Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137392e302f32342d3234203d3e20313336373837.roa
File: 3139342e3138302e3137392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: wZ5s7uYzsUR7/ieYMsb+KHgxeqM9qp9bRw42FXXXoGQ=
Subject key identifier: 0A:0A:81:5D:8C:83:D5:3A:BF:87:BC:C2:A2:BC:59:A4:BA:28:73:BD
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3212408197A0C537037223A1DD6FFDF4824A9FE8
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:39 +0000
ROA not before: Fri 20 Dec 2024 15:18:39 +0000
ROA not after: Fri 19 Dec 2025 15:23:39 +0000
asID: 136787
IP address blocks: 194.180.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:12:40:81:97:a0:c5:37:03:72:23:a1:dd:6f:fd:f4:82:4a:9f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:39 2024 GMT
Not After : Dec 19 15:23:39 2025 GMT
Subject: CN=0A0A815D8C83D53ABF87BCC2A2BC59A4BA2873BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:96:e4:3e:a8:04:0b:6e:35:d7:58:80:2a:49:
b7:a6:bc:2e:9e:93:4d:d4:83:1d:3e:35:8d:19:d5:
43:4c:89:26:6c:a3:5b:cc:86:a6:f4:39:08:6a:2a:
f2:2d:7c:36:c6:62:87:7b:3a:c7:18:28:1d:e2:d7:
c1:e6:86:04:93:07:31:0a:f8:5a:17:62:86:0e:62:
eb:14:2b:8a:a9:45:78:83:51:ab:b8:38:a0:6a:af:
86:da:96:51:52:b5:21:9e:ea:68:77:93:d6:6e:6c:
97:9a:05:12:2a:71:9e:86:92:49:58:a9:1b:6b:2d:
b3:7d:c5:d1:28:21:91:0b:6c:e6:73:81:e0:59:2d:
a7:12:3e:d9:7d:7d:52:59:cc:cc:48:63:f3:a9:fe:
99:c8:e0:97:87:66:e2:38:c1:0c:d2:3f:64:c3:68:
ec:14:44:16:0d:95:c9:40:cb:45:af:d4:ff:af:57:
f6:eb:df:fa:51:a7:da:d4:43:af:16:b1:73:88:40:
28:56:cb:e7:50:cc:bb:0f:27:27:09:75:06:d4:a8:
d2:a1:5a:77:81:6c:39:62:44:48:ab:26:5f:1a:5b:
65:f2:4c:ca:27:67:05:3c:e7:c4:5e:1c:0e:e4:02:
55:0e:9a:bd:94:d1:73:76:9e:b6:26:a9:4f:46:47:
b9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0A:81:5D:8C:83:D5:3A:BF:87:BC:C2:A2:BC:59:A4:BA:28:73:BD
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.179.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:1d:88:a1:60:2a:87:ce:93:90:31:ec:fd:a5:65:e8:bf:a3:
91:e8:28:a8:71:74:c0:16:0d:ec:3a:c7:b3:34:8b:1e:cf:87:
c7:b3:31:e5:23:dc:3f:6f:7f:83:db:36:95:e0:9d:db:fa:05:
78:e3:69:85:ce:9f:96:a9:4e:8f:de:82:c5:da:8d:e8:20:86:
00:f7:f0:87:ea:65:ec:d8:41:fb:1f:33:c2:90:74:c0:64:82:
80:da:55:37:b8:55:e6:a7:e5:c4:09:43:92:28:58:a4:0e:32:
85:0a:f4:8d:6f:84:70:c8:12:1f:2f:ec:64:dd:b9:c2:b2:78:
cd:d7:6e:40:a1:a8:a9:ba:b7:26:7f:36:23:7a:b9:17:3f:bc:
95:03:0c:d9:c3:a4:37:77:a0:99:22:20:fa:28:81:a1:ac:f9:
63:58:8f:da:43:fd:0c:9b:1b:b0:46:dc:96:3a:f7:2a:b4:46:
9e:b2:b9:ab:89:5d:08:62:45:25:5e:61:46:71:75:40:c9:81:
20:38:60:18:cc:ca:8f:09:5d:5e:c9:19:80:65:44:25:b9:ad:
aa:c4:ac:5c:9a:64:2e:fd:1f:7c:db:a1:74:26:d7:17:90:38:
4b:56:d3:0f:96:11:74:3e:20:ad:2d:bf:8b:02:73:22:10:13:
57:11:b7:ce
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUMhJAgZegxTcDciOh3W/99IJKn+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjAxNTE4MzlaFw0yNTEyMTkxNTIzMzlaMDMxMTAvBgNV
BAMTKDBBMEE4MTVEOEM4M0Q1M0FCRjg3QkNDMkEyQkM1OUE0QkEyODczQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgluQ+qAQLbjXXWIAqSbemvC6e
k03Ugx0+NY0Z1UNMiSZso1vMhqb0OQhqKvItfDbGYod7OscYKB3i18HmhgSTBzEK
+FoXYoYOYusUK4qpRXiDUau4OKBqr4ballFStSGe6mh3k9ZubJeaBRIqcZ6GkklY
qRtrLbN9xdEoIZELbOZzgeBZLacSPtl9fVJZzMxIY/Op/pnI4JeHZuI4wQzSP2TD
aOwURBYNlclAy0Wv1P+vV/br3/pRp9rUQ68WsXOIQChWy+dQzLsPJycJdQbUqNKh
WneBbDliREirJl8aW2XyTMonZwU858ReHA7kAlUOmr2U0XN2nrYmqU9GR7mxAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUCgqBXYyD1Tq/h7zCorxZpLooc70wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzgz
MDJlMzEzNzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwrSzMA0GCSqGSIb3DQEBCwUAA4IBAQC7HYihYCqHzpOQMez9pWXo
v6OR6CiocXTAFg3sOsezNIsez4fHszHlI9w/b3+D2zaV4J3b+gV442mFzp+WqU6P
3oLF2o3oIIYA9/CH6mXs2EH7HzPCkHTAZIKA2lU3uFXmp+XECUOSKFikDjKFCvSN
b4RwyBIfL+xk3bnCsnjN125AoaipurcmfzYjerkXP7yVAwzZw6Q3d6CZIiD6KIGh
rPljWI/aQ/0MmxuwRtyWOvcqtEaesrmriV0IYkUlXmFGcXVAyYEgOGAYzMqPCV1e
yRmAZUQlua2qxKxcmmQu/R9826F0JtcXkDhLVtMPlhF0PiCtLb+LAnMiEBNXEbfO
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:54:42 2025 by rpki-client