Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3133312e302f32342d3332203d3e20313336373837.roa
File: 3139332e3138372e3133312e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: 0+XqpF6zEI4X3C1+OH73xJrP4ENSO6mlAXtsbZHoPzM=
Subject key identifier: 9A:F7:80:38:16:4B:07:BB:A6:5F:F0:26:AB:AF:52:CA:13:90:34:8A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5A8C3466689B6CAB012622CF3968B1EE653D0941
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3133312e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:25 +0000
ROA not before: Fri 27 Dec 2024 11:42:25 +0000
ROA not after: Fri 26 Dec 2025 11:47:25 +0000
asID: 136787
IP address blocks: 193.187.131.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:8c:34:66:68:9b:6c:ab:01:26:22:cf:39:68:b1:ee:65:3d:09:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:25 2024 GMT
Not After : Dec 26 11:47:25 2025 GMT
Subject: CN=9AF78038164B07BBA65FF026ABAF52CA1390348A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:46:c2:5f:29:28:26:20:a6:e6:45:cf:bf:
b8:85:05:e6:39:70:86:e7:34:d1:e2:77:e1:19:27:
24:af:d3:88:5e:09:9f:da:72:08:90:6a:14:b9:36:
f2:32:8c:4a:38:48:ac:b5:86:7d:78:97:78:be:e3:
cf:4f:c2:aa:ef:c9:aa:87:f3:09:14:f6:34:53:2e:
47:14:f8:1e:07:99:dc:7d:a2:e2:f3:3c:93:af:37:
a5:0a:5f:4a:98:16:e2:d9:99:13:ec:2f:fa:5d:d8:
45:16:aa:a1:11:9a:03:1d:09:a1:b2:c1:0d:95:fe:
06:a2:25:9b:9d:86:a1:df:9f:c5:a8:0f:cd:8c:84:
8e:72:d8:67:ca:72:28:c7:3e:24:a1:7f:15:7f:02:
c1:62:1f:6e:4e:29:30:d3:a5:ef:10:f1:8f:1d:61:
b6:ee:d7:1f:0f:f9:22:19:e0:5b:05:2e:f9:69:2e:
4a:aa:43:39:ed:6a:c0:16:83:78:2f:44:0f:1f:76:
8f:64:92:67:11:69:4c:32:78:6d:4d:97:3c:bc:73:
31:ac:72:8b:c7:68:56:cf:a6:b2:0c:b0:af:22:ab:
a3:a2:dc:e5:0a:c7:88:a0:c2:a1:08:4d:b8:d7:18:
6d:83:33:22:fa:94:c1:cd:96:4d:6d:58:92:69:9f:
0a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F7:80:38:16:4B:07:BB:A6:5F:F0:26:AB:AF:52:CA:13:90:34:8A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3138372e3133312e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.131.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:53:11:e9:8b:74:b1:62:8d:7b:e0:ab:6a:be:9a:0e:b7:13:
05:28:fd:e7:b8:2a:59:d5:ea:95:36:1d:e2:9c:80:43:0f:95:
29:e5:74:9c:a5:be:a6:6d:ae:07:34:af:2a:44:52:03:39:4f:
3c:8c:7d:48:7c:52:a4:5b:3a:67:62:35:9f:41:d8:b8:d4:15:
65:89:d6:6f:f2:6e:86:a2:28:4a:85:ff:0d:f1:45:bb:bc:0b:
6e:e4:10:42:c1:d7:a9:f8:68:c3:fd:e9:41:cd:4a:b9:93:52:
cf:16:2f:55:a9:f5:44:2c:45:cc:ad:6e:f9:8c:72:86:48:11:
38:8f:ff:74:4d:31:00:b7:44:c3:f7:8b:97:4b:14:bf:30:66:
00:d9:25:ab:4c:4b:4f:e1:4a:4c:be:94:5f:91:d3:58:5b:05:
52:64:6e:26:b4:60:3a:49:a0:95:df:36:10:3f:e7:01:5a:7f:
0a:b3:05:28:8d:2d:9e:67:58:84:b5:11:b0:81:35:48:0b:9f:
90:28:dc:82:63:6b:96:f8:9e:34:6d:8e:74:6e:a3:c2:c3:19:
8e:69:42:84:72:48:54:3f:4e:47:ac:0c:21:bd:2e:0f:ed:8a:
d4:f5:a3:dc:8b:c8:45:03:ee:ea:1b:97:a0:f4:5f:ee:b6:81:
4d:a9:7d:dd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUWow0ZmibbKsBJiLPOWix7mU9CUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMjVaFw0yNTEyMjYxMTQ3MjVaMDMxMTAvBgNV
BAMTKDlBRjc4MDM4MTY0QjA3QkJBNjVGRjAyNkFCQUY1MkNBMTM5MDM0OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOxUbCXykoJiCm5kXPv7iFBeY5
cIbnNNHid+EZJySv04heCZ/acgiQahS5NvIyjEo4SKy1hn14l3i+489PwqrvyaqH
8wkU9jRTLkcU+B4Hmdx9ouLzPJOvN6UKX0qYFuLZmRPsL/pd2EUWqqERmgMdCaGy
wQ2V/gaiJZudhqHfn8WoD82MhI5y2GfKcijHPiShfxV/AsFiH25OKTDTpe8Q8Y8d
Ybbu1x8P+SIZ4FsFLvlpLkqqQzntasAWg3gvRA8fdo9kkmcRaUwyeG1Nlzy8czGs
covHaFbPprIMsK8iq6Oi3OUKx4igwqEITbjXGG2DMyL6lMHNlk1tWJJpnwqLAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUmveAOBZLB7umX/Amq69SyhOQNIowHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzgz
NzJlMzEzMzMxMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzMzM2MzczODM3LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwbuDMA0GCSqGSIb3DQEBCwUAA4IBAQDFUxHpi3SxYo174KtqvpoO
txMFKP3nuCpZ1eqVNh3inIBDD5Up5XScpb6mba4HNK8qRFIDOU88jH1IfFKkWzpn
YjWfQdi41BVlidZv8m6GoihKhf8N8UW7vAtu5BBCwdep+GjD/elBzUq5k1LPFi9V
qfVELEXMrW75jHKGSBE4j/90TTEAt0TD94uXSxS/MGYA2SWrTEtP4UpMvpRfkdNY
WwVSZG4mtGA6SaCV3zYQP+cBWn8KswUojS2eZ1iEtRGwgTVIC5+QKNyCY2uW+J40
bY50bqPCwxmOaUKEckhUP05HrAwhvS4P7YrU9aPci8hFA+7qG5eg9F/utoFNqX3d
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:39:02 2025 by rpki-client