Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234352e302f32342d3234203d3e20313336373837.roa
File: 3138352e3234302e3234352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: xLo2vf33inFVUb8pSFEy2KqLZvDL91K6R8FaFYPOF2Y=
Subject key identifier: 59:7E:9B:E3:FA:EE:58:F2:1A:8E:7C:BF:4F:AD:B9:60:62:56:17:EE
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5BE920AF436189E6EB7E4455E1BA6C38070C4D44
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:10 +0000
ROA not before: Fri 27 Dec 2024 11:42:10 +0000
ROA not after: Fri 26 Dec 2025 11:47:10 +0000
asID: 136787
IP address blocks: 185.240.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:e9:20:af:43:61:89:e6:eb:7e:44:55:e1:ba:6c:38:07:0c:4d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:10 2024 GMT
Not After : Dec 26 11:47:10 2025 GMT
Subject: CN=597E9BE3FAEE58F21A8E7CBF4FADB960625617EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:87:41:cb:22:d6:5c:34:f2:3e:b7:1d:0a:
e4:33:0a:5d:1e:cb:e5:f8:26:6f:02:c9:d0:9c:01:
4a:61:8c:36:8c:b7:f4:cc:79:c7:bd:df:10:dc:60:
81:e5:5e:b7:e1:6c:06:19:23:eb:ee:4b:81:e0:a0:
57:ed:ff:1a:49:24:90:6a:1b:9d:01:66:a4:73:53:
41:93:28:b8:8a:50:17:ad:98:a3:2e:b5:ef:fe:b5:
a0:0a:c4:41:15:55:84:5d:bc:e8:23:2d:a6:93:45:
19:49:e9:4b:31:49:ea:81:ba:e9:0c:08:c5:c9:63:
eb:c2:f9:ff:a4:26:ed:3d:bd:9b:46:18:64:5b:b7:
98:51:32:e6:e4:83:b7:f7:ec:6b:fd:3d:ed:8a:c2:
1f:69:02:c9:08:a0:0e:96:82:34:57:bc:a9:71:b3:
c8:c5:3d:ee:b6:61:14:b2:8e:9f:65:ac:26:c1:a4:
29:e8:e0:5e:c5:27:38:55:6f:38:10:c9:05:e1:dc:
ab:69:09:89:25:e6:80:f7:a0:ca:77:86:06:52:55:
16:fe:fe:49:1b:90:da:b9:45:8b:cd:53:3c:24:30:
01:15:c6:88:02:3a:2e:df:54:fe:28:d3:49:47:29:
b9:36:9e:fe:0d:bf:7c:f4:44:6e:8e:0c:4c:2e:cd:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7E:9B:E3:FA:EE:58:F2:1A:8E:7C:BF:4F:AD:B9:60:62:56:17:EE
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.245.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:e3:2f:66:7e:55:b8:50:01:2f:88:11:88:29:08:07:63:b1:
e9:11:a5:45:eb:83:95:30:3d:34:e2:7e:62:15:bf:2f:98:dd:
06:8c:59:29:8c:e1:9e:bd:9b:e2:a3:c4:e4:b3:b3:1d:aa:a8:
f6:7b:cd:25:92:1e:f3:e5:5e:60:ad:7c:79:b9:35:9c:85:78:
5b:ae:43:ea:9e:5d:80:ab:57:91:b6:ed:ae:a3:27:c7:63:61:
d6:53:af:e4:98:97:b1:aa:5c:6e:98:30:c6:bb:52:50:19:f8:
9e:a1:bb:87:e9:f6:de:7c:ea:5b:1f:52:48:b9:6a:7d:ea:27:
88:a7:5d:c6:01:e4:c8:fc:78:73:19:19:7c:df:c4:ad:7d:68:
e8:0f:03:86:0d:6f:45:3e:39:e0:cc:f7:5d:61:85:61:ef:52:
ee:fb:fc:68:ee:01:a0:28:7a:35:52:57:f3:92:be:cf:a9:8a:
5c:86:f6:37:0f:d4:64:5e:55:43:5b:db:6d:cb:ac:ed:d5:4d:
53:97:0c:fe:1d:23:6b:34:ec:7b:0f:69:63:b1:8e:dc:c5:68:
fc:23:e3:7e:16:9c:3d:72:5c:1a:22:02:ee:31:73:0f:2f:74:
16:47:0a:17:4f:6f:9c:29:56:7e:d3:ee:2b:62:16:5f:56:d9:
27:58:9b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:14 2025 by rpki-client