Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32352e302f32342d3234203d3e20313336373837.roa
File: 3139332e32322e32352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: xLPvMIc7R+AnRnh3MkAZeQ+JIt+AvmXQ3YQsN78R/N0=
Subject key identifier: 02:F1:3C:AE:05:A1:47:8D:E8:44:75:B6:30:1E:E9:31:1D:E2:C2:C9
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0A36EE1C7B502E3FE0311C85EC87FB5AE49655E0
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:39 +0000
ROA not before: Fri 27 Dec 2024 11:42:39 +0000
ROA not after: Fri 26 Dec 2025 11:47:39 +0000
asID: 136787
IP address blocks: 193.22.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:36:ee:1c:7b:50:2e:3f:e0:31:1c:85:ec:87:fb:5a:e4:96:55:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:39 2024 GMT
Not After : Dec 26 11:47:39 2025 GMT
Subject: CN=02F13CAE05A1478DE84475B6301EE9311DE2C2C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:6f:ea:6e:d8:82:c1:70:00:5b:c8:56:0c:
13:d6:c8:80:a5:8e:c4:09:1f:a5:e1:91:66:26:35:
69:53:c8:79:b0:70:63:61:07:ae:80:44:b5:e8:b9:
52:0e:c0:c1:48:dd:7a:20:e0:f6:b9:a6:45:65:25:
36:2f:f4:8c:bc:e3:2b:0a:99:6b:64:fa:7b:30:c6:
cb:01:ab:71:92:2c:bd:f6:ce:f8:63:2f:08:68:ce:
54:99:49:95:53:ce:d7:3b:e2:bc:d2:0e:72:31:e5:
7e:7f:2d:79:7f:4c:30:07:49:5f:fb:33:4d:53:9f:
ae:90:74:b3:ac:2d:a5:3d:6c:c2:35:53:58:fc:fe:
c2:b2:98:ed:47:14:ef:9b:c5:ba:ee:03:02:7f:eb:
da:88:45:39:17:a0:a4:75:f8:7c:fe:fc:35:c4:dd:
11:3e:43:0a:b1:93:eb:53:65:6c:eb:10:d9:ae:d8:
a8:74:b0:60:6f:e2:3d:53:54:70:ca:ee:df:6a:77:
42:94:db:62:99:15:dd:83:5f:97:9f:d0:db:8d:0b:
09:42:c9:da:4d:e0:c6:48:7e:ab:16:e3:bb:f1:12:
a9:cc:21:ee:bc:3d:e5:ed:64:14:b1:7d:79:75:9c:
df:8d:7b:9e:f6:8d:4a:f0:20:79:66:cd:3e:14:bf:
0a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F1:3C:AE:05:A1:47:8D:E8:44:75:B6:30:1E:E9:31:1D:E2:C2:C9
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.25.0/24
Signature Algorithm: sha256WithRSAEncryption
71:27:37:c9:af:7e:6c:44:ff:c2:6e:19:5f:8b:15:30:ac:a0:
5c:2c:39:da:7b:56:bd:8a:ff:49:c3:d8:3a:84:62:8f:eb:c1:
c8:56:24:c5:fd:49:46:31:f2:f5:4e:77:67:33:ed:c1:d8:9a:
31:8e:ba:60:53:87:ea:93:e5:81:4d:f5:da:21:bf:4a:b3:4a:
ad:62:53:5f:b2:1b:04:73:5a:e8:fe:48:fa:4d:52:eb:d8:e3:
8f:e3:56:d2:45:22:73:8f:3a:d6:4c:3b:ea:63:48:cd:2d:ab:
07:4d:31:ce:84:e4:b1:0d:68:39:2a:ba:f2:f3:53:77:29:30:
f5:3b:e7:f4:4d:e1:bc:4d:f0:65:82:e4:76:d8:c6:c4:b8:f5:
9c:53:b8:81:5b:36:16:d4:1d:78:5a:26:77:f9:89:38:ab:cd:
37:15:fe:8f:1e:bb:ce:5a:e7:c3:96:2c:0d:3d:10:b3:4e:44:
52:a2:0d:8a:ce:71:ba:e0:f5:81:5f:b4:1d:7a:47:d9:5a:e0:
a9:7c:cc:b3:79:53:00:71:22:cf:53:e6:fd:8f:2b:0a:c6:73:
40:35:d5:37:50:6a:d6:51:d5:5b:e3:ff:38:15:bd:82:7e:f9:
b6:d7:11:83:94:6d:bc:ed:03:84:74:4a:f9:6e:06:10:5c:e2:
dc:7f:be:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:11 2025 by rpki-client