Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3133302e302f32342d3234203d3e20313336373837.roa
File: 3139332e3138372e3133302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: qWk4fbBcr56h7tLZjlmPXBEG4iv2QiEZGavmPl1vJEQ=
Subject key identifier: 64:E4:A6:B1:76:ED:11:BE:97:43:69:0A:8E:BA:0E:AE:EC:1A:14:5A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 08FAAB4A29657ECF02857948ADCC6AB622FAFC89
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3133302e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:22 +0000
ROA not before: Fri 27 Dec 2024 11:42:22 +0000
ROA not after: Fri 26 Dec 2025 11:47:22 +0000
asID: 136787
IP address blocks: 193.187.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:fa:ab:4a:29:65:7e:cf:02:85:79:48:ad:cc:6a:b6:22:fa:fc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:22 2024 GMT
Not After : Dec 26 11:47:22 2025 GMT
Subject: CN=64E4A6B176ED11BE9743690A8EBA0EAEEC1A145A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:7a:11:0b:e9:f5:f3:0b:4d:69:99:df:66:
e9:b1:aa:06:74:60:f1:65:9e:28:7a:60:b0:3a:44:
2e:0a:f8:72:31:b3:f3:4d:f8:2b:4c:5d:68:9a:4e:
87:70:1b:3f:66:51:fc:78:76:8d:48:11:c6:28:cf:
4f:66:9b:12:ea:7c:c5:10:ed:ad:76:ee:32:61:bf:
fa:0c:ce:e0:6a:c3:b6:90:8c:89:f1:df:ca:f4:ac:
cf:d9:cf:5c:bf:96:f8:e7:e2:89:02:34:22:94:55:
7a:39:ba:f7:e4:90:26:a4:93:dc:fa:72:78:5c:3d:
2d:44:7c:df:19:ec:58:9e:17:ec:ed:cc:52:1e:c3:
72:5b:d9:f1:f4:33:10:99:5e:c5:a6:86:c6:ac:cc:
19:f4:cd:81:cc:b9:8e:90:e8:cb:f1:7b:54:ac:a9:
3f:15:04:ce:d5:54:74:0f:51:59:15:ef:6f:bb:ed:
c0:be:24:b7:ac:a9:8d:eb:0d:a4:97:ee:ee:f9:37:
8e:ff:a0:6b:0c:84:f5:b2:ae:e4:96:fa:19:77:43:
80:d7:18:3c:cc:b1:c5:fd:59:1e:57:83:aa:17:94:
f4:b0:9d:e1:c4:b6:33:f9:ed:cb:82:f9:74:63:e2:
87:8a:55:08:2a:78:cb:00:19:31:1e:4a:84:f1:96:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:A6:B1:76:ED:11:BE:97:43:69:0A:8E:BA:0E:AE:EC:1A:14:5A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3133302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.130.0/24
Signature Algorithm: sha256WithRSAEncryption
23:51:f9:0c:17:24:a6:e4:5c:94:84:28:11:37:e4:ad:50:0d:
48:e2:9e:bd:d2:c3:fa:86:bc:9b:04:a1:4a:88:dc:77:82:15:
44:7b:c4:c2:51:22:a6:f1:54:5f:b2:38:08:fd:67:cf:05:77:
b4:91:b9:05:9d:d3:df:8f:3d:25:66:32:80:ff:12:cb:e3:04:
04:eb:bb:70:9d:08:48:9d:bc:04:2b:c8:c7:91:89:7d:c8:3d:
02:d0:23:a0:55:31:8d:2a:18:2f:39:9e:26:10:28:58:54:3b:
ea:34:ec:0e:46:31:56:83:6b:84:65:7b:30:6a:b9:9e:40:e8:
4d:cf:c0:34:49:e0:4e:c3:5d:2d:33:b6:8c:c6:73:6a:cc:f7:
34:6e:d9:73:b5:c8:cc:83:f7:14:f1:26:30:a6:6c:a3:1c:49:
bc:ab:4c:64:1b:3f:2a:54:ee:1d:b7:51:5f:02:92:04:0c:be:
c7:14:01:be:1d:06:2f:84:cc:9b:d6:e1:16:e0:f0:ad:71:71:
fa:0a:7e:c0:32:a0:ec:cf:e4:44:a0:5e:60:5b:db:d4:14:87:
3f:79:f8:8b:af:44:02:c6:3b:d7:0b:ae:5a:3a:eb:99:51:ac:
66:6e:c2:f5:b2:b6:07:23:2f:00:0b:a5:e2:3d:2c:ea:14:8c:
c3:76:14:04
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUCPqrSillfs8ChXlIrcxqtiL6/IkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMjJaFw0yNTEyMjYxMTQ3MjJaMDMxMTAvBgNV
BAMTKDY0RTRBNkIxNzZFRDExQkU5NzQzNjkwQThFQkEwRUFFRUMxQTE0NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU7noRC+n18wtNaZnfZumxqgZ0
YPFlnih6YLA6RC4K+HIxs/NN+CtMXWiaTodwGz9mUfx4do1IEcYoz09mmxLqfMUQ
7a127jJhv/oMzuBqw7aQjInx38r0rM/Zz1y/lvjn4okCNCKUVXo5uvfkkCakk9z6
cnhcPS1EfN8Z7FieF+ztzFIew3Jb2fH0MxCZXsWmhsaszBn0zYHMuY6Q6Mvxe1Ss
qT8VBM7VVHQPUVkV72+77cC+JLesqY3rDaSX7u75N47/oGsMhPWyruSW+hl3Q4DX
GDzMscX9WR5Xg6oXlPSwneHEtjP57cuC+XRj4oeKVQgqeMsAGTEeSoTxlvoFAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUZOSmsXbtEb6XQ2kKjroOruwaFFowHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzgz
NzJlMzEzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwbuCMA0GCSqGSIb3DQEBCwUAA4IBAQAjUfkMFySm5FyUhCgRN+St
UA1I4p690sP6hrybBKFKiNx3ghVEe8TCUSKm8VRfsjgI/WfPBXe0kbkFndPfjz0l
ZjKA/xLL4wQE67twnQhInbwEK8jHkYl9yD0C0COgVTGNKhgvOZ4mEChYVDvqNOwO
RjFWg2uEZXswarmeQOhNz8A0SeBOw10tM7aMxnNqzPc0btlztcjMg/cU8SYwpmyj
HEm8q0xkGz8qVO4dt1FfApIEDL7HFAG+HQYvhMyb1uEW4PCtcXH6Cn7AMqDsz+RE
oF5gW9vUFIc/efiLr0QCxjvXC65aOuuZUaxmbsL1srYHIy8AC6XiPSzqFIzDdhQE
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:11:40 2025 by rpki-client