Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132322e302f32342d3234203d3e203632323430.roa
File: 3139342e33352e3132322e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: 3ToQXqq9Pxva4WOfZka4WCreeVaS7sIOMJTgYppefXk=
Subject key identifier: F9:9D:DA:86:CE:D1:CC:BC:4A:6F:A3:AE:CA:04:AB:B3:E3:09:E6:51
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2FB682B836DD1E850E66C52BBF5C0605CBB76D33
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132322e302f32342d3234203d3e203632323430.roa
Signing time: Fri 27 Dec 2024 11:47:08 +0000
ROA not before: Fri 27 Dec 2024 11:42:08 +0000
ROA not after: Fri 26 Dec 2025 11:47:08 +0000
asID: 62240
IP address blocks: 194.35.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:b6:82:b8:36:dd:1e:85:0e:66:c5:2b:bf:5c:06:05:cb:b7:6d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:08 2024 GMT
Not After : Dec 26 11:47:08 2025 GMT
Subject: CN=F99DDA86CED1CCBC4A6FA3AECA04ABB3E309E651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:25:aa:f0:ef:f1:f7:18:ff:e7:d3:1c:d8:
40:9e:6a:e3:e8:c4:be:3d:61:0c:c2:5e:ad:9b:a4:
c6:20:c8:dd:30:4e:15:54:f1:44:72:88:01:48:1e:
12:97:5f:bb:f2:c3:e1:30:3f:c3:fa:6f:1f:bd:5e:
5e:c6:2e:3f:e4:92:82:51:5e:b5:ec:da:fb:36:bd:
08:7c:83:3c:bf:07:3e:41:ad:72:71:ac:9f:70:99:
b3:4b:bb:c8:75:d8:e0:26:3d:6c:36:24:f3:40:17:
c5:2c:37:7e:e7:b8:0a:a0:9a:af:fa:e7:4e:55:ea:
50:96:a8:42:7e:c1:a5:8e:ea:6d:97:86:3a:33:16:
d1:f4:e3:c2:d3:58:8c:0d:50:34:ef:ce:54:4e:5c:
27:31:b4:43:77:ef:db:54:73:ee:40:dd:27:5d:ba:
28:26:f5:f1:8a:d1:10:82:af:d7:68:f9:69:cc:1f:
bb:cd:06:28:0c:ef:46:01:ed:50:da:d3:90:f6:c0:
01:b8:fc:97:48:6e:bd:12:aa:eb:7a:21:b2:57:be:
ce:ec:8c:89:e6:96:ac:d4:8d:ea:e8:70:47:93:93:
93:f0:b4:20:48:ca:84:18:24:d0:20:1b:ce:55:f9:
ee:bb:51:68:56:de:93:70:d1:91:e3:a9:88:e7:9d:
24:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9D:DA:86:CE:D1:CC:BC:4A:6F:A3:AE:CA:04:AB:B3:E3:09:E6:51
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132322e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.122.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:5f:05:9c:11:5e:da:a4:82:bb:2c:6a:27:7e:97:cb:3b:64:
a1:20:45:50:d1:1c:a9:d6:ca:55:7d:07:80:aa:a9:f4:e9:45:
e3:14:04:0d:c8:b7:1d:b5:25:d3:b1:5b:df:2c:50:10:9f:97:
22:3a:28:1d:54:68:05:cf:b8:aa:90:72:5f:a1:90:d4:ca:11:
fa:c5:e2:fb:29:ec:da:b5:27:99:ad:10:3c:04:ca:6c:37:d3:
b9:3f:17:6c:43:4d:43:4e:a7:82:81:5e:72:33:3c:f0:73:89:
ee:72:62:4a:34:1a:12:38:f8:59:1f:23:7f:ff:07:d3:5d:cc:
25:81:c5:cd:26:2d:a1:1e:0d:3e:76:c7:49:52:66:a6:4d:6d:
70:0d:df:3f:b4:36:1a:65:81:ad:4d:66:2c:81:c4:08:53:4f:
48:86:20:1d:1d:40:6c:4f:c8:ec:f0:c2:cc:5a:23:0f:20:28:
30:7f:86:04:78:ed:0d:7a:d5:b9:ff:db:68:90:6c:79:25:4c:
e3:e8:8d:93:38:ad:89:61:dc:b6:a4:ea:ef:94:f6:da:bf:b4:
98:f5:0e:3e:de:b3:d6:2e:f0:5e:a8:31:c2:e2:a8:c5:32:c0:
fd:d0:8a:88:9e:40:78:96:6a:7f:15:f7:71:1d:6b:f2:23:29:
06:28:80:00
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUL7aCuDbdHoUOZsUrv1wGBcu3bTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMDhaFw0yNTEyMjYxMTQ3MDhaMDMxMTAvBgNV
BAMTKEY5OUREQTg2Q0VEMUNDQkM0QTZGQTNBRUNBMDRBQkIzRTMwOUU2NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwliWq8O/x9xj/59Mc2ECeauPo
xL49YQzCXq2bpMYgyN0wThVU8URyiAFIHhKXX7vyw+EwP8P6bx+9Xl7GLj/kkoJR
XrXs2vs2vQh8gzy/Bz5BrXJxrJ9wmbNLu8h12OAmPWw2JPNAF8UsN37nuAqgmq/6
505V6lCWqEJ+waWO6m2XhjozFtH048LTWIwNUDTvzlROXCcxtEN379tUc+5A3Sdd
uigm9fGK0RCCr9do+WnMH7vNBigM70YB7VDa05D2wAG4/JdIbr0Squt6IbJXvs7s
jInmlqzUjerocEeTk5PwtCBIyoQYJNAgG85V+e67UWhW3pNw0ZHjqYjnnSR9AgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQU+Z3ahs7RzLxKb6OuygSrs+MJ5lEwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMzMzUy
ZTMxMzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzIzMjM0MzAucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADCI3owDQYJKoZIhvcNAQELBQADggEBAK5fBZwRXtqkgrssaid+l8s7ZKEg
RVDRHKnWylV9B4CqqfTpReMUBA3Itx21JdOxW98sUBCflyI6KB1UaAXPuKqQcl+h
kNTKEfrF4vsp7Nq1J5mtEDwEymw307k/F2xDTUNOp4KBXnIzPPBzie5yYko0GhI4
+FkfI3//B9NdzCWBxc0mLaEeDT52x0lSZqZNbXAN3z+0Nhplga1NZiyBxAhTT0iG
IB0dQGxPyOzwwsxaIw8gKDB/hgR47Q161bn/22iQbHklTOPojZM4rYlh3Lak6u+U
9tq/tJj1Dj7es9Yu8F6oMcLiqMUywP3QioieQHiWan8V93Eda/IjKQYogAA=
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:15:13 2025 by rpki-client