Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35362e302f32342d3234203d3e203239303134.roa
File: 3139342e3134372e35362e302f32342d3234203d3e203239303134.roa (raw, json)
Hash identifier: gcEiwixGC7EIetf7vF1pFoKhgri1UQrkhfN02WtJ8FQ=
Subject key identifier: 6B:85:0F:AE:AC:EA:D0:FB:FC:37:90:9A:77:F4:4D:CE:0C:D8:DD:A5
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 22D64A5C68A891D58F976EE0E86F12D12CCB34ED
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35362e302f32342d3234203d3e203239303134.roa
Signing time: Mon 06 Jan 2025 18:18:00 +0000
ROA not before: Mon 06 Jan 2025 18:13:00 +0000
ROA not after: Mon 05 Jan 2026 18:18:00 +0000
asID: 29014
IP address blocks: 194.147.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:d6:4a:5c:68:a8:91:d5:8f:97:6e:e0:e8:6f:12:d1:2c:cb:34:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jan 6 18:13:00 2025 GMT
Not After : Jan 5 18:18:00 2026 GMT
Subject: CN=6B850FAEACEAD0FBFC37909A77F44DCE0CD8DDA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:97:f7:a1:85:94:10:5c:bf:e2:80:b1:34:87:
59:46:ba:4f:eb:e0:24:3b:4f:3a:af:7f:0d:71:35:
89:b8:74:ff:30:19:af:35:fc:41:47:97:fe:5f:ce:
8e:d1:08:26:8c:fe:70:83:03:89:9f:54:ad:f9:58:
ef:1b:7c:17:36:a9:85:36:76:ea:2f:5a:64:ee:fa:
03:3c:74:b7:7a:c8:e5:f8:25:f8:db:5d:9a:78:b2:
91:07:3f:16:9c:fb:97:e6:97:61:a4:05:11:8f:90:
1b:75:01:35:bf:68:50:e4:3b:23:c9:5d:d7:8d:d1:
66:a2:39:9c:23:39:0c:8b:ce:4e:3a:51:12:0d:79:
ae:55:31:2a:93:23:cb:f0:a7:70:7e:50:bd:00:7d:
18:35:cf:fa:01:bd:3a:53:23:65:d7:61:62:3d:ea:
55:9d:31:d2:b7:28:0f:c8:67:7d:2a:8e:bf:86:e7:
4c:5d:2c:75:b4:28:b1:f7:22:9f:64:40:4b:72:bf:
01:da:52:fe:c7:c1:43:e0:05:52:66:79:dd:d5:2b:
00:75:53:d3:dc:ce:8d:95:f2:2d:c8:00:c5:18:ee:
a2:2d:a6:41:39:b9:fb:3f:e0:b3:b6:7c:cb:90:e6:
e6:0e:a3:34:6c:73:8a:a8:be:9f:dd:c2:e1:3f:05:
16:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:85:0F:AE:AC:EA:D0:FB:FC:37:90:9A:77:F4:4D:CE:0C:D8:DD:A5
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35362e302f32342d3234203d3e203239303134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.56.0/24
Signature Algorithm: sha256WithRSAEncryption
70:94:da:e8:c3:bf:cc:09:7d:82:7d:92:dd:1c:3b:e1:f6:04:
30:2c:d3:46:54:02:d0:33:8e:40:5d:3f:23:19:cc:2b:64:73:
04:28:41:96:9f:b3:09:c2:c9:ad:cd:c8:18:19:8d:2e:c0:90:
cd:e6:a6:d7:33:8b:22:02:9c:99:4c:ee:fb:77:38:c6:d0:e1:
30:2a:e3:9f:74:c9:70:ca:f6:16:9d:c9:f2:b2:56:88:fa:72:
33:b0:3a:cf:74:d0:a3:90:2c:bf:5f:38:63:6b:fe:43:78:7a:
8c:06:48:89:99:07:01:0b:63:a8:3d:b6:7c:0b:cf:c5:cb:46:
82:58:1e:34:45:54:96:56:ac:d7:69:f1:d8:6c:c6:c0:d5:a2:
7b:60:ce:53:6f:0a:9d:3e:ad:03:c9:aa:27:4b:6e:c2:be:bd:
c1:94:ee:1a:eb:9d:46:fe:ba:58:34:52:e5:02:86:97:50:fb:
b3:13:05:c7:90:59:69:7e:ea:94:30:42:4b:42:67:63:69:df:
d6:31:31:9d:24:b4:9e:b8:bc:ec:e0:79:61:3f:fb:56:96:4e:
65:ff:12:f2:32:b2:c4:a1:4f:d8:0e:9b:ca:c4:eb:d1:17:8e:
38:81:95:93:d9:17:fb:3d:90:69:ca:ab:b9:36:2e:c2:3e:92:
66:66:82:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:56:20 2025 by rpki-client