Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37332e302f32342d3234203d3e20313336373837.roa
File: 3139332e3134382e37332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: WCDxS8SZSLt9dxz7de3JxOGvnqeD3a7bkeOqhZi5QoI=
Subject key identifier: A2:53:94:47:7F:22:21:72:42:EA:49:63:F8:8F:EC:A3:DA:A4:4A:F5
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 576C995ABE398078114516390644F370DE0AA51E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:40 +0000
ROA not before: Fri 20 Dec 2024 15:18:40 +0000
ROA not after: Fri 19 Dec 2025 15:23:40 +0000
asID: 136787
IP address blocks: 193.148.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6c:99:5a:be:39:80:78:11:45:16:39:06:44:f3:70:de:0a:a5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:40 2024 GMT
Not After : Dec 19 15:23:40 2025 GMT
Subject: CN=A25394477F22217242EA4963F88FECA3DAA44AF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:d8:27:28:7d:32:42:60:2b:a0:93:d7:9d:
b9:3d:fe:3f:87:4c:9e:7f:f2:ee:dc:4a:3e:e0:ed:
ea:6c:ff:a7:9f:e0:af:4b:8c:09:fd:4f:8a:f4:6f:
a4:e0:a5:35:03:b1:fc:7b:61:8d:16:62:03:47:d4:
53:46:e2:f0:60:60:56:7a:e1:0a:88:b6:5d:82:b1:
dd:09:dc:34:4b:44:52:29:50:26:22:90:c7:6a:c3:
e2:28:04:9c:0b:ff:d1:3b:f7:f0:3c:9f:e9:bd:5b:
8a:5f:b3:83:14:10:76:fc:00:d5:1d:a9:e1:6d:5c:
35:a8:f9:df:b9:44:73:a9:f9:6c:a6:28:c7:a1:f6:
af:7b:bb:5a:c4:d3:b8:ca:12:6c:59:79:4e:cd:8b:
a7:f0:8c:c3:f6:66:46:b5:eb:0c:0a:d6:4b:30:46:
1d:3e:27:14:6c:93:78:4d:4e:3a:d3:2e:ce:75:15:
6f:e7:af:78:16:5b:49:ce:ec:59:dc:20:72:f1:6b:
e3:af:9a:e9:81:da:20:86:c0:72:dc:de:3a:cb:be:
2b:a3:58:e5:4c:25:e5:a8:81:93:ac:be:2a:a1:dd:
48:bd:86:bf:0b:a6:f1:6e:8e:7a:e3:e8:13:05:59:
ae:f0:1c:66:8c:6b:f8:0c:43:07:c1:21:e0:63:a6:
ac:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:53:94:47:7F:22:21:72:42:EA:49:63:F8:8F:EC:A3:DA:A4:4A:F5
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134382e37332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.73.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:79:85:a3:15:0b:d3:6a:b8:84:cd:21:d1:14:cb:d8:99:eb:
0a:a3:d6:5d:ea:fc:45:58:4a:56:ff:eb:2b:98:11:28:d1:49:
b2:59:d4:3f:20:3f:4e:2c:4e:c9:f6:1d:03:c7:42:70:ad:73:
fc:a5:c7:7a:6b:9e:25:5a:b3:d9:ce:b5:dc:e6:d6:8c:76:f0:
e8:3a:97:17:90:54:82:97:b7:d0:3d:2c:75:ac:92:44:3a:de:
80:7f:1b:32:1c:85:25:ae:ab:77:cd:a7:3a:16:30:60:de:56:
c2:e7:82:db:09:80:6a:19:5b:04:c5:4e:e2:68:dd:86:2c:c3:
73:70:51:2e:c4:a1:1c:67:d2:33:47:17:3c:6e:f2:e7:23:c2:
03:72:d2:87:6f:c8:b9:da:bc:f5:ee:6d:ac:e4:b1:16:9a:39:
3c:31:d8:66:30:19:a4:18:d2:25:96:e8:9e:b3:09:9f:21:d2:
1f:cd:72:83:b9:a9:f2:8e:9c:5e:8c:57:f5:10:f4:66:27:88:
f0:b5:be:09:4b:f1:63:07:0c:e2:20:c1:72:0e:f5:8b:14:fc:
bc:0c:2d:24:fe:b8:25:d2:7b:f5:77:79:94:91:09:a5:af:e4:
f3:2b:b6:69:d2:ad:70:85:27:38:22:be:45:0a:8e:65:06:e5:
7b:ec:01:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:13:54 2025 by rpki-client