Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e38342e302f32342d3234203d3e20323034313730.roa
File: 3139342e3131302e38342e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: l2cj22FSA+nuRdaYicubI17zvIfngCstmJUlQfTxEwQ=
Subject key identifier: 1A:69:3F:99:20:66:42:21:3C:91:A9:01:C1:80:AB:80:28:79:4C:E1
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 46EB86A51972328A7E1F372E43487158AFD05E89
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e38342e302f32342d3234203d3e20323034313730.roa
Signing time: Fri 27 Dec 2024 11:47:11 +0000
ROA not before: Fri 27 Dec 2024 11:42:11 +0000
ROA not after: Fri 26 Dec 2025 11:47:11 +0000
asID: 204170
IP address blocks: 194.110.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:eb:86:a5:19:72:32:8a:7e:1f:37:2e:43:48:71:58:af:d0:5e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:11 2024 GMT
Not After : Dec 26 11:47:11 2025 GMT
Subject: CN=1A693F99206642213C91A901C180AB8028794CE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:7f:88:2b:6c:c2:26:16:78:3e:f4:a9:ee:
5f:7d:5c:1c:a0:5d:cf:6e:ae:a8:e5:b0:49:96:dd:
da:17:a5:b5:ed:59:fd:ea:e9:e2:2c:ab:3d:b8:3a:
bd:72:84:cd:fc:91:7a:ba:9c:ee:70:96:a7:77:3b:
92:ea:7a:81:66:d8:43:9b:20:8d:69:64:14:43:87:
70:93:62:5a:a8:99:eb:1b:c5:38:05:11:29:fa:16:
06:c6:65:c6:fc:90:8c:94:34:ae:e1:7b:4d:20:97:
98:39:6b:65:15:ef:fd:15:54:71:2b:df:7f:2a:cb:
e2:67:f9:15:e0:c2:91:60:49:d5:6f:0c:0a:45:0f:
8c:d6:91:a7:ee:f9:bd:4f:fb:e2:5d:81:d7:3f:94:
2a:63:c3:44:74:76:a3:86:de:5c:12:37:08:5c:b6:
b2:4f:0b:f1:63:fd:ac:e9:df:06:9c:13:43:41:a1:
a6:4b:26:c7:c4:a9:32:78:27:1d:06:fb:16:ae:12:
82:9e:03:4b:de:c6:b3:47:de:97:7d:ee:5c:60:ce:
a1:b5:2b:5c:18:ac:64:6f:c7:ea:88:f1:e4:fe:a1:
94:76:4e:9b:09:1f:32:09:72:3f:41:4a:45:96:04:
64:4d:a6:32:2e:59:81:d2:00:03:e5:7a:54:f6:e0:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:69:3F:99:20:66:42:21:3C:91:A9:01:C1:80:AB:80:28:79:4C:E1
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e38342e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.84.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:69:c3:ec:e0:ea:f3:6f:65:94:52:72:e5:b4:37:c5:a4:6c:
b4:96:29:54:ea:19:7b:c4:65:21:b9:e4:e1:56:8f:82:18:16:
fd:79:dd:a1:7b:cf:c1:e9:10:fa:21:fe:98:fe:e0:5e:91:18:
8d:86:6b:85:b0:14:3a:cb:92:b3:5a:a6:64:65:62:4b:61:29:
e5:e1:4a:81:a3:f5:4d:91:de:05:39:b6:71:f7:08:fb:23:9c:
a1:a6:6b:56:c2:bf:d6:59:2a:33:ee:7f:88:cb:c3:b8:21:41:
dc:7a:f8:f7:d8:4a:84:5b:98:cc:a2:1b:d0:0c:3d:ad:d6:19:
0b:3b:5d:f0:48:b0:2f:56:f7:b2:66:e6:37:ae:25:a8:07:f7:
32:04:f3:6c:f7:4d:85:59:a8:12:88:be:1f:31:c8:49:8e:6d:
7b:4e:da:c5:64:8f:b7:5d:00:3a:9e:18:a7:0f:b5:0b:41:e5:
bc:b6:01:06:28:e8:dc:5a:c6:4f:c1:37:37:f7:30:c0:57:e4:
73:6a:14:c0:13:fb:73:3f:83:7b:ac:6d:14:ff:5b:e0:f5:a9:
87:e9:98:c7:7f:4b:1c:6e:2d:1f:93:29:d9:b0:c9:0d:4c:08:
f6:60:60:fe:67:d0:78:4f:db:24:33:28:23:f9:b7:6a:e7:13:
22:fe:60:3a
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIURuuGpRlyMop+HzcuQ0hxWK/QXokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMTFaFw0yNTEyMjYxMTQ3MTFaMDMxMTAvBgNV
BAMTKDFBNjkzRjk5MjA2NjQyMjEzQzkxQTkwMUMxODBBQjgwMjg3OTRDRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsVX+IK2zCJhZ4PvSp7l99XByg
Xc9urqjlsEmW3doXpbXtWf3q6eIsqz24Or1yhM38kXq6nO5wlqd3O5LqeoFm2EOb
II1pZBRDh3CTYlqomesbxTgFESn6FgbGZcb8kIyUNK7he00gl5g5a2UV7/0VVHEr
338qy+Jn+RXgwpFgSdVvDApFD4zWkafu+b1P++Jdgdc/lCpjw0R0dqOG3lwSNwhc
trJPC/Fj/azp3wacE0NBoaZLJsfEqTJ4Jx0G+xauEoKeA0vexrNH3pd97lxgzqG1
K1wYrGRvx+qI8eT+oZR2TpsJHzIJcj9BSkWWBGRNpjIuWYHSAAPlelT24FtjAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUGmk/mSBmQiE8kakBwYCrgCh5TOEwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzEz
MDJlMzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDMxMzczMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMJuVDANBgkqhkiG9w0BAQsFAAOCAQEAy2nD7ODq829llFJy5bQ3xaRs
tJYpVOoZe8RlIbnk4VaPghgW/XndoXvPwekQ+iH+mP7gXpEYjYZrhbAUOsuSs1qm
ZGViS2Ep5eFKgaP1TZHeBTm2cfcI+yOcoaZrVsK/1lkqM+5/iMvDuCFB3Hr499hK
hFuYzKIb0Aw9rdYZCztd8EiwL1b3smbmN64lqAf3MgTzbPdNhVmoEoi+HzHISY5t
e07axWSPt10AOp4Ypw+1C0HlvLYBBijo3FrGT8E3N/cwwFfkc2oUwBP7cz+De6xt
FP9b4PWph+mYx39LHG4tH5Mp2bDJDUwI9mBg/mfQeE/bJDMoI/m3aucTIv5gOg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:05 2025 by rpki-client