Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3136362e3234352e302f32342d3234203d3e20313331313939.roa
File: 3139322e3136362e3234352e302f32342d3234203d3e20313331313939.roa (raw, json)
Hash identifier: 42sKn0cuz9c9NtaDYpC4BAoWupDPDw33HKgAFYGmzTI=
Subject key identifier: 59:AB:2D:65:D8:80:40:D5:78:BA:94:3C:EC:63:F3:27:C0:AA:16:26
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5C627C8EE17EF36A36EF83491C18847CC0E5BD01
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3136362e3234352e302f32342d3234203d3e20313331313939.roa
Signing time: Fri 27 Dec 2024 11:47:39 +0000
ROA not before: Fri 27 Dec 2024 11:42:39 +0000
ROA not after: Fri 26 Dec 2025 11:47:39 +0000
asID: 131199
IP address blocks: 192.166.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:62:7c:8e:e1:7e:f3:6a:36:ef:83:49:1c:18:84:7c:c0:e5:bd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:39 2024 GMT
Not After : Dec 26 11:47:39 2025 GMT
Subject: CN=59AB2D65D88040D578BA943CEC63F327C0AA1626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7d:10:67:bb:4e:5b:a6:21:cc:7f:16:09:d6:
b4:80:0d:45:b5:d0:aa:83:4a:b7:a5:19:8d:6c:18:
8d:21:f2:9b:5b:76:36:4f:6e:36:e3:c2:94:a1:54:
dc:9a:3a:ac:00:85:0d:1f:2d:52:83:e9:bb:70:94:
0d:60:72:7c:b2:37:b3:8b:61:87:50:c5:ce:1a:d6:
6a:2d:06:61:d7:10:c0:51:32:3a:9d:fd:72:0a:b3:
e2:09:23:74:16:b1:1d:01:83:18:fc:5b:6b:d5:40:
d9:bc:17:9b:98:99:31:46:01:63:de:1e:45:d5:28:
b5:df:0d:06:d5:ec:c8:9a:fc:d9:8c:2c:49:a9:b1:
81:55:d2:70:52:74:7d:cd:9c:f8:a4:ff:99:97:1f:
cb:cd:c6:74:20:7c:5d:01:c2:21:3e:5d:3f:64:cc:
15:7d:46:b1:12:23:3c:de:ec:58:02:eb:e9:2b:8f:
e3:c9:5c:f7:0f:db:c8:60:16:e9:76:8e:ea:26:9d:
ff:98:a4:9a:32:d6:eb:f8:c3:65:7f:0e:78:b6:21:
ab:fa:6c:85:7d:50:3c:ba:10:6c:85:4f:fd:f6:5b:
e5:58:09:62:23:dc:4a:6a:c5:9d:a6:12:1d:e8:0f:
cf:11:0f:d7:d1:16:e3:a3:c7:a9:f6:d5:f4:ec:ca:
73:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AB:2D:65:D8:80:40:D5:78:BA:94:3C:EC:63:F3:27:C0:AA:16:26
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3136362e3234352e302f32342d3234203d3e20313331313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:27:12:48:cc:0a:aa:c3:1b:36:48:d7:d0:96:75:99:08:82:
55:ed:6f:ee:29:a3:27:e6:ed:62:fc:28:99:18:a9:7d:e1:78:
15:ed:63:9f:80:27:63:de:56:38:7c:8d:39:e7:0a:b4:ae:0a:
1b:80:ed:8e:c2:9d:29:8b:a2:c2:3f:a2:1d:c1:e7:c4:d7:ab:
bb:03:6f:e1:b8:0b:72:17:0a:b4:e4:7a:c6:2f:c8:60:a3:de:
c4:16:34:c1:bb:0e:c0:ab:c5:5e:b3:70:fd:f9:25:5d:6e:a0:
95:0d:65:db:8e:ee:4a:e2:ac:b7:4d:e8:b3:19:a0:c6:43:fa:
72:ad:ba:60:b9:c6:d9:e7:e0:9e:ab:5a:db:f9:dc:0d:91:a5:
98:86:c0:d5:4a:89:fc:71:d4:c3:b3:8b:8e:e2:17:ab:cd:dc:
d9:4a:16:fa:68:c5:e6:1d:42:24:51:72:7b:91:ea:1f:da:e3:
28:fc:86:60:b2:78:f7:ae:0d:71:37:20:a2:02:3d:93:de:7e:
92:b2:61:f3:16:63:e2:ef:1d:53:61:5c:1e:22:e4:70:cd:2e:
e0:91:bd:21:01:76:18:12:07:ed:42:cb:9d:d2:24:eb:46:94:
7d:08:d4:b8:48:98:64:2d:bc:c9:c2:bf:0d:2b:4a:9e:f5:07:
36:4b:e1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:04 2025 by rpki-client