Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3133312e302f32342d3332203d3e203531313637.roa
File: 3138352e3235352e3133312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: q5/6i4Pu1USLYfRTyQOdj5q8cRMxY5Vpgn0F8Ut42IE=
Subject key identifier: 2E:2B:E7:B1:38:FF:F6:54:FC:7F:64:7F:20:AA:7E:36:27:05:4F:81
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7F7E058FE16EFBC9C11FC5E6D5797FFB770BEE37
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3133312e302f32342d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:30 +0000
ROA not before: Fri 27 Dec 2024 11:42:30 +0000
ROA not after: Fri 26 Dec 2025 11:47:30 +0000
asID: 51167
IP address blocks: 185.255.131.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:7e:05:8f:e1:6e:fb:c9:c1:1f:c5:e6:d5:79:7f:fb:77:0b:ee:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:30 2024 GMT
Not After : Dec 26 11:47:30 2025 GMT
Subject: CN=2E2BE7B138FFF654FC7F647F20AA7E3627054F81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:a9:40:c5:22:71:9d:7c:ef:4e:01:a2:b5:
ef:c3:10:de:b1:e2:d3:88:77:c3:f6:ee:ad:48:8b:
30:96:84:c4:ee:ca:2f:37:73:93:9b:3c:44:da:f5:
f7:e4:1d:54:9e:34:b8:c6:51:5f:73:15:68:e5:70:
b5:73:7b:56:99:a8:61:59:58:39:03:66:c1:73:8c:
bb:85:67:5e:1e:64:00:4e:f5:d7:b3:bf:a2:f6:10:
7c:5e:8f:ab:3a:48:16:10:04:d2:dc:19:19:4b:06:
ac:7f:27:e0:b4:c8:8b:f4:33:01:bb:08:41:0e:ad:
e1:d4:a0:eb:7b:ad:f8:39:18:e1:bb:08:37:7d:ad:
58:42:b0:ff:56:72:3e:e4:a2:a4:98:77:ca:16:08:
5d:18:c9:d5:36:a7:b5:b8:02:44:5a:77:98:91:c2:
5c:08:3a:7b:8c:e3:2d:4e:47:b2:ae:25:2e:7c:3e:
53:eb:0f:d7:0e:4d:2a:e5:5a:2e:91:61:96:27:a0:
89:48:56:44:de:8a:da:07:a4:a0:16:ae:d9:21:8f:
27:9a:5f:bd:de:11:cb:11:8c:16:f8:85:6f:f0:92:
40:a2:8e:00:ea:bf:0c:36:37:75:77:88:99:be:30:
8e:23:8c:85:cb:2e:fb:d2:33:50:85:b3:db:ff:18:
7d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2B:E7:B1:38:FF:F6:54:FC:7F:64:7F:20:AA:7E:36:27:05:4F:81
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235352e3133312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.131.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:00:e2:92:9f:ff:5d:4a:51:e7:25:b4:c0:41:fc:b1:f2:a2:
89:b4:02:1b:fa:ab:b4:89:49:6d:63:d7:ec:a6:05:0d:79:22:
04:01:27:14:c0:27:22:5e:54:81:40:d9:ab:8a:85:87:ed:8d:
40:04:44:5b:65:c6:59:8d:47:25:b2:e7:9f:2f:5e:73:93:6f:
67:04:88:b1:54:71:bd:48:6b:65:cf:e9:1b:1a:f0:7b:46:91:
1d:2c:7f:7b:ff:5a:96:ac:11:a3:26:f8:29:c0:d1:ad:88:3b:
ec:d9:d1:ae:67:72:71:cd:e5:ac:ae:dc:83:3e:6f:03:a5:c4:
4a:cb:cb:a5:0b:61:52:4d:10:23:cd:67:7f:16:b6:ad:60:6c:
64:56:52:db:86:81:5b:5c:fa:6d:03:b1:f6:43:45:76:b3:2d:
dd:84:73:b9:31:a9:c3:bc:1a:7c:6b:14:cf:d1:53:58:5d:df:
b0:c8:b0:11:ba:b2:c2:a1:71:36:d3:47:04:e3:be:46:7f:5a:
26:96:bd:32:bd:21:3c:2b:e3:47:b3:c8:96:84:d4:68:65:e2:
da:e3:f4:60:54:d4:5d:eb:d6:6c:18:fe:60:99:9d:ed:e0:c9:
f8:a0:93:1a:1f:22:76:a2:66:ed:a0:c2:5b:d6:2c:00:73:63:
08:6b:39:fb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 3 05:17:50 2025 by rpki-client