Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34322e39362e302f32342d3234203d3e20313336373837.roa
File: 3139332e34322e39362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: mrjFFpvwi88NB8P11NiMAjxyyLK2pUwdcOI/QAb3kLE=
Subject key identifier: 53:48:DA:84:71:FF:40:80:D8:0F:F6:E4:01:5D:B2:CC:B2:66:33:E8
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 616AA7B9E38F6FF31EB986852E485719572DE17A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34322e39362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:48 +0000
ROA not before: Fri 27 Dec 2024 11:42:48 +0000
ROA not after: Fri 26 Dec 2025 11:47:48 +0000
asID: 136787
IP address blocks: 193.42.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:6a:a7:b9:e3:8f:6f:f3:1e:b9:86:85:2e:48:57:19:57:2d:e1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:48 2024 GMT
Not After : Dec 26 11:47:48 2025 GMT
Subject: CN=5348DA8471FF4080D80FF6E4015DB2CCB26633E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:87:71:c2:d8:cd:57:e8:b9:a8:a0:9e:e1:
3c:71:2e:2f:d3:96:01:c6:b7:45:ac:fd:b6:8e:f8:
ca:e7:73:ef:10:82:43:a1:8a:f3:b5:9f:5a:fb:56:
af:7e:44:6f:17:5c:bd:91:9d:27:4b:66:67:25:70:
b4:da:47:ef:9d:85:43:cb:cd:fe:34:4f:97:64:45:
a3:5b:71:a5:65:08:79:fa:7a:86:3f:e6:d7:c0:03:
3a:3f:06:9b:5d:b0:34:d7:23:3c:c5:8f:0c:55:18:
56:c0:8f:e8:7b:38:fb:f8:0f:67:40:b7:9b:53:59:
22:53:6d:48:92:17:7e:b2:96:48:21:9b:90:25:6b:
0d:29:ec:fd:bc:c7:64:39:84:19:5c:3c:e5:57:0c:
1f:e0:ec:f2:0a:3e:e5:e0:0a:47:54:64:24:07:ce:
80:68:99:79:38:73:64:ae:0d:ba:dd:5d:ee:2d:62:
97:44:06:a1:d7:c4:83:29:78:83:f1:4e:3e:70:2f:
16:98:91:28:85:d0:cf:b5:0a:f0:f2:88:3d:1b:7d:
25:45:10:fc:3c:59:e9:15:30:d2:67:09:0c:ab:fd:
d2:9b:dd:7c:72:72:7c:2e:9f:37:29:0f:a6:44:a2:
59:0f:86:d8:95:29:97:22:de:75:12:f0:93:34:11:
c7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:48:DA:84:71:FF:40:80:D8:0F:F6:E4:01:5D:B2:CC:B2:66:33:E8
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34322e39362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.96.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:96:ce:ca:a0:e1:be:81:03:19:e2:62:aa:53:2c:62:61:55:
60:36:72:73:7f:6d:a0:07:fd:c9:4d:2f:b1:58:84:27:48:60:
0a:1a:ce:96:0d:a5:06:6b:9f:9a:46:06:b4:c1:52:fc:74:f7:
b0:4f:56:57:6a:78:a2:d6:d9:ed:0b:28:88:a7:33:ac:29:93:
3a:ab:b5:f6:47:55:91:d5:c5:f1:58:69:c6:74:24:16:39:1d:
14:62:a4:41:39:15:b2:d3:3c:1b:16:d9:f5:9b:b8:e5:97:87:
04:ba:db:30:df:dd:7b:52:51:33:17:17:10:24:92:4c:bc:a8:
68:98:3e:48:4a:4a:e8:ea:9d:00:88:96:41:f4:7c:eb:31:f3:
51:7c:73:b0:1d:53:a9:bf:0b:dd:3f:f9:25:55:53:f3:3a:f0:
10:ce:67:61:e6:22:d6:97:9b:96:9d:a9:8b:a6:e5:ef:3c:88:
ce:eb:aa:4e:ec:59:43:59:4c:09:ac:30:d1:29:92:9f:32:8f:
6f:66:4f:09:a4:ca:fe:58:6a:48:94:11:f1:76:e9:b7:23:d3:
aa:69:f6:16:4e:7b:ab:6c:86:de:64:6f:e7:e9:6c:68:5c:5f:
68:78:61:50:dd:5f:ac:2b:b7:9c:7a:08:4c:6c:55:ac:10:0e:
bd:ab:8e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:42 2025 by rpki-client