Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3136362e3234362e302f32342d3234203d3e20313437303439.roa
File: 3139322e3136362e3234362e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: Gg8dlD/9BOOmpXok6/zED8JzjztZw/aAzIbCLEeQu3I=
Subject key identifier: E9:52:69:FE:88:DD:1A:2E:EC:2D:81:A2:96:3C:4C:29:7A:04:00:C9
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 128D9533010A47DE8AC7068ED52749F1362175DB
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3136362e3234362e302f32342d3234203d3e20313437303439.roa
Signing time: Fri 27 Dec 2024 11:47:17 +0000
ROA not before: Fri 27 Dec 2024 11:42:17 +0000
ROA not after: Fri 26 Dec 2025 11:47:17 +0000
asID: 147049
IP address blocks: 192.166.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:8d:95:33:01:0a:47:de:8a:c7:06:8e:d5:27:49:f1:36:21:75:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:17 2024 GMT
Not After : Dec 26 11:47:17 2025 GMT
Subject: CN=E95269FE88DD1A2EEC2D81A2963C4C297A0400C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:98:17:cb:4e:8c:7d:e5:a1:bf:51:d5:99:
f2:e7:24:c7:20:48:fa:b7:a9:4c:ba:46:25:37:91:
5a:5c:2d:50:19:5a:03:4f:2b:59:22:6b:79:22:f0:
b1:3f:dd:aa:87:7c:1f:af:1a:78:3d:0c:16:11:31:
0b:da:5e:03:9d:b1:d9:d2:e3:2a:7a:d9:74:f3:73:
c7:73:c7:80:78:ea:41:ba:95:97:a7:96:0f:3b:5c:
8e:a1:55:51:1b:d4:cd:9e:ff:e8:d4:c5:72:f4:6f:
3b:3c:c9:6d:52:a4:63:d1:df:d4:0e:63:95:de:8e:
48:75:b9:c5:34:cd:76:d0:f1:16:8e:21:f6:4f:19:
47:5f:c9:87:90:3a:ab:99:06:df:90:10:a0:3d:2d:
2e:6a:7c:36:b9:13:57:f9:5e:f6:44:d9:2c:5b:ac:
e2:c1:a4:6e:f5:a7:f1:66:fd:6f:3f:3c:e2:dd:c0:
6d:91:2b:d4:c5:3b:9a:43:55:02:29:ef:12:3a:b3:
52:fa:52:74:4d:a0:ab:60:16:5b:65:50:dd:69:3b:
10:82:a1:0e:b0:31:57:aa:85:21:6d:88:8e:34:81:
95:99:92:ce:6c:96:a5:2b:53:db:72:dd:3f:fa:93:
1c:f7:a6:59:d8:b2:c8:f4:26:e6:b8:8f:6a:bc:6f:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:52:69:FE:88:DD:1A:2E:EC:2D:81:A2:96:3C:4C:29:7A:04:00:C9
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3136362e3234362e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.246.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:0a:56:a0:8d:51:80:1c:b1:22:de:53:d8:6c:62:b5:9a:85:
53:c9:f9:a8:c2:63:2d:0a:f5:da:0c:69:3a:cb:80:32:51:88:
3b:16:08:23:d1:b5:0a:61:64:6e:18:a2:84:99:08:5d:b2:c7:
f4:d3:46:27:60:44:3d:27:1c:66:9a:c0:52:5d:7f:88:77:ee:
71:31:fb:4e:8f:ab:f4:6e:02:5a:fe:df:0b:e7:f5:45:36:97:
ac:8e:95:fa:bd:45:6d:ac:bf:7b:61:5b:cc:ef:50:79:ba:ca:
fa:b7:c3:fe:e3:00:7a:16:c6:6e:7b:68:73:81:80:75:bb:45:
36:32:04:ee:df:4f:2d:b3:fd:3a:fb:fd:c0:58:23:59:02:45:
b5:65:60:db:49:5c:68:38:75:dd:c4:76:e8:4b:b9:a5:bb:bb:
a7:29:d6:73:97:56:f3:bd:02:34:1a:80:a2:98:b0:e5:fb:fe:
0b:26:d5:2f:f1:04:9b:5b:5a:3b:8f:1b:2d:83:97:a7:fa:cf:
48:29:e8:33:e5:8e:00:b8:49:12:ee:e6:aa:cd:fc:ee:7d:dc:
08:38:aa:03:7f:8c:8f:e2:cd:b7:27:28:d3:24:f2:06:50:27:
57:5d:00:c2:dd:bf:cf:cb:f6:81:b5:37:2d:54:0c:a5:0d:fd:
3c:1d:a2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:09 2025 by rpki-client