Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3131302e302f32342d3332203d3e203531313637.roa
File: 3139342e31352e3131302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: h1tvO11bpzkhJ2A/NrYxk6mB4pTo0rExFXk28Ynj5JY=
Subject key identifier: 4D:76:98:D8:60:04:D8:E1:97:32:3E:6B:1F:DA:3A:46:E4:94:F4:6C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 37601B6A0DEA994C353A6281D0CD3C29D254EE72
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3131302e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Dec 2024 15:23:38 +0000
ROA not before: Fri 20 Dec 2024 15:18:38 +0000
ROA not after: Fri 19 Dec 2025 15:23:38 +0000
asID: 51167
IP address blocks: 194.15.110.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:60:1b:6a:0d:ea:99:4c:35:3a:62:81:d0:cd:3c:29:d2:54:ee:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:38 2024 GMT
Not After : Dec 19 15:23:38 2025 GMT
Subject: CN=4D7698D86004D8E197323E6B1FDA3A46E494F46C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:50:2e:43:2d:77:46:76:dc:cf:00:2f:8c:37:
57:40:80:a8:68:61:6c:9a:03:ac:0d:10:c0:0c:8c:
bb:e6:86:77:e4:3a:ab:c6:f0:81:6d:f2:ec:cf:81:
58:e4:fd:0d:d4:03:6d:95:2d:bd:9f:48:b1:2f:62:
97:35:37:3a:eb:be:02:fe:13:0f:bb:70:49:29:bf:
95:a5:bd:7f:5c:bd:97:6b:13:68:ec:11:0b:d7:a7:
2c:d3:cf:a4:de:d1:16:c1:08:76:62:fd:d4:2f:6f:
5e:6b:46:7c:f6:49:2b:0c:51:1a:94:c2:89:6a:07:
04:c3:97:f6:18:07:23:76:d5:28:80:f4:f3:81:61:
59:22:b9:04:c1:92:b7:7f:73:14:95:ed:4e:3e:ca:
c3:f5:60:d4:6e:23:9b:5a:5f:df:68:2a:7a:1c:c4:
ad:36:8f:03:28:95:fc:e1:d1:27:b1:a8:17:dc:c3:
c0:2b:ea:7e:15:33:ee:75:43:d1:63:9d:07:f7:ef:
25:01:74:a3:4b:34:fa:3c:0c:7d:1a:86:10:41:8d:
5f:20:84:f7:42:5b:01:2d:9c:3a:d6:c0:2d:2b:96:
6d:1d:17:37:c2:d6:fb:73:93:17:1a:18:6c:a9:32:
24:b9:95:3c:3b:00:6a:c9:79:44:2f:53:7e:2d:67:
5f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:76:98:D8:60:04:D8:E1:97:32:3E:6B:1F:DA:3A:46:E4:94:F4:6C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3131302e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.110.0/24
Signature Algorithm: sha256WithRSAEncryption
58:2d:c6:2d:0a:59:12:8b:2b:3a:7c:9c:fb:d1:cc:03:38:56:
45:a1:9f:df:a0:fa:1d:6c:3c:c6:bf:07:d5:08:45:3f:07:ab:
0d:7b:8b:59:db:d8:2b:2e:ca:1f:17:3a:7a:00:65:b6:b7:cd:
97:c2:14:54:52:f6:f6:9c:eb:ce:6b:4e:8e:08:c0:b3:0b:2f:
40:b4:f1:34:e1:e4:70:99:70:24:75:f3:e6:5a:1e:09:ae:fe:
5e:1a:5a:12:93:2a:b3:de:61:97:4e:24:79:fe:d8:62:1a:e2:
d5:94:17:53:10:24:15:3d:0e:02:a0:4f:47:9f:f5:1c:15:a2:
c0:de:18:18:60:d6:75:8f:9f:e8:fc:a4:ea:5a:ec:ff:4f:06:
4e:0d:4e:9e:5d:a9:d4:a8:84:b5:15:73:4b:ff:6d:b3:95:ee:
90:48:65:32:ac:29:9b:95:bd:82:81:1a:b2:96:d7:f9:18:c9:
58:b3:13:c9:b4:38:78:eb:9e:3d:b9:6d:17:dc:de:b6:4f:db:
92:13:f8:43:25:8f:64:c9:28:0b:ba:60:ae:78:cc:41:c4:5b:
c3:88:c2:4c:1f:2d:27:67:51:e6:7a:29:fb:8f:e2:4e:a6:46:
ba:de:a2:41:3f:b2:1c:84:6f:51:f1:f1:a3:fc:0f:6c:ac:2c:
28:b6:1e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:20:33 2025 by rpki-client