Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33362e3233372e302f32342d3234203d3e20313437303439.roa
File: 3139332e33362e3233372e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: U5Z0ub+hifwC8VIgcC3nUBwoTW6cis2ie+MSmtOiFCg=
Subject key identifier: CA:27:3E:32:9E:5F:F6:4B:65:3D:82:90:A7:25:C6:78:FA:07:3A:94
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1B098B7DCC528A03F4337D704952206B6FA81C0E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33362e3233372e302f32342d3234203d3e20313437303439.roa
Signing time: Fri 27 Dec 2024 11:47:29 +0000
ROA not before: Fri 27 Dec 2024 11:42:29 +0000
ROA not after: Fri 26 Dec 2025 11:47:29 +0000
asID: 147049
IP address blocks: 193.36.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:09:8b:7d:cc:52:8a:03:f4:33:7d:70:49:52:20:6b:6f:a8:1c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:29 2024 GMT
Not After : Dec 26 11:47:29 2025 GMT
Subject: CN=CA273E329E5FF64B653D8290A725C678FA073A94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:80:e6:a3:a4:28:c6:ff:65:89:ae:41:9d:f7:
95:68:77:c3:59:e2:56:d8:21:ce:38:77:4d:60:d5:
6b:27:34:ca:06:c0:a7:b3:cd:b5:1b:4c:9a:15:14:
b8:04:59:11:3b:94:d6:48:34:0e:a6:9e:92:78:7e:
20:88:6c:b1:b0:6f:d4:df:93:28:62:b1:ef:96:bd:
b4:b1:fe:ab:35:eb:62:3c:a1:b0:3c:92:a9:bc:6d:
27:3f:d5:e7:f9:95:a9:d3:68:92:ee:69:86:82:5e:
67:47:38:d9:ec:fe:14:73:e7:c1:4a:e9:90:93:ba:
5d:3f:e2:c7:f9:7a:55:42:49:fe:15:be:3e:f1:4e:
f2:a0:ad:d2:a4:3f:7c:9c:de:27:b3:56:25:72:f4:
be:06:92:98:be:8a:d0:ff:b2:27:e2:6b:f9:cd:15:
c3:43:4d:75:3f:ff:f9:c7:7c:b3:8c:85:6c:45:95:
52:8f:b1:8d:9c:e1:80:45:03:c6:e9:48:26:35:2a:
c5:20:b3:d3:8d:fc:e0:53:bd:9f:c5:19:4a:f5:fb:
1c:d4:eb:96:f7:ee:03:48:31:62:0d:b3:d8:76:dd:
33:d9:8c:e0:d5:6d:2f:50:a0:3c:e2:f1:d3:a3:61:
cd:89:1a:1d:f4:6f:64:25:29:77:56:97:7d:e8:8f:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:27:3E:32:9E:5F:F6:4B:65:3D:82:90:A7:25:C6:78:FA:07:3A:94
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33362e3233372e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.237.0/24
Signature Algorithm: sha256WithRSAEncryption
68:29:a1:2b:7d:7a:6a:61:1a:b3:f6:9b:a7:97:9e:ac:78:1f:
29:a2:46:ad:df:54:fc:1e:c7:5b:33:1d:28:b5:47:4e:6b:ac:
98:cf:b1:1f:03:70:a3:e4:f1:af:3f:f5:5a:43:28:91:eb:3d:
e5:a3:93:f5:55:39:36:4c:ae:67:d8:21:d2:34:02:6a:a3:40:
68:e9:ae:8c:d3:7a:54:01:78:61:22:20:4e:01:84:7d:76:ae:
11:55:96:a5:ee:67:ef:c3:2b:9b:28:b7:8b:1d:a8:7c:2c:bc:
d3:17:0c:59:e6:8f:89:d2:22:9c:77:a7:18:2c:f4:15:7e:fb:
91:f6:29:3a:59:55:66:39:cd:09:14:f8:aa:e2:5c:15:bd:7f:
09:c9:16:fb:fc:fd:52:22:cd:86:c9:af:67:71:62:e1:7a:fe:
78:b8:7a:7f:d5:97:1e:df:0b:32:44:f9:ec:fa:2f:f9:d9:f5:
57:a0:b9:94:ac:08:e8:da:85:f6:eb:7b:eb:4a:ce:1d:8f:a0:
91:d0:98:7b:bb:a8:6c:ce:ce:98:4e:cf:d3:4b:00:00:b2:57:
cc:1c:33:4d:90:7d:aa:cc:b0:af:5a:fd:73:2c:70:5f:b5:a5:
cd:80:4d:36:4b:59:26:f2:b6:2a:ac:a3:cc:00:d2:3c:1a:70:
45:42:5d:b0
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUGwmLfcxSigP0M31wSVIga2+oHA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMjlaFw0yNTEyMjYxMTQ3MjlaMDMxMTAvBgNV
BAMTKENBMjczRTMyOUU1RkY2NEI2NTNEODI5MEE3MjVDNjc4RkEwNzNBOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtgOajpCjG/2WJrkGd95Vod8NZ
4lbYIc44d01g1WsnNMoGwKezzbUbTJoVFLgEWRE7lNZINA6mnpJ4fiCIbLGwb9Tf
kyhise+WvbSx/qs162I8obA8kqm8bSc/1ef5lanTaJLuaYaCXmdHONns/hRz58FK
6ZCTul0/4sf5elVCSf4Vvj7xTvKgrdKkP3yc3iezViVy9L4Gkpi+itD/sifia/nN
FcNDTXU///nHfLOMhWxFlVKPsY2c4YBFA8bpSCY1KsUgs9ON/OBTvZ/FGUr1+xzU
65b37gNIMWINs9h23TPZjODVbS9QoDzi8dOjYc2JGh30b2QlKXdWl33ojzO1AgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUyic+Mp5f9ktlPYKQpyXGePoHOpQwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMzMzYy
ZTMyMzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNzMwMzQzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMEk7TANBgkqhkiG9w0BAQsFAAOCAQEAaCmhK316amEas/abp5eerHgf
KaJGrd9U/B7HWzMdKLVHTmusmM+xHwNwo+Txrz/1WkMokes95aOT9VU5NkyuZ9gh
0jQCaqNAaOmujNN6VAF4YSIgTgGEfXauEVWWpe5n78Mrmyi3ix2ofCy80xcMWeaP
idIinHenGCz0FX77kfYpOllVZjnNCRT4quJcFb1/CckW+/z9UiLNhsmvZ3Fi4Xr+
eLh6f9WXHt8LMkT57Pov+dn1V6C5lKwI6NqF9ut760rOHY+gkdCYe7uobM7OmE7P
00sAALJXzBwzTZB9qsywr1r9cyxwX7WlzYBNNktZJvK2KqyjzADSPBpwRUJdsA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:53:55 2025 by rpki-client