Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31342e302f32342d3234203d3e20313336373837.roa
File: 3139332e3230332e31342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: JO3repZ9fnAWsRU+pBD4Y7ocwTWjce6Aww8Lb+sqb8E=
Subject key identifier: 76:23:17:20:76:5C:6C:05:A8:44:B8:D9:5F:10:78:94:42:1D:E3:F0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 13C368D0B53FB004E6BEAB6C43019DE940047756
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:29 +0000
ROA not before: Fri 27 Dec 2024 11:42:29 +0000
ROA not after: Fri 26 Dec 2025 11:47:29 +0000
asID: 136787
IP address blocks: 193.203.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c3:68:d0:b5:3f:b0:04:e6:be:ab:6c:43:01:9d:e9:40:04:77:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:29 2024 GMT
Not After : Dec 26 11:47:29 2025 GMT
Subject: CN=76231720765C6C05A844B8D95F107894421DE3F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4b:05:c9:6d:35:6c:ab:c1:3a:67:18:e8:ac:
4d:95:48:09:5f:08:77:a7:08:07:e9:4e:8d:29:17:
87:77:12:ba:09:d7:57:16:f5:5a:04:91:cb:51:07:
f6:1c:0d:b5:df:3d:7c:6d:98:03:9b:ab:ac:f4:bf:
9f:99:25:43:87:e6:e3:ea:3d:81:2b:e8:02:0d:c9:
92:a9:e2:49:ce:9d:bb:b2:db:f9:9a:1e:55:98:e1:
c4:b1:b4:b3:97:1d:73:ac:11:e2:52:80:01:1a:f4:
1d:41:e2:65:03:e0:3d:ac:5b:1b:d1:f3:bc:9d:3e:
8a:31:70:6a:1b:ea:97:0a:fe:62:84:f2:30:f8:91:
93:df:3b:70:34:2b:e3:a5:f3:18:84:1b:8d:e5:2e:
47:5f:85:c9:64:de:5f:f6:db:13:d6:93:22:b2:93:
96:fa:c1:83:75:83:e9:df:fc:1f:58:85:11:1e:ed:
ed:8b:76:45:72:c6:30:a7:87:76:d1:6e:f5:83:93:
9f:66:20:5a:a4:69:20:31:ba:50:4e:00:e1:8a:5b:
94:61:bb:6c:0c:37:67:77:e6:83:ce:35:ad:88:eb:
65:21:f3:1b:61:54:7d:bc:1d:d0:47:01:78:b9:44:
4b:44:f2:b7:24:62:c5:13:86:79:22:8e:79:87:41:
54:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:23:17:20:76:5C:6C:05:A8:44:B8:D9:5F:10:78:94:42:1D:E3:F0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.14.0/24
Signature Algorithm: sha256WithRSAEncryption
db:31:df:93:af:9b:d2:3c:14:d4:87:f6:9d:00:f9:82:ff:86:
f2:2e:4a:5b:6e:45:75:a7:1c:70:66:f4:fd:24:91:3a:c0:32:
84:01:e9:c6:18:1f:b1:57:67:eb:be:90:f2:76:f3:86:33:61:
6b:fd:cb:97:f5:70:33:88:8b:d6:ed:86:44:fc:fc:b7:c7:d6:
c6:d5:57:d6:fb:96:85:02:31:9d:00:45:87:a6:6e:8f:b2:0d:
44:8b:a3:9f:43:07:b0:f1:f1:ff:4a:67:8b:e4:8b:ca:d2:a3:
05:ea:3c:cc:0a:b0:2b:39:39:84:0e:ff:d9:85:4b:bc:5d:4b:
0c:91:6b:46:f5:5a:40:09:59:e8:e7:da:69:38:5e:97:12:e2:
00:ef:01:5b:19:a9:96:9b:24:c1:72:7d:bc:8e:da:21:c4:a2:
17:bf:6a:b2:f4:97:c3:14:c4:1f:0d:34:57:f4:94:fb:7e:f7:
1c:5b:ba:6b:fe:67:0a:60:7e:c6:21:f3:27:c3:54:10:ec:a3:
6e:3c:31:50:18:bd:44:d1:fe:77:2a:be:46:3a:05:0c:cb:b1:
63:b3:d1:0e:30:4c:44:03:d3:17:dc:58:81:ec:b5:05:7a:33:
cb:c0:aa:cb:2b:87:42:e9:3a:ac:03:22:0d:b0:fc:16:bb:52:
71:04:01:77
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:41:11 2025 by rpki-client