Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3130382e302f32342d3234203d3e20313336373837.roa
File: 3139342e31352e3130382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: aj18WKJf3zgKBzuDL/Q36/9p6abbuezLp4fUcUUJtdE=
Subject key identifier: 72:4D:79:8A:4D:04:06:9E:D0:72:DD:92:A3:E0:10:BE:B7:14:68:CE
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1930077C154501DAC40DC1491E6775455F137D7E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3130382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:28 +0000
ROA not before: Fri 20 Dec 2024 15:18:28 +0000
ROA not after: Fri 19 Dec 2025 15:23:28 +0000
asID: 136787
IP address blocks: 194.15.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:30:07:7c:15:45:01:da:c4:0d:c1:49:1e:67:75:45:5f:13:7d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:28 2024 GMT
Not After : Dec 19 15:23:28 2025 GMT
Subject: CN=724D798A4D04069ED072DD92A3E010BEB71468CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:16:1c:47:c3:42:ea:f4:14:23:5f:1b:27:
f2:ef:b4:ef:1f:7b:2a:12:61:06:5e:87:96:3a:a9:
a7:cc:14:f0:0e:d1:a4:dd:65:f5:f7:08:04:f3:fa:
66:61:3e:df:c7:7d:14:da:62:68:6c:5f:c1:e1:b7:
18:46:4a:45:95:13:07:1a:20:83:07:b7:12:c8:2c:
fa:77:e7:c2:1b:1f:c1:09:bc:b9:1e:f1:91:f0:a9:
a7:23:cb:fd:d2:2d:84:54:81:91:ae:fe:1a:c3:55:
b1:06:c9:5d:85:5a:7f:90:34:39:bd:e9:b1:c1:66:
5c:d0:ad:7d:e6:8f:6f:a4:98:3c:4c:94:eb:99:38:
03:1a:e9:67:00:4a:23:c3:37:a7:99:17:6b:91:2d:
2c:09:ea:b8:b2:51:fe:f5:46:69:de:8c:75:fb:67:
d9:44:b3:dd:0b:01:b5:94:b6:c0:a0:67:6a:39:e0:
9e:e2:de:62:c1:40:3d:40:bc:43:dc:c3:20:db:d7:
7f:fb:84:51:bb:c4:45:03:2a:2b:c7:3f:a0:b2:db:
1a:03:47:c6:c4:b7:23:5b:47:e6:59:9e:2b:09:97:
1f:b2:b9:4e:ce:1f:fa:f9:23:bd:d0:4b:85:de:8a:
72:e7:a4:25:d4:b3:cf:7b:7b:29:a7:44:be:f1:c6:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4D:79:8A:4D:04:06:9E:D0:72:DD:92:A3:E0:10:BE:B7:14:68:CE
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3130382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.108.0/24
Signature Algorithm: sha256WithRSAEncryption
20:9a:b1:f5:a4:14:09:37:6d:8c:f0:55:71:c6:1b:d7:c0:f7:
8d:02:82:ba:a9:a1:5c:8f:66:8b:c7:2f:ae:d7:02:c1:ee:da:
18:0e:16:72:e0:98:51:72:a5:de:af:b4:28:96:ec:00:a3:f2:
45:68:8e:6d:34:2d:e8:39:7c:d5:20:be:fd:a3:15:04:18:d1:
ec:d7:86:2b:ba:69:45:21:d1:54:90:7e:3b:52:ed:2d:38:f1:
de:d7:ed:8e:16:5c:13:a3:06:8a:f9:93:21:87:77:2e:92:ee:
53:a2:68:dd:cb:ab:06:ad:f9:6e:c3:0f:de:c8:0f:9c:9a:87:
0e:d4:70:12:09:66:f3:bd:85:d2:c7:4a:ed:c8:c0:a9:6b:2c:
66:9c:3c:9d:09:8a:31:8f:0f:60:ec:35:6a:02:0a:d5:3b:3a:
70:3e:f8:8b:9b:77:6d:dc:b8:b9:8b:8c:06:bc:93:4a:74:ce:
6a:8c:cc:d9:70:13:ea:6f:18:54:f5:65:35:3e:6c:1a:f6:0d:
88:f7:00:2d:68:00:b5:bd:2b:ff:95:1f:d2:09:58:46:f1:ee:
8e:6e:ba:30:05:87:bc:f9:f0:b3:0d:9a:fc:26:3f:9e:de:84:
74:7c:d2:dc:bc:b6:98:27:25:0d:b0:38:6e:ea:6a:87:19:41:
55:97:d0:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:04:20 2025 by rpki-client