Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e3131382e302f32342d3234203d3e20313431303339.roa
File: 3139322e3134352e3131382e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: +IO1dHZfyZ3BFAfmtVTVXtNv8NFRWgNYmgtFCf9K+H0=
Subject key identifier: A0:EA:87:C7:1A:F2:42:7E:DE:BD:D9:CA:BD:60:4A:35:28:38:50:BE
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 357C8211D1731B7469F3AB8BBD11DA1C03D7BC79
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e3131382e302f32342d3234203d3e20313431303339.roa
Signing time: Fri 27 Dec 2024 11:47:27 +0000
ROA not before: Fri 27 Dec 2024 11:42:27 +0000
ROA not after: Fri 26 Dec 2025 11:47:27 +0000
asID: 141039
IP address blocks: 192.145.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:7c:82:11:d1:73:1b:74:69:f3:ab:8b:bd:11:da:1c:03:d7:bc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:27 2024 GMT
Not After : Dec 26 11:47:27 2025 GMT
Subject: CN=A0EA87C71AF2427EDEBDD9CABD604A35283850BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:55:7a:6d:8c:01:c4:81:a4:41:13:6b:fa:
95:e9:bb:39:00:a3:7f:f0:14:63:b4:91:97:79:cf:
04:b1:82:0d:92:0d:e0:18:74:9b:d7:25:61:a1:08:
66:d3:76:d4:02:6e:b0:2a:69:48:45:00:4d:86:b0:
9e:9f:1f:2a:0d:f6:2a:8b:e3:fc:5c:f9:df:59:24:
41:02:37:36:d2:24:9d:38:eb:43:f1:a9:d2:1e:35:
3d:a7:60:5f:ab:96:e1:24:2f:52:94:ed:34:a6:16:
45:11:ed:69:da:10:e2:9b:30:1a:4f:ac:1e:aa:1c:
f9:81:79:b1:33:2b:07:8d:cd:ef:fb:d1:f0:d5:2e:
49:b2:59:80:4f:d5:d3:12:94:b0:72:97:80:eb:0b:
0a:07:cd:fa:22:c1:5c:19:fc:83:7b:12:33:64:6a:
de:8f:dc:83:4b:3b:e9:df:51:a1:20:02:a5:d5:76:
de:8d:64:3b:7e:d4:c8:cd:0c:19:f5:23:3f:eb:9a:
e2:ea:77:39:16:fd:79:6e:35:2c:80:c5:65:8c:49:
41:d2:82:52:da:ad:85:28:07:03:1e:3d:ce:8f:a7:
bc:3e:49:6d:1d:46:42:36:49:36:c5:5e:6a:ff:f8:
c9:2d:bd:92:ad:77:5e:67:e8:a4:bd:a5:ad:1a:a0:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EA:87:C7:1A:F2:42:7E:DE:BD:D9:CA:BD:60:4A:35:28:38:50:BE
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e3131382e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.118.0/24
Signature Algorithm: sha256WithRSAEncryption
96:fa:23:7c:8b:02:0d:e6:79:3a:bd:92:c3:35:5f:27:ee:84:
6f:0a:dd:29:8e:65:b2:2c:c2:34:84:8f:90:0a:dd:e9:b8:5e:
ad:48:b8:ef:19:37:64:75:b1:4b:fb:56:73:6b:17:0f:b9:96:
d5:fc:2c:86:6f:39:cf:98:e1:f1:96:86:5c:22:f8:42:06:f8:
64:19:e5:8e:b9:45:37:9a:9a:54:24:a0:dd:4d:63:cf:5b:37:
74:b0:4d:1a:18:c2:34:55:fa:17:93:6b:27:db:75:e8:39:f8:
be:7d:87:01:70:41:77:aa:7c:f7:a3:ea:e4:12:b1:d1:af:9c:
b9:83:cb:b4:2d:40:cb:a2:e3:25:50:97:d6:59:5f:d3:94:2f:
78:e5:99:f0:46:b8:aa:b2:45:d6:78:2c:ce:76:7e:4e:c3:7c:
1e:8a:98:cf:00:4f:93:b7:5f:bc:10:58:55:fe:8c:17:66:2c:
5c:7b:f3:ed:70:16:7e:2a:90:6e:b8:ab:e9:92:7b:f0:c3:43:
96:61:7d:15:62:62:26:30:8d:a7:6f:a4:46:a7:71:2f:96:17:
12:cf:06:06:bd:84:af:d3:55:db:4f:1b:8a:5f:88:7f:ed:4e:
4b:4e:32:8f:13:97:5c:e0:22:a0:5f:0f:be:f5:2f:19:82:48:
f9:93:ec:2c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUNXyCEdFzG3Rp86uLvRHaHAPXvHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMjdaFw0yNTEyMjYxMTQ3MjdaMDMxMTAvBgNV
BAMTKEEwRUE4N0M3MUFGMjQyN0VERUJERDlDQUJENjA0QTM1MjgzODUwQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGvlV6bYwBxIGkQRNr+pXpuzkA
o3/wFGO0kZd5zwSxgg2SDeAYdJvXJWGhCGbTdtQCbrAqaUhFAE2GsJ6fHyoN9iqL
4/xc+d9ZJEECNzbSJJ0460PxqdIeNT2nYF+rluEkL1KU7TSmFkUR7WnaEOKbMBpP
rB6qHPmBebEzKweNze/70fDVLkmyWYBP1dMSlLByl4DrCwoHzfoiwVwZ/IN7EjNk
at6P3INLO+nfUaEgAqXVdt6NZDt+1MjNDBn1Iz/rmuLqdzkW/XluNSyAxWWMSUHS
glLarYUoBwMePc6Pp7w+SW0dRkI2STbFXmr/+MktvZKtd15n6KS9pa0aoPGBAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUoOqHxxryQn7evdnKvWBKNSg4UL4wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzIyZTMxMzQz
NTJlMzEzMTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzMzM5LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwJF2MA0GCSqGSIb3DQEBCwUAA4IBAQCW+iN8iwIN5nk6vZLDNV8n
7oRvCt0pjmWyLMI0hI+QCt3puF6tSLjvGTdkdbFL+1ZzaxcPuZbV/CyGbznPmOHx
loZcIvhCBvhkGeWOuUU3mppUJKDdTWPPWzd0sE0aGMI0VfoXk2sn23XoOfi+fYcB
cEF3qnz3o+rkErHRr5y5g8u0LUDLouMlUJfWWV/TlC945ZnwRriqskXWeCzOdn5O
w3weipjPAE+Tt1+8EFhV/owXZixce/PtcBZ+KpBuuKvpknvww0OWYX0VYmImMI2n
b6RGp3EvlhcSzwYGvYSv01XbTxuKX4h/7U5LTjKPE5dc4CKgXw++9S8Zgkj5k+ws
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:09 2025 by rpki-client