Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e31322e302f32332d3234203d3e203234393430.roa
File: 3139342e33352e31322e302f32332d3234203d3e203234393430.roa (raw, json)
Hash identifier: Nh86dz0Embi02epKpljyKOKRPoQ/NcsjFELdUNDMV/A=
Subject key identifier: E5:83:00:79:DC:0E:C7:54:26:8F:6A:9C:32:FF:40:12:B7:DA:81:45
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6E245BB1D03EC9902C5740B4B7DAD31A331E80F3
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e31322e302f32332d3234203d3e203234393430.roa
Signing time: Fri 27 Dec 2024 11:47:43 +0000
ROA not before: Fri 27 Dec 2024 11:42:43 +0000
ROA not after: Fri 26 Dec 2025 11:47:43 +0000
asID: 24940
IP address blocks: 194.35.12.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:24:5b:b1:d0:3e:c9:90:2c:57:40:b4:b7:da:d3:1a:33:1e:80:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:43 2024 GMT
Not After : Dec 26 11:47:43 2025 GMT
Subject: CN=E5830079DC0EC754268F6A9C32FF4012B7DA8145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:1d:3a:1c:9f:41:4f:a9:0c:5d:c7:dc:43:
0a:f6:40:ba:9c:30:62:cf:bb:e1:01:97:b7:f2:d8:
04:70:96:4a:e1:85:00:85:6e:ba:e9:4c:2e:04:22:
82:11:d8:97:aa:e4:2f:1f:07:8e:43:b8:10:01:32:
cc:69:3c:b6:71:aa:f9:f8:a4:51:90:a4:cc:42:fc:
0b:af:aa:9a:ba:76:3c:6a:d3:9b:76:df:93:30:15:
9c:b5:fb:77:15:be:1c:93:c8:c2:44:4d:2c:5f:46:
48:b2:17:b4:7e:ee:68:8f:44:15:d7:f4:da:67:fb:
1e:5a:14:fd:ee:26:77:b1:4d:23:29:12:90:c4:46:
e8:dd:fb:2f:16:b0:2f:b7:19:14:07:67:bf:c0:26:
ba:f9:c5:13:53:89:29:a7:51:27:88:f7:d3:52:87:
0d:55:ea:25:71:c3:57:36:4a:8e:a8:02:58:b8:67:
3a:c2:f3:04:44:1f:44:c0:5b:dd:6d:b7:43:44:ff:
88:5f:72:f6:6b:23:a1:eb:89:32:1f:30:df:13:3e:
da:f2:c3:a6:c9:c5:98:49:09:a2:b1:7d:0c:c2:8b:
30:be:87:25:01:85:fb:72:31:8a:5d:28:23:90:20:
ac:0b:84:9a:c0:67:b3:6e:48:c9:00:c3:fc:09:d9:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:83:00:79:DC:0E:C7:54:26:8F:6A:9C:32:FF:40:12:B7:DA:81:45
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e31322e302f32332d3234203d3e203234393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.12.0/23
Signature Algorithm: sha256WithRSAEncryption
59:ad:21:31:71:03:d9:24:be:d0:45:1f:7a:26:b8:24:e2:06:
ef:63:30:a5:a7:f1:00:98:41:bc:d0:84:18:56:23:ea:7f:ff:
4d:4a:c8:15:5e:71:2d:52:d7:bd:f7:37:90:8f:71:56:be:d0:
fd:c1:50:da:e6:f3:22:b1:c8:e6:51:b9:6e:f4:33:12:ed:50:
0b:20:8f:3d:5e:fc:ee:46:42:d7:76:c9:ea:3c:b4:f7:56:fc:
83:2c:1f:4d:b4:01:36:bc:18:4b:2c:af:7b:ac:2a:23:98:24:
d8:9b:b2:4d:8c:2a:cf:b2:27:21:dc:f8:38:a5:47:d4:2e:07:
66:9d:67:15:49:35:29:9c:f8:06:d4:51:4e:30:f8:17:7f:02:
e1:25:6f:c5:2e:e1:26:c4:9e:fe:af:b1:0f:09:81:f0:b5:9c:
0f:46:4a:a7:a6:a2:c7:62:9f:a8:10:b8:d5:47:a4:1a:6b:7d:
e6:3f:c9:c9:1a:25:cf:9e:f9:92:99:89:57:85:db:dd:15:4e:
93:a6:21:7f:32:da:9d:ac:89:30:8c:8d:60:83:5c:bb:49:17:
27:22:a0:4c:80:8c:c0:49:11:35:8e:88:ba:7f:89:7b:35:14:
eb:a8:51:0d:e6:a8:33:e6:0c:3d:a2:7a:d5:23:d4:b8:16:df:
9c:b0:4f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:16 2025 by rpki-client