Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31322e302f32342d3234203d3e20313336373837.roa
File: 3139332e3230332e31322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Zyf3ZsW9osdZvePs48Tu+HTjA1ups8Kr6nrQ1mS8bpQ=
Subject key identifier: 58:91:70:D9:3C:ED:EC:EE:6C:80:79:9D:DB:57:36:F4:F8:B0:69:EA
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 78F26CAB0EDA074C3DCAA07F17044BC969B1D150
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:21 +0000
ROA not before: Fri 27 Dec 2024 11:42:21 +0000
ROA not after: Fri 26 Dec 2025 11:47:21 +0000
asID: 136787
IP address blocks: 193.203.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f2:6c:ab:0e:da:07:4c:3d:ca:a0:7f:17:04:4b:c9:69:b1:d1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:21 2024 GMT
Not After : Dec 26 11:47:21 2025 GMT
Subject: CN=589170D93CEDECEE6C80799DDB5736F4F8B069EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f7:54:37:1a:b2:26:a5:27:e2:27:98:ae:32:
09:7f:e7:89:52:70:44:cb:05:e3:57:e6:c4:4a:b2:
e2:d9:32:0d:42:7a:86:30:49:3c:9e:7a:15:9b:5c:
52:ae:3c:cd:ee:b7:36:ec:3d:c5:c9:69:e0:89:59:
ea:84:6a:fb:9d:54:5d:0f:25:aa:7d:11:2d:e0:bd:
2d:3f:3c:41:50:b4:d3:92:07:a6:1e:04:0b:bb:91:
49:d7:61:da:c9:2d:d8:a4:df:f2:27:79:b9:08:12:
8e:e3:2d:28:fd:d3:cc:97:5b:3d:d7:b9:4a:8d:1c:
c5:5f:7f:07:83:f0:b9:45:dd:3c:c1:a1:83:e3:76:
63:94:89:3f:0e:49:9f:64:a7:08:f5:20:3e:86:64:
cc:77:d2:1c:39:d6:72:9b:e2:db:40:fd:47:86:7b:
fa:65:87:25:17:c6:37:fb:d5:8c:53:90:ba:5f:fd:
58:28:2f:46:51:4a:6d:05:73:c5:54:a2:1d:ac:21:
08:f4:8e:2f:b7:fb:a8:fc:c1:35:e7:98:a0:b4:9c:
3b:87:ed:9d:37:a9:78:c8:09:41:dd:24:0d:7b:4f:
3f:2d:6c:01:29:ab:00:69:4b:0f:8e:06:81:f1:0a:
49:00:96:20:22:e5:4f:a2:36:fd:85:85:b9:74:fd:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:91:70:D9:3C:ED:EC:EE:6C:80:79:9D:DB:57:36:F4:F8:B0:69:EA
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.12.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c2:0d:d0:bc:97:0b:5d:8e:30:62:79:83:bf:ee:a7:72:29:
8a:01:69:cb:45:49:1e:d4:59:3a:11:68:aa:82:19:82:af:35:
d8:24:94:57:31:ee:8f:c8:c7:6e:fb:91:07:c5:b5:f8:50:d6:
75:c2:0a:92:5e:a7:e6:b9:35:85:ff:50:99:19:59:96:3c:14:
cf:40:c4:4c:0f:47:ae:3e:34:27:46:89:10:b2:2d:ba:59:10:
dc:6e:5f:f4:d0:87:b0:97:67:10:f8:01:19:c1:83:7f:d6:79:
8e:27:f0:1c:6c:f9:32:fc:f9:45:39:ce:f6:98:89:a4:be:5e:
4e:fd:98:a7:47:b2:06:0b:23:44:5c:6d:d5:05:0c:b5:a8:bb:
27:3a:80:34:f2:c4:a5:a8:d8:72:6a:19:ae:b4:ea:8d:38:d5:
00:d4:b9:f3:7b:39:19:c6:3f:08:9c:5c:b3:0b:c1:7a:88:9f:
c0:2b:e3:45:9e:dc:29:2d:0f:22:bf:9f:2c:02:dc:e5:8f:5a:
a6:e9:c2:da:a2:f0:7e:b2:eb:a0:19:7b:66:39:4a:63:01:ac:
53:be:c9:00:2b:46:bb:f2:c0:55:f6:87:7a:ba:3e:64:c6:eb:
de:cf:59:f4:88:ea:06:f3:65:5d:cf:ea:35:39:db:3e:23:67:
c8:b9:6a:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 10 02:14:27 2025 by rpki-client