Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e3135332e302f32342d3234203d3e20323034313730.roa
File: 3139332e32322e3135332e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: pTwETmAhZKpoQh/xoePpwsn6c0pS10dje7MX2gIC3AI=
Subject key identifier: 87:8A:48:0A:D8:55:5E:C9:0B:D7:30:B8:5A:25:AC:58:0F:3F:1D:C0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5A3F1D78B96ACDEA156B0D17E12157144523185F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e3135332e302f32342d3234203d3e20323034313730.roa
Signing time: Fri 27 Dec 2024 11:47:43 +0000
ROA not before: Fri 27 Dec 2024 11:42:43 +0000
ROA not after: Fri 26 Dec 2025 11:47:43 +0000
asID: 204170
IP address blocks: 193.22.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:3f:1d:78:b9:6a:cd:ea:15:6b:0d:17:e1:21:57:14:45:23:18:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:43 2024 GMT
Not After : Dec 26 11:47:43 2025 GMT
Subject: CN=878A480AD8555EC90BD730B85A25AC580F3F1DC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7e:e3:39:71:ee:75:72:64:b2:c8:a1:43:d3:
79:83:a6:9d:3e:72:f3:17:60:19:e1:54:1d:4c:7e:
60:ea:20:b1:46:1c:98:a9:43:f4:4a:7f:6c:0a:72:
dc:0f:10:93:38:ec:41:03:92:c3:0c:fa:75:55:71:
92:14:17:17:36:5a:94:f3:10:73:73:9e:2e:71:1f:
d5:76:45:17:32:89:08:4d:e2:a4:86:0c:a3:97:59:
fe:23:ba:07:ba:ce:be:47:37:bb:7b:ab:b6:5a:29:
8d:87:05:81:0d:aa:45:8d:93:d6:a0:cd:d3:f9:d2:
d7:fe:65:d1:0d:d3:7e:73:e1:1f:57:9d:66:58:48:
43:28:a7:e5:b7:24:7b:72:fc:bb:3a:08:19:13:ff:
41:06:48:1f:22:60:1e:c6:bb:ca:75:87:fb:57:f4:
71:a5:c9:cc:b3:05:ba:55:6a:9c:90:9d:17:87:03:
ac:da:e6:ad:95:b7:34:1f:41:2e:fb:01:8b:86:f2:
24:0f:2f:9e:ac:f0:71:2d:1f:60:e3:34:4b:68:fb:
53:ec:84:02:0c:66:aa:de:94:90:ef:d7:87:23:63:
e5:c4:34:49:14:76:7a:0c:4b:cc:4d:87:3f:2f:0a:
e5:06:b2:62:31:45:49:03:02:ca:35:6c:a9:f6:1a:
4b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8A:48:0A:D8:55:5E:C9:0B:D7:30:B8:5A:25:AC:58:0F:3F:1D:C0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e3135332e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.153.0/24
Signature Algorithm: sha256WithRSAEncryption
56:82:fd:f3:d0:3a:80:9c:2a:a4:49:b4:a6:12:b7:63:bf:e7:
81:57:ee:3a:a2:37:d9:22:d7:41:e9:e7:74:b5:3d:03:3f:89:
ca:a1:36:64:02:5d:a7:54:3b:53:5f:49:08:dc:72:ed:6c:6c:
b5:21:c6:84:59:c7:3d:ed:02:a4:a6:6f:99:4f:6d:ab:14:dc:
e5:ff:fe:a7:4f:8c:44:02:3c:d3:b3:29:cd:3b:e3:08:d8:52:
4b:d6:e1:8c:05:f6:41:2b:27:b5:28:df:06:c2:b8:57:77:0e:
36:a2:67:ff:de:88:49:63:76:49:26:5e:1e:bb:57:49:cd:01:
60:35:ef:e3:ce:12:a6:c1:2e:f9:7e:65:0c:6a:8f:b7:94:37:
72:ee:dc:20:c3:d2:10:58:e1:09:8e:4d:6b:bf:aa:a1:0e:7d:
3a:9c:58:d9:8a:b1:d2:b5:52:dd:e5:78:28:67:66:a0:18:5c:
7d:b5:be:ee:e5:26:38:97:5a:c6:37:d9:b6:d6:e6:d3:dc:35:
9f:14:1e:6f:dc:c3:47:7f:93:06:0c:d9:d4:14:ff:2c:dc:d1:
b7:d5:fd:5d:07:36:87:cd:45:8f:45:3c:d2:1a:82:1a:cd:42:
da:7c:4d:72:be:c8:fc:b0:74:f3:d3:d5:31:d6:fa:c8:64:7f:
8e:7a:78:dc
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUWj8deLlqzeoVaw0X4SFXFEUjGF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyNDNaFw0yNTEyMjYxMTQ3NDNaMDMxMTAvBgNV
BAMTKDg3OEE0ODBBRDg1NTVFQzkwQkQ3MzBCODVBMjVBQzU4MEYzRjFEQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzfuM5ce51cmSyyKFD03mDpp0+
cvMXYBnhVB1MfmDqILFGHJipQ/RKf2wKctwPEJM47EEDksMM+nVVcZIUFxc2WpTz
EHNzni5xH9V2RRcyiQhN4qSGDKOXWf4juge6zr5HN7t7q7ZaKY2HBYENqkWNk9ag
zdP50tf+ZdEN035z4R9XnWZYSEMop+W3JHty/Ls6CBkT/0EGSB8iYB7Gu8p1h/tX
9HGlycyzBbpVapyQnReHA6za5q2VtzQfQS77AYuG8iQPL56s8HEtH2DjNEto+1Ps
hAIMZqrelJDv14cjY+XENEkUdnoMS8xNhz8vCuUGsmIxRUkDAso1bKn2GktdAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUh4pICthVXskL1zC4WiWsWA8/HcAwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMyMzIy
ZTMxMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDMxMzczMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMEWmTANBgkqhkiG9w0BAQsFAAOCAQEAVoL989A6gJwqpEm0phK3Y7/n
gVfuOqI32SLXQenndLU9Az+JyqE2ZAJdp1Q7U19JCNxy7WxstSHGhFnHPe0CpKZv
mU9tqxTc5f/+p0+MRAI807MpzTvjCNhSS9bhjAX2QSsntSjfBsK4V3cONqJn/96I
SWN2SSZeHrtXSc0BYDXv484SpsEu+X5lDGqPt5Q3cu7cIMPSEFjhCY5Na7+qoQ59
OpxY2Yqx0rVS3eV4KGdmoBhcfbW+7uUmOJdaxjfZttbm09w1nxQeb9zDR3+TBgzZ
1BT/LNzRt9X9XQc2h81Fj0U80hqCGs1C2nxNcr7I/LB089PVMdb6yGR/jnp43A==
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:01:07 2025 by rpki-client