Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234342e302f32342d3234203d3e20313336373837.roa
File: 3138352e3234302e3234342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: fNmUt7YOtnVg3FafTQmRhUI2CUwi9Y/eNCOnN3s3d70=
Subject key identifier: 2A:51:D4:ED:FA:4D:2D:DF:01:76:0A:16:E1:D6:49:07:5D:BC:DB:E9
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 60B731961EC6FE74235AF191D3DBB0F2DA4E62F2
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:14 +0000
ROA not before: Fri 27 Dec 2024 11:42:14 +0000
ROA not after: Fri 26 Dec 2025 11:47:14 +0000
asID: 136787
IP address blocks: 185.240.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b7:31:96:1e:c6:fe:74:23:5a:f1:91:d3:db:b0:f2:da:4e:62:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:14 2024 GMT
Not After : Dec 26 11:47:14 2025 GMT
Subject: CN=2A51D4EDFA4D2DDF01760A16E1D649075DBCDBE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ba:5c:ad:58:68:df:33:b8:9a:7b:89:16:dc:
fd:2f:bd:66:78:3d:f4:94:d9:53:b0:b9:d3:a1:26:
11:b3:a7:58:a6:69:fc:27:07:71:10:d6:22:74:3f:
b3:55:7a:49:dc:f8:06:c8:70:07:b2:aa:2f:d4:33:
ac:63:75:ef:3a:24:3d:03:33:fe:71:86:71:5a:7f:
4b:fa:57:dc:e5:97:a6:b7:48:2a:26:67:a6:df:2b:
4c:8e:94:7d:2d:9c:bb:5d:2a:96:79:70:a6:e4:76:
b0:a0:4c:d4:ec:2b:32:22:6a:f0:5c:7d:e3:54:31:
b8:3d:74:49:5d:17:c3:c4:ae:3d:32:9e:02:ed:d6:
75:48:0d:bb:ae:0e:29:cb:74:77:eb:fe:f1:df:50:
a2:5e:90:fa:18:30:c6:ab:51:72:75:ab:2b:00:97:
e8:02:4e:e2:47:9c:a6:c6:7c:b1:23:f9:f7:59:4c:
4d:09:41:f1:21:2c:da:b1:8d:c4:88:71:b9:5c:ae:
2f:d3:5c:d8:ef:51:10:d8:6f:64:9d:64:ff:cc:22:
d7:5f:5d:e6:e9:0b:01:8e:f8:16:43:49:ef:2d:0c:
eb:68:64:e5:c1:87:8c:b6:e3:80:82:04:2f:0b:0e:
16:aa:19:4b:93:9b:8d:d7:96:fe:37:2b:bc:1c:f6:
9f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:51:D4:ED:FA:4D:2D:DF:01:76:0A:16:E1:D6:49:07:5D:BC:DB:E9
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.244.0/24
Signature Algorithm: sha256WithRSAEncryption
56:53:5a:52:33:fe:66:46:9a:62:5a:ec:23:6d:e3:17:3b:d0:
6c:13:c0:44:2a:13:1c:d0:83:fb:b0:dc:bd:a0:1f:b4:ae:15:
3f:80:3f:43:85:2d:7b:42:76:60:80:b3:f7:76:38:75:bb:28:
7d:5d:52:f7:c7:e7:30:25:87:46:3f:7f:b2:bc:b6:10:3c:ea:
91:e1:35:03:45:d2:11:51:30:95:1d:36:35:25:5f:ff:4c:d8:
9b:47:39:2a:24:00:0e:41:b7:00:59:16:b6:40:dc:2e:7a:d6:
ea:e2:ed:69:92:fa:2d:89:dc:a4:20:2e:90:24:97:b6:06:38:
cd:f3:22:ad:14:b2:9e:3a:67:52:6d:44:cb:61:8f:f7:9c:7b:
3d:b2:7f:c8:11:46:78:c7:bf:4c:bb:b8:79:9b:ff:09:cd:58:
03:85:c9:6d:a5:28:84:85:98:28:3c:cf:9f:1e:05:7f:a6:4d:
b0:9f:bb:cc:c2:53:8c:f6:29:1c:a7:a7:72:df:52:03:a4:28:
97:4c:d9:f4:15:14:07:86:96:84:e5:36:a5:dc:44:dc:9b:07:
8a:58:de:b0:2e:36:20:a3:82:bc:49:20:26:b4:dd:72:26:41:
09:79:af:fb:04:91:c6:25:4f:62:43:c7:6e:c0:f7:33:51:c1:
c0:bb:96:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:30:39 2025 by rpki-client