Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3131312e302f32342d3234203d3e20313336373837.roa
File: 3139342e31352e3131312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: hGGrC0edzk5y3Ulc3h0sLA1Ox5WwfviWZEvYFb+7REc=
Subject key identifier: B2:D4:09:08:F3:35:B7:50:D5:90:5D:5C:F2:6F:6D:FF:13:25:D2:56
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2D3D5FF11A8C1A768D62034BC838AF89D2ED8CC9
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3131312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:36 +0000
ROA not before: Fri 20 Dec 2024 15:18:36 +0000
ROA not after: Fri 19 Dec 2025 15:23:36 +0000
asID: 136787
IP address blocks: 194.15.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:3d:5f:f1:1a:8c:1a:76:8d:62:03:4b:c8:38:af:89:d2:ed:8c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:36 2024 GMT
Not After : Dec 19 15:23:36 2025 GMT
Subject: CN=B2D40908F335B750D5905D5CF26F6DFF1325D256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:ee:e7:a2:a1:63:10:ba:c7:2f:cc:62:c8:
63:e0:35:ac:d0:59:6b:c0:0f:c7:b3:93:45:cc:8a:
46:88:c4:9c:44:79:0e:db:0e:42:54:78:c5:3c:d2:
d7:5c:fa:e3:76:1b:44:82:d0:6b:b2:a6:04:62:6b:
3e:47:98:1c:23:76:eb:58:bd:a3:9d:37:87:b6:90:
8d:75:a3:23:34:71:6c:ba:93:9c:a8:51:08:b2:86:
65:67:c1:e5:b8:b4:46:62:fe:8f:93:84:8f:fd:be:
ec:54:b1:4a:2e:ee:a3:1d:67:72:44:f6:4d:5d:29:
aa:28:1e:78:f0:52:24:74:18:c0:d8:13:0d:a8:e1:
0c:20:0d:14:0e:5f:90:74:e7:2d:66:1e:df:9b:fa:
00:91:35:d5:4b:84:d9:a9:34:a8:d9:31:0e:f2:59:
c7:42:40:77:b7:ef:14:4c:42:05:3c:97:af:f4:d2:
dd:8a:1c:f1:8f:78:75:07:ab:97:aa:60:24:da:63:
0d:73:7c:ec:a3:83:87:51:58:52:5d:e2:a0:09:b2:
83:fc:99:88:d9:0f:a3:43:c5:a9:13:88:62:6a:96:
f3:74:50:0f:92:ff:d2:25:22:ac:04:9d:f5:1c:e7:
f0:01:e6:40:1e:79:25:8c:98:6e:a3:0f:d4:0d:4c:
5b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D4:09:08:F3:35:B7:50:D5:90:5D:5C:F2:6F:6D:FF:13:25:D2:56
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3131312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.111.0/24
Signature Algorithm: sha256WithRSAEncryption
15:77:c7:f3:cf:05:bc:c3:90:9b:5a:44:01:c4:ba:b5:8b:a6:
ed:b5:c9:c9:16:20:50:d1:2b:24:d3:94:93:34:c1:e4:d6:0b:
9e:d3:6e:e7:f8:c1:26:84:ca:ec:0f:3b:af:65:af:a0:a4:a6:
11:39:85:d2:0f:bb:28:b6:1c:da:d8:ef:f1:4c:9c:63:21:09:
4b:01:d2:e2:51:33:e0:c5:94:38:85:9e:00:b2:04:58:1f:c1:
2e:71:83:ce:b8:03:b9:ed:83:0f:22:24:85:03:de:c6:98:bf:
e3:ec:61:62:70:bf:b3:6d:76:0d:1a:52:4e:e9:27:5c:45:94:
9f:81:da:d2:10:54:31:79:34:9e:82:68:cf:68:f1:3f:00:9b:
fc:6e:d5:cb:4b:43:29:a7:b6:b6:ac:6d:0c:78:f2:97:17:d2:
68:62:88:c3:78:fc:16:36:90:79:9e:af:a1:1f:fe:bf:78:97:
fb:c1:bc:b2:b7:83:f0:bb:39:4d:1e:c4:32:b2:2c:cf:c7:ad:
c5:14:76:a8:b4:a9:c5:3b:f9:66:55:39:59:62:3c:18:01:60:
69:7c:07:8d:c9:45:0e:23:6c:ec:03:6f:dd:5e:ce:f5:08:c1:
b0:89:e3:df:af:52:50:b4:95:c8:a1:55:de:c0:21:d5:e9:3d:
57:a7:84:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:01:25 2025 by rpki-client