Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e322e302f32342d3234203d3e20313336373837.roa
File: 3138352e3139362e322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: zTCL9vU/e6lzeWkdbjq6vV47lNedm3XAIKeM/9LI8PU=
Subject key identifier: 52:22:08:79:47:FD:F6:3A:2E:34:E4:7A:36:BB:19:8B:20:4C:B1:99
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1A23D9CBDFB02D9CBD73CEB865F56B2C38E393F3
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:36 +0000
ROA not before: Fri 27 Dec 2024 11:42:36 +0000
ROA not after: Fri 26 Dec 2025 11:47:36 +0000
asID: 136787
IP address blocks: 185.196.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:23:d9:cb:df:b0:2d:9c:bd:73:ce:b8:65:f5:6b:2c:38:e3:93:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:36 2024 GMT
Not After : Dec 26 11:47:36 2025 GMT
Subject: CN=5222087947FDF63A2E34E47A36BB198B204CB199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:73:7c:f7:b4:69:72:d0:2e:b0:53:e5:30:
38:c0:c9:05:8e:5d:38:73:28:1e:55:87:f8:d0:7e:
24:32:73:01:a0:bb:76:3a:7b:d3:4e:79:09:37:23:
94:7c:ab:28:6f:ab:fe:7e:73:4b:98:e7:fb:45:40:
38:ed:ba:31:5b:45:12:82:40:f8:ae:ff:34:83:1c:
12:5c:69:af:93:f9:29:1f:99:30:9f:7c:18:a2:4d:
d9:c0:f0:64:9a:1e:4e:8b:26:83:35:12:91:86:71:
af:ff:a4:89:7c:f3:16:4d:82:59:30:d3:63:9b:33:
0c:62:0b:fe:a5:4e:c3:ca:01:17:f7:29:34:ad:6d:
b0:cb:c2:ef:21:d8:8a:70:e3:7b:c2:e1:c2:0d:65:
31:01:de:6f:30:9a:71:d5:04:67:67:bc:b7:9e:3f:
af:b3:b2:09:a7:59:7e:08:60:e2:bd:6b:78:81:36:
a8:2c:ef:64:56:55:f0:20:96:f6:2d:bb:3a:6c:a8:
63:6c:d8:0e:f3:f9:18:ba:42:2f:0a:6a:d7:b8:dc:
36:69:2b:e8:74:61:5b:bc:9e:1c:a5:26:f0:9f:f0:
b5:41:7a:54:c9:7d:04:fc:a7:64:bc:ac:c9:f0:f4:
8c:3f:23:cc:8d:7f:17:77:7c:b2:35:51:d0:82:64:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:22:08:79:47:FD:F6:3A:2E:34:E4:7A:36:BB:19:8B:20:4C:B1:99
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.2.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c6:34:62:50:35:20:7e:a7:f2:10:8a:f2:9b:c1:9e:06:53:
68:35:32:b1:7e:a3:c2:f6:c3:44:62:4f:64:a7:ac:8c:34:d2:
4e:89:cd:be:29:1c:e8:b5:5a:9b:26:3f:d3:09:79:9c:d0:7a:
1a:b8:7e:34:e7:e9:f5:90:90:1b:32:69:53:28:a1:75:f8:51:
b1:86:f4:ab:5f:2f:ca:29:36:19:11:59:b6:93:2d:5e:71:b2:
19:f1:90:ea:8b:fe:20:f9:33:7d:89:57:24:e0:5d:12:1b:08:
e0:96:9a:e9:77:b5:d5:a3:05:cb:82:c6:94:d9:7a:80:42:b5:
2f:db:cd:e8:dd:dd:cd:b8:e5:66:b1:5f:f3:f5:df:44:e1:1d:
81:0c:ba:13:22:73:8f:79:72:c1:96:85:fc:1f:0f:70:d0:9c:
94:09:c4:70:be:ac:58:ba:fd:d5:21:58:03:42:b6:9f:a8:4c:
42:71:68:7c:4e:40:ac:b6:0e:b1:bc:52:58:70:6c:da:20:11:
bb:5a:d3:e0:62:1b:5c:82:13:17:ac:ff:36:31:8d:b1:e1:0e:
38:0d:4a:da:a9:3a:ad:b2:32:c1:6e:6e:ef:6b:94:c0:6b:c9:
50:c8:85:8c:2a:e6:33:b3:e6:5a:b4:c6:dc:30:b1:db:f8:61:
b6:8e:23:27
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUGiPZy9+wLZy9c864ZfVrLDjjk/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMzZaFw0yNTEyMjYxMTQ3MzZaMDMxMTAvBgNV
BAMTKDUyMjIwODc5NDdGREY2M0EyRTM0RTQ3QTM2QkIxOThCMjA0Q0IxOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg6nN897RpctAusFPlMDjAyQWO
XThzKB5Vh/jQfiQycwGgu3Y6e9NOeQk3I5R8qyhvq/5+c0uY5/tFQDjtujFbRRKC
QPiu/zSDHBJcaa+T+SkfmTCffBiiTdnA8GSaHk6LJoM1EpGGca//pIl88xZNglkw
02ObMwxiC/6lTsPKARf3KTStbbDLwu8h2Ipw43vC4cINZTEB3m8wmnHVBGdnvLee
P6+zsgmnWX4IYOK9a3iBNqgs72RWVfAglvYtuzpsqGNs2A7z+Ri6Qi8Kate43DZp
K+h0YVu8nhylJvCf8LVBelTJfQT8p2S8rMnw9Iw/I8yNfxd3fLI1UdCCZNgNAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUUiIIeUf99jouNOR6NrsZiyBMsZkwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzkz
NjJlMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC5xAIwDQYJKoZIhvcNAQELBQADggEBACXGNGJQNSB+p/IQivKbwZ4GU2g1
MrF+o8L2w0RiT2SnrIw00k6Jzb4pHOi1WpsmP9MJeZzQehq4fjTn6fWQkBsyaVMo
oXX4UbGG9KtfL8opNhkRWbaTLV5xshnxkOqL/iD5M32JVyTgXRIbCOCWmul3tdWj
BcuCxpTZeoBCtS/bzejd3c245WaxX/P130ThHYEMuhMic495csGWhfwfD3DQnJQJ
xHC+rFi6/dUhWANCtp+oTEJxaHxOQKy2DrG8UlhwbNogEbta0+BiG1yCExes/zYx
jbHhDjgNStqpOq2yMsFubu9rlMBryVDIhYwq5jOz5lq0xtwwsdv4YbaOIyc=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:58:07 2025 by rpki-client