Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3133302e302f32342d3234203d3e20313437303439.roa
File: 3138352e3235352e3133302e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: KkfCdfURbpUFTgJLfqp+lJDxv8yw/1Ll0YM4zhmqaUQ=
Subject key identifier: CC:AE:12:18:E7:D7:76:1C:32:30:7B:5B:0B:38:AA:06:45:5D:0D:7D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 672311E720E5BBFCAECF847F58A4DD35E11DB840
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3133302e302f32342d3234203d3e20313437303439.roa
Signing time: Fri 27 Dec 2024 11:47:35 +0000
ROA not before: Fri 27 Dec 2024 11:42:35 +0000
ROA not after: Fri 26 Dec 2025 11:47:35 +0000
asID: 147049
IP address blocks: 185.255.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:23:11:e7:20:e5:bb:fc:ae:cf:84:7f:58:a4:dd:35:e1:1d:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:35 2024 GMT
Not After : Dec 26 11:47:35 2025 GMT
Subject: CN=CCAE1218E7D7761C32307B5B0B38AA06455D0D7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:43:6b:5c:95:70:65:6e:d3:63:2f:8a:4a:dc:
eb:e8:a8:91:50:1a:6b:af:d8:1e:f5:a4:5b:ab:df:
34:58:fc:11:4e:e5:b1:d9:8a:f2:99:6c:9c:82:03:
07:b1:e8:4e:52:8f:f5:bc:49:06:14:64:1c:ef:9a:
4d:54:60:28:6e:b8:74:98:c9:e9:06:35:79:f3:f8:
be:0e:88:a9:ca:b4:98:67:69:13:65:f7:4f:b9:1a:
e3:ec:05:a4:47:3d:54:41:c2:37:86:64:91:80:10:
0c:d4:f2:b0:82:e2:bc:b9:2a:42:6e:89:0d:9b:44:
6f:ef:71:11:ae:c9:85:fc:b0:b1:dc:7a:e3:71:a2:
6a:d2:8b:82:18:25:77:f0:65:fe:90:b7:95:45:2d:
32:19:0d:6b:1d:09:6f:d5:24:43:a6:68:b9:c1:ad:
a9:51:5e:4d:57:51:ab:4b:0e:7f:09:d2:28:69:bf:
4e:c5:c3:e3:bf:dd:99:3b:65:cc:cf:cd:9e:44:7f:
a6:8f:74:68:ba:3b:97:e7:83:14:e5:33:d8:88:b2:
86:0f:f9:91:6a:a8:76:12:df:20:ac:28:d3:a4:ce:
54:08:17:44:c0:68:4a:bf:14:d0:f8:1b:b9:df:2e:
c5:3a:70:61:2b:22:03:f3:6d:ed:1a:a1:68:c7:d6:
55:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AE:12:18:E7:D7:76:1C:32:30:7B:5B:0B:38:AA:06:45:5D:0D:7D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3133302e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.130.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:45:a8:05:65:0a:08:0f:c6:4e:87:91:56:5d:1e:1b:08:4d:
3b:59:16:0e:6d:26:7b:e7:75:9c:d1:6e:89:7e:59:39:26:65:
9b:5d:0f:6c:8e:e8:ac:3a:07:f7:8c:03:ff:99:17:45:2e:8a:
be:40:a1:91:20:ea:24:b0:7d:04:f3:d5:43:d6:80:78:45:25:
35:03:cf:8c:1d:e0:13:1b:c8:34:09:31:f0:d3:07:1e:4a:d2:
d6:ae:cd:9f:42:2c:d7:83:8a:5b:7a:43:98:ae:12:2d:54:72:
d5:3b:cd:ff:e9:d2:bc:fd:ea:bb:4a:34:9f:2a:49:aa:cb:01:
da:14:24:83:73:aa:6b:1f:24:4d:4a:e2:79:cb:7d:e2:6d:9c:
d1:a4:d0:ed:3d:57:a1:37:28:31:b8:99:b7:1e:30:19:8d:e6:
b2:4e:3d:66:b0:82:84:46:d7:72:a3:47:07:1c:f3:d9:2f:a2:
ea:be:3e:97:9e:81:1f:0f:50:65:84:2f:df:15:e8:11:22:1d:
78:5e:e5:75:96:ce:d2:49:63:20:e1:b8:1d:39:a9:6d:20:8b:
bb:33:44:49:4f:24:1e:1e:4f:7a:14:1a:ea:d3:8e:a0:ec:ea:
39:8a:ea:d8:9b:10:09:e7:23:2c:1a:5b:45:4f:5e:d9:38:cd:
e9:8b:e9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:35 2025 by rpki-client