Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32352e302f32342d3234203d3e20313336373837.roa
File: 3139332e3134392e32352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: EgVZ8awrnUeNTKHuMgaWP/RYx6Ws3m+x3JiWW/HD2RU=
Subject key identifier: A8:E1:61:15:47:25:83:F5:0E:86:2C:1D:51:EB:CE:42:B3:AE:B5:87
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 45292B430E696C14AE1747947C80E368F6B0ACB9
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:31 +0000
ROA not before: Fri 20 Dec 2024 15:18:31 +0000
ROA not after: Fri 19 Dec 2025 15:23:31 +0000
asID: 136787
IP address blocks: 193.149.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:29:2b:43:0e:69:6c:14:ae:17:47:94:7c:80:e3:68:f6:b0:ac:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:31 2024 GMT
Not After : Dec 19 15:23:31 2025 GMT
Subject: CN=A8E16115472583F50E862C1D51EBCE42B3AEB587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bb:aa:7f:90:16:73:dd:4a:5b:75:73:5f:6f:
d1:9c:11:94:14:0b:45:22:e8:c4:6f:da:76:e3:7e:
00:ac:77:06:dc:63:cf:66:7a:49:cb:e5:d4:33:b5:
6b:f5:15:f1:15:36:bd:99:62:7b:ac:4d:0b:8e:78:
e5:ee:a9:18:14:4d:6c:c2:a8:bd:68:ee:98:d7:39:
26:87:43:92:86:86:59:c6:04:b0:20:98:7f:41:2d:
12:fd:75:e2:b8:b2:f9:50:ef:cd:87:04:7d:16:3e:
f2:fe:aa:39:5a:78:fd:fd:ec:9b:13:00:c1:ed:a0:
c1:9c:70:81:4d:a2:d6:9a:ff:3c:e7:35:00:cf:20:
22:d2:46:dd:33:7c:da:cc:80:fd:d2:55:9f:28:83:
ce:02:a5:f1:d6:fd:9c:c4:8f:bf:81:d3:14:fa:c8:
c5:1f:e8:a6:55:e5:c0:f3:14:e2:26:bd:61:3c:cc:
20:b9:13:7d:39:6a:05:b8:e9:34:05:12:5c:b1:c6:
23:2b:5d:c0:d8:07:a0:c6:7d:88:fd:92:bd:a8:83:
53:e3:b9:2c:0e:76:46:29:1d:8b:e6:38:d5:c8:2d:
07:f6:ea:a5:6c:d2:57:77:c4:58:17:98:e7:de:fe:
54:17:a6:bf:43:48:27:bd:80:73:58:2b:a9:50:9f:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E1:61:15:47:25:83:F5:0E:86:2C:1D:51:EB:CE:42:B3:AE:B5:87
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.25.0/24
Signature Algorithm: sha256WithRSAEncryption
76:3d:23:db:20:eb:f1:91:69:58:3f:e6:13:16:0c:45:bf:d9:
10:d7:ec:68:48:5e:88:6d:f6:3e:94:36:74:71:6e:f9:cb:0f:
bb:54:a2:f7:73:89:9b:12:aa:36:f4:1b:e3:53:60:34:19:38:
65:7a:9d:12:41:92:c8:aa:72:94:b5:1e:be:be:bf:1d:63:01:
b5:55:02:07:34:f9:71:4c:86:56:34:5b:36:4d:61:3b:74:8f:
2d:7a:70:8f:dd:4b:55:fc:d7:f8:c0:0d:97:b7:d0:60:fc:f6:
bc:e0:c7:55:e0:27:b2:f3:f5:bd:fc:a1:9b:98:ce:5d:ad:00:
5c:63:3e:71:4c:b0:e1:a8:a3:21:a9:b8:e2:91:d2:81:a5:6a:
59:34:bb:af:22:b1:bb:0b:60:2d:97:42:3f:7b:0f:d0:22:4e:
dd:b3:f9:c0:c5:1d:87:61:32:31:53:12:19:bc:03:a7:b0:36:
ad:b3:9a:dd:39:a3:39:5a:a3:b2:6c:87:e7:54:6d:df:63:9a:
8f:c2:72:94:48:30:32:78:a2:b3:0c:e8:1e:d0:ca:36:7a:80:
4c:de:bb:95:af:e8:8b:52:69:5b:6a:64:87:f5:8b:57:5e:a6:
15:fa:b2:87:aa:04:09:c5:63:ce:32:08:b6:c8:16:f3:52:f4:
2f:8d:4a:72
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:44 2025 by rpki-client