:62:31:25:77:e0:a1:05:c4:ec:fe:be:dc:a6:5e:1d:83:
8d:8f:3a:89:c4:49:55:6a:81:6d:14:c6:c0:24:b4:3d:31:31:
24:6a:a6:70:e4:83:5a:a5:ea:9e:53:57:9f:63:39:4a:65:b2:
66:0c:e0:e5:08:95:58:45:ba:3b:e8:aa:e8:ab:b9:aa:4b:ac:
39:3b:ac:0b:81:dd:b0:d0:87:fa:ba:41:8b:fd:73:d2:8e:ca:
23:09:d0:b4:b9:1b:e6:82:51:2e:ea:26:49:ea:72:1a:f7:c8:
5e:82:ba:15:97:c3:ee:8e:79:d9:0a:39:29:a6:a6:50:bb:fe:
c8:ef:d4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:05:20 2025 by rpki-client