Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134322e3230332e302f32342d3234203d3e20313336373837.roa
File: 3139332e3134322e3230332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: JVNl8rWGb9PMC3iryWVxPoy0Sr19AlrzWA+kj++t1ow=
Subject key identifier: 94:BD:7A:35:56:9A:4C:CF:58:AC:70:18:F1:5C:33:0F:27:9F:B2:08
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7D04555E7A82FF77A387FC6088A25509AB196A9C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134322e3230332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:16 +0000
ROA not before: Fri 27 Dec 2024 11:42:16 +0000
ROA not after: Fri 26 Dec 2025 11:47:16 +0000
asID: 136787
IP address blocks: 193.142.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:04:55:5e:7a:82:ff:77:a3:87:fc:60:88:a2:55:09:ab:19:6a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:16 2024 GMT
Not After : Dec 26 11:47:16 2025 GMT
Subject: CN=94BD7A35569A4CCF58AC7018F15C330F279FB208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:54:9f:57:13:e6:3f:e1:cd:dd:42:95:a8:
74:1a:1b:e5:5a:cf:61:16:99:df:19:c3:e5:b0:e9:
52:b4:f4:f0:24:58:ab:0c:86:33:db:08:17:41:08:
d4:50:c0:49:fe:f7:8d:d8:16:58:43:d6:2e:55:0f:
b0:e7:a4:1b:ee:07:08:8d:13:c4:50:76:f5:d8:94:
45:a7:1b:98:21:3b:04:c5:24:cb:48:b0:db:c1:f5:
91:f6:44:1a:d7:23:be:31:30:06:bf:2a:3b:9e:47:
9c:d2:45:7b:71:c3:30:c4:17:85:f2:86:84:9f:34:
6d:c9:74:98:24:bc:0e:ea:58:db:56:05:94:2c:af:
05:b5:0d:66:cb:dd:4f:e2:9e:50:59:b4:f5:06:52:
87:1b:4f:90:f4:a0:33:1d:83:b2:55:c3:10:dc:bd:
28:cb:e9:89:38:aa:e2:84:e9:fc:96:c6:3b:7b:e0:
88:ed:07:ba:3b:75:d2:40:6c:e3:41:7e:e2:2a:d4:
cd:39:dc:af:0f:0d:7a:c4:03:54:95:2d:1c:b0:21:
29:6a:5b:09:b9:90:1b:38:68:a5:3f:e5:22:06:86:
69:34:bb:b5:0f:aa:48:fb:4b:91:b0:e2:aa:e7:33:
4c:21:65:d5:b2:21:12:05:05:eb:1c:c1:14:61:30:
4a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BD:7A:35:56:9A:4C:CF:58:AC:70:18:F1:5C:33:0F:27:9F:B2:08
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134322e3230332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.203.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:28:f3:f7:12:9f:be:6c:c3:0e:67:09:96:eb:2a:df:e2:88:
24:d3:bf:26:bb:1e:b4:13:d9:8d:e9:5f:3a:df:ec:b2:c5:c9:
7c:bb:47:92:9c:7c:8e:08:ee:bb:d3:8e:d4:6b:55:37:bd:a6:
f7:3d:e2:7d:c0:71:a5:b8:97:e0:49:90:72:16:d8:aa:36:da:
e0:77:24:e5:c5:eb:8c:e9:6b:cb:84:3c:7b:66:b1:3a:27:85:
09:73:39:47:1e:ab:d4:32:43:99:b8:70:1a:a3:5d:49:d9:56:
d9:bb:63:ae:41:d6:a0:eb:3c:09:32:dc:db:9d:2b:59:7b:29:
13:39:c3:31:92:87:6e:e0:72:35:e1:ac:70:fb:6e:e1:9c:55:
1b:06:47:60:f5:0f:6c:69:e8:26:b9:ae:1f:f2:cb:74:a1:c6:
8a:a4:cd:89:be:3d:f5:f5:e1:cc:e2:74:7e:2a:0b:e5:aa:7b:
b3:df:3d:77:b0:7a:45:b0:c6:d2:69:5a:cf:1a:5b:3e:fd:aa:
f7:dc:05:9e:04:6d:be:0d:95:8b:12:14:15:12:99:ba:a2:f5:
32:ac:2e:32:93:0b:ed:21:26:5d:d7:77:00:80:79:ec:a6:dc:
8c:98:8c:cd:ea:60:24:81:75:79:12:08:ca:c5:12:ad:e2:0e:
de:a4:85:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:17 2025 by rpki-client