Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3132382e302f32342d3234203d3e20313336373837.roa
File: 3139332e3138372e3132382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: cYMXj/ty/wdiHU0nfRrBqPgRZPgSvfjFc6lsXAX/k7o=
Subject key identifier: 18:2C:B7:97:DE:0E:8F:51:31:0E:05:32:AC:6A:FF:11:FD:6D:9F:FA
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 083B86D0047E75014B8A598512CF93ADD90E65F1
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3132382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:24 +0000
ROA not before: Fri 27 Dec 2024 11:42:24 +0000
ROA not after: Fri 26 Dec 2025 11:47:24 +0000
asID: 136787
IP address blocks: 193.187.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:3b:86:d0:04:7e:75:01:4b:8a:59:85:12:cf:93:ad:d9:0e:65:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:24 2024 GMT
Not After : Dec 26 11:47:24 2025 GMT
Subject: CN=182CB797DE0E8F51310E0532AC6AFF11FD6D9FFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:ec:44:66:96:6f:dc:10:66:b7:27:95:03:
ac:52:6a:76:0a:74:2d:99:a6:88:c4:40:3f:3a:99:
83:96:82:90:e5:65:a6:2a:4b:3c:31:92:f8:75:98:
f3:87:a8:a4:41:94:70:30:79:22:4f:77:77:2c:7c:
a6:19:de:38:99:88:41:da:b2:84:4c:47:ce:8f:fa:
55:a5:9f:03:33:b8:fb:e8:66:0d:c3:b3:e5:d6:ae:
ff:26:be:03:b8:81:b8:7b:da:c9:f5:31:17:df:90:
e8:15:2b:2f:63:db:e3:ea:78:c4:b0:09:6b:92:f4:
8e:72:dd:9b:24:1d:31:25:a2:4f:66:64:bc:35:aa:
7e:8e:e2:8f:bb:f6:ae:35:4e:31:79:05:0e:80:0e:
b6:9e:08:83:8d:4e:30:25:7f:b6:5b:67:fb:b1:c8:
d9:05:c0:96:bc:59:8c:12:9b:1d:d9:59:12:07:43:
89:be:92:e0:ff:c1:18:76:47:ed:50:38:a4:9a:28:
ab:e1:f7:8d:44:99:b5:6d:48:b6:cd:52:cd:59:59:
da:7c:3f:b0:98:45:30:71:86:e1:f6:fb:e8:09:1e:
85:02:3d:a1:7c:fa:8d:41:40:3c:58:01:36:21:77:
e1:d0:6c:4c:d8:39:4f:eb:41:98:58:fe:fb:af:ab:
e1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2C:B7:97:DE:0E:8F:51:31:0E:05:32:AC:6A:FF:11:FD:6D:9F:FA
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3132382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.128.0/24
Signature Algorithm: sha256WithRSAEncryption
56:2a:56:0f:d8:f0:dc:f5:03:9d:b8:aa:54:9b:a9:78:35:d2:
b6:5a:5c:de:f5:8a:bc:68:ff:aa:01:c6:dd:14:ae:de:6d:7b:
de:02:74:c8:a2:d7:5a:91:af:4f:89:5e:14:5e:ac:cf:ea:e2:
e1:89:9e:49:42:3e:2c:3b:f6:0a:2c:02:8d:20:3c:c9:c4:76:
6a:8f:a8:2a:8e:82:34:5b:17:3e:db:b2:55:55:5a:11:b9:16:
0d:e7:5f:72:d9:f7:5f:e7:ea:89:43:5a:0a:9c:db:71:ba:3a:
e0:04:ba:11:19:84:15:fd:e5:88:e5:0b:39:20:cc:e5:b6:7b:
c0:06:b7:50:74:36:a8:77:e2:34:fb:c7:ba:0e:f5:d8:bd:58:
a2:59:64:5d:12:a3:20:58:c7:27:34:66:36:f8:52:74:6c:f3:
12:cb:b4:19:72:92:e8:ec:21:b9:b2:12:23:08:79:fb:95:e2:
e9:7d:44:4b:a4:c2:c8:74:47:bf:55:c3:de:42:9d:e0:9d:d0:
44:d7:c4:3b:7d:cf:4b:2f:cb:45:f6:0a:54:60:c3:e4:e0:b3:
d3:41:11:80:d6:8e:6b:1f:e1:28:f8:1b:f5:87:b2:a7:c5:29:
0f:a9:5e:a0:7d:92:dc:50:3f:11:b9:40:b8:87:8a:74:84:fc:
fa:46:90:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:41 2025 by rpki-client