Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31352e302f32342d3332203d3e203531313637.roa
File: 3139332e3230332e31352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: ZWf2coQBW4+UvpsY8A+Rc5hVQQeSi/AdtHdNgMfncCU=
Subject key identifier: 7D:43:98:C2:9B:D2:8A:FF:55:F4:1D:B8:0A:52:43:81:A8:32:D7:4D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5748E5C5E5C8EE42D92B4B47804673A42596F08F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31352e302f32342d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:31 +0000
ROA not before: Fri 27 Dec 2024 11:42:31 +0000
ROA not after: Fri 26 Dec 2025 11:47:31 +0000
asID: 51167
IP address blocks: 193.203.15.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:48:e5:c5:e5:c8:ee:42:d9:2b:4b:47:80:46:73:a4:25:96:f0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:31 2024 GMT
Not After : Dec 26 11:47:31 2025 GMT
Subject: CN=7D4398C29BD28AFF55F41DB80A524381A832D74D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c7:88:a5:cd:a1:bd:fb:c3:b1:14:68:a0:98:
eb:63:10:84:6e:d6:3f:e2:e2:a3:0d:1c:d5:eb:dd:
23:88:ea:74:b6:8a:3a:0b:82:41:1f:1d:a2:c0:3f:
4a:88:33:54:b4:c4:40:51:c1:e0:b1:cf:fa:65:bb:
47:8e:2c:17:52:0c:3f:5b:58:8e:a8:e7:b9:58:ed:
64:31:ad:5e:38:26:0a:2c:c0:50:f1:c1:62:01:73:
8b:da:6a:0e:13:a3:56:2c:7a:c2:f7:e0:96:a6:cc:
6a:e6:9d:79:a5:33:02:cf:fe:a5:d2:20:b0:dd:e2:
d5:b2:a9:c6:5b:5f:62:79:e1:2c:ab:f5:9e:13:5c:
29:5a:1d:55:98:54:8a:7a:f7:1e:17:ba:9e:b3:e0:
f3:df:c8:1f:53:52:a5:81:db:52:32:31:30:aa:15:
78:df:af:ef:60:55:98:21:7e:e8:6e:ea:20:c8:58:
7a:ad:73:ba:07:19:af:b6:2d:be:d1:cc:37:72:66:
1d:b6:c4:f7:cb:50:46:47:45:df:3b:71:cd:bf:82:
7b:ac:48:cf:e8:fe:89:cc:36:93:4e:7a:e2:b1:18:
3e:7f:2d:19:e3:6a:ea:81:f7:92:aa:32:b5:30:2d:
0b:fb:4f:e2:f3:93:b0:88:fa:df:48:be:00:a9:f0:
57:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:43:98:C2:9B:D2:8A:FF:55:F4:1D:B8:0A:52:43:81:A8:32:D7:4D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.15.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:b1:13:04:b1:7d:8f:44:5e:2a:cd:24:97:34:77:47:9b:5b:
ec:f1:ba:86:ba:5f:dd:a5:f7:5e:e6:84:ca:c1:c6:a3:e6:00:
90:25:c9:e3:ee:b3:4f:4b:fe:32:a5:1b:d6:10:90:12:6b:ec:
ed:9d:f0:be:8b:d2:da:95:bd:3d:00:11:e4:5c:8e:f9:e0:43:
33:e5:68:6d:cb:da:ac:73:d8:3c:9c:9c:e1:e9:0a:b6:92:68:
d5:2b:30:82:a6:ec:32:ed:0d:70:84:c6:77:dc:71:b6:37:3a:
45:ce:15:f3:74:50:a2:cb:7a:30:09:c1:36:00:bc:78:0b:f8:
34:8c:31:1e:63:52:aa:99:0f:78:18:a3:76:42:a3:a2:71:d4:
f5:16:c6:5e:67:5b:7d:b1:fb:f2:c4:0b:0d:da:25:d5:d0:33:
7b:3f:30:33:c6:38:44:15:09:73:7b:b9:b4:49:1b:4a:36:48:
77:11:ae:ac:83:85:e2:c0:0a:27:cb:a6:9e:81:44:5d:0d:d1:
73:51:ce:53:6b:38:40:a1:13:23:6b:0e:fe:b9:78:f5:fa:3b:
93:ea:f0:85:97:00:4b:12:d4:5e:f2:d0:89:97:7f:ae:6c:90:
cc:f5:6d:88:17:6a:88:62:f3:63:8d:fb:e5:65:21:61:f9:e0:
26:f8:45:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:48:29 2025 by rpki-client