Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32372e302f32342d3234203d3e20313336373837.roa
File: 3139332e32322e32372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: o3VZmyKbDX7demDL122P6s7W1mmpG7GLhmaWwdzLWdw=
Subject key identifier: 90:A1:50:5A:0B:D6:0E:2C:A5:A6:F8:DC:AD:28:E6:5F:79:50:0C:AE
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1C8FA58A95B5EE001C7DF901708BC1A4B8051194
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:27 +0000
ROA not before: Fri 27 Dec 2024 11:42:27 +0000
ROA not after: Fri 26 Dec 2025 11:47:27 +0000
asID: 136787
IP address blocks: 193.22.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:8f:a5:8a:95:b5:ee:00:1c:7d:f9:01:70:8b:c1:a4:b8:05:11:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:27 2024 GMT
Not After : Dec 26 11:47:27 2025 GMT
Subject: CN=90A1505A0BD60E2CA5A6F8DCAD28E65F79500CAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:f1:8f:30:c9:1e:cb:41:c3:a1:19:a3:5b:
16:51:99:35:03:d1:c1:fb:93:63:38:19:cb:62:ef:
da:a4:10:e1:62:98:7d:6b:a1:a6:66:17:37:0e:2d:
ab:72:7c:47:e2:f2:8d:95:5e:a3:9b:11:86:40:04:
a9:fc:ac:a6:e5:04:7a:cc:d6:62:d6:3f:b2:eb:85:
3c:ce:75:72:74:6b:21:7e:2a:1a:a0:d0:07:a0:7b:
76:42:82:e3:4d:76:b9:0e:b0:30:52:d7:89:d0:24:
18:24:0e:a9:bc:11:45:6d:2d:fd:b7:0c:e5:b3:e8:
27:2f:01:91:f1:4a:51:0f:73:04:7b:4c:00:e9:cf:
9d:2a:18:c1:3c:89:c7:da:96:83:01:9b:1d:67:4b:
0b:02:d0:9e:7d:0c:1c:75:10:f6:ba:3b:e9:19:39:
0f:dd:c4:d0:8c:6c:f1:81:7c:6b:52:48:75:0e:2b:
90:e2:a1:cf:0b:6d:8a:13:14:2d:f7:38:97:70:be:
32:20:a9:35:5a:79:68:8a:2b:20:68:71:68:ca:67:
6c:32:b4:7a:06:f4:46:6b:c2:5d:e6:98:5d:83:aa:
96:18:ea:0b:fc:94:a0:8e:b4:5e:4d:2b:88:68:c6:
95:60:f7:8d:52:5a:1a:d5:94:fe:32:62:70:1a:2a:
bd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A1:50:5A:0B:D6:0E:2C:A5:A6:F8:DC:AD:28:E6:5F:79:50:0C:AE
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e32372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.27.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:26:d5:36:be:bd:d7:15:fe:6a:a6:7b:02:6b:fa:ad:bc:16:
04:42:cf:92:14:7a:d0:8b:82:0b:51:cb:71:23:49:0e:0e:c6:
ec:5a:35:97:f2:ab:90:2d:ab:3f:11:be:de:72:ee:f9:9d:ae:
62:52:c5:b9:c7:b6:7b:81:b1:2c:f1:62:6a:77:a2:05:89:bd:
a5:19:fc:e5:53:5f:e0:77:19:11:be:40:16:42:ca:16:6e:a2:
65:19:f2:86:82:60:51:04:77:33:8c:8f:83:93:86:59:1b:ed:
eb:24:a0:1f:a0:07:57:b6:ae:8a:4d:4f:4d:b4:f2:5e:f4:2a:
99:31:75:e6:74:0c:2e:3d:c0:50:38:f7:b4:ca:33:34:93:16:
ae:77:59:b8:93:90:dd:df:f6:7c:a9:43:41:6b:f4:cf:af:e1:
ed:9d:81:4e:bf:ce:5c:60:ed:34:f0:e4:66:cf:b4:c1:c5:e0:
21:58:02:bd:e0:46:59:77:65:e8:ee:59:59:48:19:4f:4a:83:
5a:c8:c9:fd:41:2f:84:f0:93:28:2a:c3:7b:d1:3e:03:87:61:
f4:28:03:3e:2f:b5:e2:a4:a0:4f:0a:42:ba:67:37:c3:84:5e:
e7:2b:c3:90:39:6f:39:b3:20:17:e2:7e:b0:ec:26:33:3d:be:
0b:c7:1d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:24:41 2025 by rpki-client