Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233352e302f32342d3234203d3e20313336373837.roa
File: 3139342e33342e3233352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: /F1dlM6346LKLpEJTtaUD/AelIn1cRB3rsAeBwjcNQY=
Subject key identifier: 13:D4:DA:AF:D6:95:97:A5:74:9D:C6:72:CC:A3:D6:D3:25:E9:41:FC
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2DDB4A686E7D0088E106EA00DEA45AFE358CAA41
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:12 +0000
ROA not before: Fri 27 Dec 2024 11:42:12 +0000
ROA not after: Fri 26 Dec 2025 11:47:12 +0000
asID: 136787
IP address blocks: 194.34.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:db:4a:68:6e:7d:00:88:e1:06:ea:00:de:a4:5a:fe:35:8c:aa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:12 2024 GMT
Not After : Dec 26 11:47:12 2025 GMT
Subject: CN=13D4DAAFD69597A5749DC672CCA3D6D325E941FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:59:5a:99:ed:ed:a2:fd:0e:a5:a1:59:76:
5c:a1:90:36:78:b0:dc:63:ad:98:1c:e9:3e:a2:a6:
91:a4:d0:18:35:9c:33:22:e8:eb:5d:cb:21:4d:58:
99:11:64:4a:5d:0b:62:e4:47:f0:26:87:ac:50:13:
f3:ca:8d:8c:be:7f:1b:0f:3f:76:88:32:64:f0:ee:
6f:ff:b0:3e:32:ef:1c:52:39:7b:fd:10:98:69:5d:
bb:c7:aa:65:d8:c7:8d:1b:bb:af:18:0f:1e:e3:fa:
be:af:0b:ca:5b:a7:d7:25:c5:66:da:14:89:36:38:
f1:6b:a7:fa:3e:10:68:b6:43:8c:7e:b8:16:29:1c:
86:fe:88:ec:eb:92:b1:c1:da:d0:34:74:64:9d:8a:
fa:6a:42:55:d6:0e:3d:f9:39:68:3a:97:25:01:d8:
5a:f9:6c:74:a8:27:9b:c5:20:0c:b4:10:07:69:a4:
23:40:45:ee:ee:c8:30:ef:16:d3:24:f0:6a:9e:11:
77:4a:a9:f7:b9:73:9c:68:42:fb:68:b8:fc:86:97:
95:2f:8b:10:f8:ed:88:ba:e3:3c:a5:48:dd:05:5e:
d7:80:d0:37:d6:fc:2c:33:31:f0:fd:77:d5:f9:7b:
7a:45:55:bb:8a:6d:54:bd:b3:aa:9a:61:fb:ba:7f:
02:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D4:DA:AF:D6:95:97:A5:74:9D:C6:72:CC:A3:D6:D3:25:E9:41:FC
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33342e3233352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b4:7e:ee:fc:11:1d:09:d8:67:27:67:90:90:3b:4d:33:11:
5f:0c:1f:e0:6b:62:5f:3f:bf:b8:cb:c5:71:3a:0e:53:ad:ef:
1f:a2:42:e1:7c:3e:49:7d:d8:c5:6f:e6:9d:2e:15:3b:0d:c4:
53:9d:a8:d3:4b:74:9b:c0:c0:87:59:c7:07:70:bd:b9:d7:dc:
75:27:07:59:14:a0:36:9a:d2:36:6a:09:d7:81:54:aa:78:b9:
eb:b9:16:b0:da:17:f9:36:84:ed:4a:6a:94:f9:60:2c:88:bf:
39:f5:df:20:dd:1e:81:92:b8:48:70:01:9e:22:af:c9:05:49:
c4:7e:88:45:52:79:c5:75:3e:f3:e5:61:c1:9b:4a:9e:40:45:
c0:cc:71:46:af:b3:92:ae:21:17:29:66:07:08:6a:6d:17:bf:
59:1e:e1:6f:95:3b:b6:85:3b:8e:88:d4:5a:ed:e9:81:f9:ea:
8c:d9:27:59:7c:70:e5:1a:d9:d9:cf:02:5e:c5:14:c3:c6:11:
54:64:a3:c4:a7:39:0b:37:55:fb:ca:23:94:c8:b8:a0:6f:37:
31:9b:35:b9:7c:f6:29:ce:0d:6f:a6:49:ad:5c:50:f9:10:a0:
c7:e2:7b:fe:a3:5e:34:46:07:8e:a4:25:91:7f:25:df:50:97:
62:0a:7f:30
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIULdtKaG59AIjhBuoA3qRa/jWMqkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMTJaFw0yNTEyMjYxMTQ3MTJaMDMxMTAvBgNV
BAMTKDEzRDREQUFGRDY5NTk3QTU3NDlEQzY3MkNDQTNENkQzMjVFOTQxRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6Vlame3tov0OpaFZdlyhkDZ4
sNxjrZgc6T6ippGk0Bg1nDMi6OtdyyFNWJkRZEpdC2LkR/Amh6xQE/PKjYy+fxsP
P3aIMmTw7m//sD4y7xxSOXv9EJhpXbvHqmXYx40bu68YDx7j+r6vC8pbp9clxWba
FIk2OPFrp/o+EGi2Q4x+uBYpHIb+iOzrkrHB2tA0dGSdivpqQlXWDj35OWg6lyUB
2Fr5bHSoJ5vFIAy0EAdppCNARe7uyDDvFtMk8GqeEXdKqfe5c5xoQvtouPyGl5Uv
ixD47Yi64zylSN0FXteA0DfW/CwzMfD9d9X5e3pFVbuKbVS9s6qaYfu6fwI/AgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUE9Tar9aVl6V0ncZyzKPW0yXpQfwwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMzMzQy
ZTMyMzMzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMIi6zANBgkqhkiG9w0BAQsFAAOCAQEAn7R+7vwRHQnYZydnkJA7TTMR
Xwwf4GtiXz+/uMvFcToOU63vH6JC4Xw+SX3YxW/mnS4VOw3EU52o00t0m8DAh1nH
B3C9udfcdScHWRSgNprSNmoJ14FUqni567kWsNoX+TaE7UpqlPlgLIi/OfXfIN0e
gZK4SHABniKvyQVJxH6IRVJ5xXU+8+VhwZtKnkBFwMxxRq+zkq4hFylmBwhqbRe/
WR7hb5U7toU7jojUWu3pgfnqjNknWXxw5RrZ2c8CXsUUw8YRVGSjxKc5CzdV+8oj
lMi4oG83MZs1uXz2Kc4Nb6ZJrVxQ+RCgx+J7/qNeNEYHjqQlkX8l31CXYgp/MA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:01:47 2025 by rpki-client