Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233342e302f32342d3234203d3e20313336373837.roa
File: 3139342e33342e3233342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 8Z06qluQsRV+N47xbFyCqQC3tgnApaAFEEGWcCsFScM=
Subject key identifier: E3:2A:63:29:C3:02:EF:2D:52:2B:2D:03:5D:67:4C:81:D4:6A:E7:FB
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 77813A5B32F8741E522935C02214C94BEA6ED3CC
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:37 +0000
ROA not before: Fri 27 Dec 2024 11:42:37 +0000
ROA not after: Fri 26 Dec 2025 11:47:37 +0000
asID: 136787
IP address blocks: 194.34.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:81:3a:5b:32:f8:74:1e:52:29:35:c0:22:14:c9:4b:ea:6e:d3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:37 2024 GMT
Not After : Dec 26 11:47:37 2025 GMT
Subject: CN=E32A6329C302EF2D522B2D035D674C81D46AE7FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:93:94:dd:bb:1c:a2:c0:49:24:09:86:53:c5:
07:96:1d:dc:fd:e9:11:34:41:83:75:bb:46:c5:eb:
ff:2b:74:92:1d:86:9b:c2:78:81:ba:2e:7a:72:b7:
15:be:67:d2:d7:f3:dc:f6:4d:3d:21:51:01:30:0e:
cd:82:6c:ea:0e:c0:2d:e0:75:95:8e:83:a0:22:1e:
47:ca:7d:85:5b:fc:04:2b:51:fc:3d:fa:b8:d4:7f:
49:0f:f9:4a:b1:d1:f0:4d:43:3c:99:4c:66:00:d6:
dc:d8:ec:a8:06:4f:ab:5e:9c:b1:57:cf:69:08:42:
c3:47:c5:31:8a:f7:e0:13:17:14:db:6c:13:3d:93:
d7:33:53:1c:1d:e1:fe:f8:e4:23:d4:81:e6:91:26:
5e:7f:df:6b:2e:96:ba:83:66:55:71:84:eb:ce:7d:
51:15:92:76:90:6b:d6:dd:54:ed:b4:95:e0:b2:21:
c8:44:8d:51:b3:77:68:5b:c1:57:19:81:4f:09:f1:
4e:c4:6b:0f:b6:27:7e:48:6d:76:77:64:dc:98:a7:
4e:61:3f:76:f5:94:89:71:fd:24:88:ce:33:4c:ef:
b0:55:76:78:64:1b:1f:39:55:37:41:0c:77:27:8b:
67:1e:57:28:d4:18:de:f6:d2:48:01:df:ff:87:de:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2A:63:29:C3:02:EF:2D:52:2B:2D:03:5D:67:4C:81:D4:6A:E7:FB
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.234.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:6e:90:67:86:aa:9a:c3:22:1e:9d:4d:fc:8f:7b:45:57:ac:
e8:53:74:87:69:fd:b5:75:89:5a:7b:4b:92:00:06:d5:b0:a2:
59:84:55:74:0a:b1:6f:92:5b:a6:a2:ec:28:af:eb:a5:23:b5:
9f:3b:a3:33:3d:34:4f:5b:0b:2f:86:8f:e2:27:4c:4f:ab:ce:
81:2e:4a:95:62:56:07:3e:25:4c:79:27:6a:2a:f6:90:bb:9e:
95:40:79:f4:07:55:a0:57:2d:61:8b:31:c9:ee:59:81:c8:3a:
91:37:fd:f7:df:fb:73:4e:da:ad:10:02:b0:f4:c4:f6:d0:57:
64:2f:0b:68:c3:b6:a8:80:a2:52:02:1f:0a:92:07:88:c0:22:
fe:ba:41:08:c5:4e:77:8e:47:ab:e5:d6:1c:df:ae:89:61:cd:
e0:c8:79:77:49:1d:16:f0:83:a5:84:22:98:f6:bb:42:7e:03:
93:bd:35:77:6f:ea:98:73:52:9d:78:a3:96:43:13:52:d4:fb:
e9:35:88:4f:92:81:f2:3c:c9:c1:d4:d3:3a:c6:a3:92:c2:fd:
53:a9:44:f5:f5:8c:f5:26:f0:42:37:f7:8c:b7:7e:25:b4:fb:
a1:90:74:29:d6:87:46:b2:d5:4e:60:1c:e2:f2:38:ab:dd:98:
96:7d:7a:a1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:50 2025 by rpki-client