Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234322e302f32342d3234203d3e20313336373837.roa
File: 3139332e34362e3234322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 5+VZTV9jI3Mk8EGFQOR2NeheABx1VPu1z0Pv0j1uLvM=
Subject key identifier: 9D:9F:DB:BE:12:5E:77:C4:9B:67:21:67:C2:23:3D:1E:93:DC:74:4E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1FD2829B0F61D976E45270AB8F341A09B64CBF67
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:38 +0000
ROA not before: Fri 20 Dec 2024 15:18:38 +0000
ROA not after: Fri 19 Dec 2025 15:23:38 +0000
asID: 136787
IP address blocks: 193.46.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:d2:82:9b:0f:61:d9:76:e4:52:70:ab:8f:34:1a:09:b6:4c:bf:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:38 2024 GMT
Not After : Dec 19 15:23:38 2025 GMT
Subject: CN=9D9FDBBE125E77C49B672167C2233D1E93DC744E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:5a:51:f6:df:01:8b:4e:ec:78:73:ae:aa:
a7:c4:75:87:97:38:28:b7:af:ed:d8:53:d5:b9:0f:
cf:9f:69:7c:c6:36:ab:43:9f:d6:02:e3:28:fc:9a:
19:13:3f:11:10:7c:ca:dd:fe:e1:04:a4:ca:55:af:
5b:2c:4b:95:59:43:d6:22:91:86:bb:64:09:64:97:
ee:f5:3b:e6:89:1a:c3:00:d0:a2:cb:27:34:78:21:
a0:31:ad:61:f8:f0:d4:b7:7c:d7:cd:f0:fe:11:93:
0e:74:99:6e:06:e6:76:85:15:40:a2:65:41:e5:40:
57:e8:ac:a0:90:a7:50:00:c2:e4:c4:a0:0a:0c:f0:
b9:ab:86:2c:62:55:0c:1c:a6:85:3d:c5:bf:b6:bc:
06:f0:b9:1f:17:c9:67:54:aa:81:6d:60:f9:2a:a5:
e9:94:4f:37:c9:34:45:03:9f:d2:2c:2b:1a:5d:a9:
13:67:15:5b:f2:5c:a6:cc:6f:59:22:05:86:a1:68:
47:6e:80:8d:68:19:61:f1:97:e3:45:e2:a9:3e:36:
4c:be:80:44:89:6c:a6:16:58:f2:18:23:06:2a:ce:
c7:88:e2:bb:25:3b:94:65:7e:66:a3:3a:20:49:1e:
15:27:f9:1d:08:b8:45:83:63:df:07:d7:28:91:f9:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9F:DB:BE:12:5E:77:C4:9B:67:21:67:C2:23:3D:1E:93:DC:74:4E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.242.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a9:87:e0:66:32:36:9a:2c:38:3f:13:a7:bc:a2:a4:0a:fb:
08:51:1b:58:f7:b1:ed:8c:25:5d:78:7b:a2:e7:82:08:d9:84:
d5:0b:c4:a7:42:1a:a9:20:58:aa:fb:5a:58:d4:ea:fb:f8:f7:
10:25:4f:37:d0:91:04:44:97:b9:42:2f:ea:61:d5:11:fd:35:
e1:a3:a3:dd:90:d3:42:8d:a2:3d:ae:bb:4d:c4:32:a4:15:a3:
04:79:88:3a:45:20:68:95:34:4d:e5:c8:c8:db:29:9c:42:99:
59:dc:62:74:3c:68:79:54:fd:04:33:7a:1d:0a:68:ac:82:2d:
61:ce:07:32:54:b0:4e:7a:cf:d7:fd:66:08:af:24:59:a2:7c:
65:a0:06:cd:ad:2e:a0:7e:a2:19:5a:3f:e9:1b:95:95:18:6d:
9f:6f:2f:7d:af:37:4a:59:36:31:e9:7b:4e:1c:44:4a:42:21:
1d:00:3a:82:d5:52:ee:51:0a:b6:a2:55:e4:b4:7d:d8:a8:73:
26:0a:5c:d6:94:68:11:0a:f4:01:aa:64:97:f0:c0:3e:f3:98:
bd:8f:af:4c:81:ad:43:c8:48:7c:28:7c:30:8c:bd:36:d6:4a:
eb:fc:9e:50:a6:ef:69:1d:78:40:ab:e2:09:8e:3c:f1:4c:d2:
40:0b:44:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:33:27 2025 by rpki-client