Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34322e39382e302f32342d3234203d3e20313336373837.roa
File: 3139332e34322e39382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: rFiTw7LXM85Lnq3aj39vNujVpg7o5LNKUBtJWtayw1o=
Subject key identifier: DE:E5:99:72:F9:2B:83:8E:9F:87:00:FE:FF:1A:CB:8F:F7:A4:40:34
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 309F983689D4F987A368C0D0F615B90672887714
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34322e39382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:27 +0000
ROA not before: Fri 27 Dec 2024 11:42:27 +0000
ROA not after: Fri 26 Dec 2025 11:47:27 +0000
asID: 136787
IP address blocks: 193.42.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:9f:98:36:89:d4:f9:87:a3:68:c0:d0:f6:15:b9:06:72:88:77:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:27 2024 GMT
Not After : Dec 26 11:47:27 2025 GMT
Subject: CN=DEE59972F92B838E9F8700FEFF1ACB8FF7A44034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:4c:73:82:93:41:b9:ff:f7:6a:00:f7:f7:a0:
07:ac:83:0f:a2:ab:78:59:eb:f6:c0:29:8c:29:ba:
86:5e:b0:4f:5f:19:cc:10:32:b2:d1:4a:83:25:85:
23:83:d7:e8:b1:f2:9f:87:3c:73:11:1b:71:49:07:
7a:1e:d8:09:cf:7a:98:7e:c0:89:14:59:c1:9e:d2:
6c:09:c0:7e:35:5b:76:69:94:ed:54:a0:ca:2f:57:
31:ea:1e:c4:2b:75:82:37:f4:c1:8c:9c:42:e3:a0:
6c:22:8e:d1:32:44:6a:cb:d7:f9:c6:49:a1:b8:8b:
56:f8:d7:04:3b:53:c3:07:20:10:b9:8c:39:56:fd:
34:90:3c:73:02:02:ff:3e:b4:fe:ea:fd:0e:c1:c9:
6b:d5:1e:9e:23:f6:f5:4c:46:00:ad:ca:5b:c7:6c:
4b:93:91:03:dc:28:f6:76:b7:1c:c5:5c:8a:1d:a1:
65:0b:a7:f4:a9:43:be:22:48:46:08:8a:5e:e4:07:
e8:3f:ef:35:d1:7d:31:ac:ac:3f:8b:1a:48:b1:b6:
f4:99:2f:2e:52:0e:b5:44:de:26:e7:e2:36:b5:47:
01:fe:e8:4b:18:c0:00:0e:56:56:2f:58:2b:22:88:
e5:60:d5:18:37:50:02:e3:94:10:77:72:a1:cc:da:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E5:99:72:F9:2B:83:8E:9F:87:00:FE:FF:1A:CB:8F:F7:A4:40:34
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34322e39382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.98.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:36:e2:a6:37:22:05:66:a4:70:c8:a1:17:14:46:f7:99:82:
9a:89:74:cc:01:e9:df:d0:e2:bc:5f:83:10:d2:c4:03:cb:35:
0f:5f:f1:d8:5e:9d:98:a6:44:7f:d0:5b:0b:8e:fa:e7:2d:67:
89:d6:f9:d9:d1:5d:ee:18:72:23:b5:37:07:29:a8:0d:91:a1:
cf:61:43:59:a7:fb:1b:8c:f1:3a:89:91:68:17:a3:17:94:d5:
61:5a:94:09:d0:ec:cb:8b:1a:31:d9:db:cd:5d:7b:71:00:9c:
33:1c:0f:0d:e7:cb:da:83:c1:68:20:8d:ae:70:68:b5:ce:a8:
54:25:6c:0b:8a:b4:b1:f6:52:29:1e:8a:73:ac:20:21:bc:cc:
7a:31:4d:95:e6:dd:d2:0a:78:ec:d8:a0:3f:09:30:02:37:8f:
4e:4e:dd:f0:f8:f6:0b:2f:d0:98:a2:16:a0:c2:2b:84:a1:63:
67:63:6c:66:2e:00:55:c5:60:38:ea:4f:0b:89:48:f2:f1:e9:
c1:e4:d4:b3:60:e1:25:af:1b:45:f3:78:e2:7e:b8:3e:4a:6b:
e9:1c:71:f9:52:74:27:43:75:92:a3:b4:96:71:e4:c2:29:31:
1b:7f:10:9e:d5:e6:41:10:b6:30:58:18:f2:4d:80:2f:3b:e3:
0d:76:da:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:53 2025 by rpki-client