Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e332e302f32342d3234203d3e20313336373837.roa
File: 3138352e3139362e332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: yR3iJhgw2eIVe0EtVMNwGn1zl7DQUWsR0vdhELTl4jI=
Subject key identifier: 04:50:C7:20:65:65:3D:D4:FE:4F:14:47:12:82:F1:8F:36:EA:80:5A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7A863CBCC990F628872F9ED71693E9E627EBAACE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:26 +0000
ROA not before: Fri 27 Dec 2024 11:42:26 +0000
ROA not after: Fri 26 Dec 2025 11:47:26 +0000
asID: 136787
IP address blocks: 185.196.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:86:3c:bc:c9:90:f6:28:87:2f:9e:d7:16:93:e9:e6:27:eb:aa:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:26 2024 GMT
Not After : Dec 26 11:47:26 2025 GMT
Subject: CN=0450C72065653DD4FE4F14471282F18F36EA805A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a8:7f:e8:48:05:0c:99:ec:29:71:e5:34:1e:
28:b2:bc:8b:e3:46:04:ed:21:b5:55:40:14:54:88:
fb:c8:5e:d8:c8:ca:88:21:6d:6b:72:41:32:65:fc:
f2:4e:ca:4e:dd:6f:97:e0:d0:78:84:79:ed:74:0f:
a1:46:f7:c4:6d:fe:d9:00:87:c2:c1:54:92:78:75:
b1:ca:a0:f4:36:15:ff:0e:72:cb:78:24:1b:f8:47:
28:db:d2:c4:f4:40:1e:bf:2d:55:e2:63:32:cd:c6:
44:23:0d:4d:8b:3f:bc:76:58:fd:3a:a5:91:27:32:
38:24:95:52:1b:11:34:01:01:31:ff:96:32:57:95:
be:af:f7:fe:54:41:28:97:02:77:23:10:43:91:ef:
09:40:e8:2f:b8:1b:3d:44:2b:63:b1:33:ee:71:ae:
bc:4b:25:c9:2b:33:2f:00:2e:37:b5:c0:64:5e:ff:
96:01:81:3b:6e:89:a7:8c:56:07:be:be:74:46:b0:
ab:94:73:8f:bd:98:78:4f:9d:e2:30:c5:2f:1c:ef:
0b:8a:ba:a3:83:4d:a2:1e:4a:30:61:51:85:f2:3d:
f0:e5:f0:9b:7f:ca:f7:c4:37:f1:a3:63:cb:4a:4a:
28:ba:53:a1:1a:7d:5d:7c:7e:f2:d8:d9:13:92:24:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:50:C7:20:65:65:3D:D4:FE:4F:14:47:12:82:F1:8F:36:EA:80:5A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.3.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:68:40:3a:35:b9:a8:97:9f:99:3a:a2:28:a3:69:7c:29:99:
f1:03:2e:2d:5e:a6:5a:a0:92:c7:a4:f3:bc:c6:b1:1f:9c:db:
c3:29:59:1b:49:3e:0d:fb:8e:b4:39:26:f8:6a:6d:59:3c:fd:
39:72:cc:e5:6f:f4:4d:fc:3a:f2:08:99:6d:21:b6:f9:31:6b:
66:31:06:4b:bc:28:79:b7:e5:9c:58:4e:d1:81:22:b6:d4:f7:
7d:5e:d3:95:91:b6:be:33:26:72:ef:9b:1b:97:5d:fe:f6:1b:
66:a5:23:48:3b:ce:f4:7a:89:aa:93:8a:7c:98:65:7f:93:ee:
9a:39:b0:43:99:a2:a8:d1:62:f4:68:23:b9:1a:6d:d6:10:a3:
0f:1e:a5:78:66:31:ff:1a:81:25:f6:8b:0f:01:6d:0a:6a:fd:
40:79:15:a3:f1:62:3d:54:f0:ad:9f:dc:02:f0:a2:fe:38:90:
a5:c9:d8:12:fc:6d:30:6c:98:7b:66:5a:94:f2:a8:42:94:1e:
48:05:ec:4b:d1:ea:94:fe:fa:a4:39:99:68:3b:2e:09:f8:11:
fb:ef:c8:f5:a7:dd:98:87:09:4e:b1:80:87:82:17:8f:55:89:
57:2c:b8:1a:7b:a8:bc:f1:ec:52:d6:26:4f:93:ac:0f:27:28:
f5:a2:9c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:55:03 2025 by rpki-client