Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132332e302f32342d3234203d3e203632323430.roa
File: 3139342e33352e3132332e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: RzZDlrXhDC46hCc0VTzqj8a/hXks3hEPgLeMMJpyKgk=
Subject key identifier: 0A:43:A8:E2:8A:D3:92:D9:1E:BF:EA:60:A1:33:31:61:B6:BC:5C:E9
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 16083CC86CDB69FEB0EEE22933F1B360DB2C7886
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132332e302f32342d3234203d3e203632323430.roa
Signing time: Fri 27 Dec 2024 11:47:39 +0000
ROA not before: Fri 27 Dec 2024 11:42:39 +0000
ROA not after: Fri 26 Dec 2025 11:47:39 +0000
asID: 62240
IP address blocks: 194.35.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:08:3c:c8:6c:db:69:fe:b0:ee:e2:29:33:f1:b3:60:db:2c:78:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:39 2024 GMT
Not After : Dec 26 11:47:39 2025 GMT
Subject: CN=0A43A8E28AD392D91EBFEA60A1333161B6BC5CE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:59:68:7d:43:15:b4:87:84:5d:0e:6b:11:
1a:fd:1c:c0:e4:ab:63:87:0e:66:ca:90:9f:5d:c6:
2e:b2:e8:36:de:7a:30:30:eb:48:f1:78:12:f5:a1:
66:f6:9c:7e:34:c2:3a:d7:38:7f:4e:ea:11:52:46:
2f:02:ef:0c:e1:09:04:d2:21:a9:d4:b6:af:51:e9:
3d:22:a9:b3:f4:e6:fd:0d:a3:fe:28:ce:9a:52:43:
e8:9b:db:4a:8e:2c:11:ad:89:6c:8c:e2:bb:73:ca:
ed:99:b8:3a:31:0a:aa:df:1d:84:e6:3a:e8:0d:46:
ce:9c:81:cf:1c:4e:53:90:95:aa:03:80:a5:75:67:
d5:0a:ec:24:29:15:1f:09:f1:e3:02:52:c9:c8:1f:
fe:34:ba:85:47:15:0d:cf:e8:4f:74:3f:61:55:4f:
6b:ae:0c:d1:99:fb:51:1a:99:d0:0a:23:58:20:78:
c0:41:35:b2:bd:0f:75:ae:6e:c0:8b:e1:9b:f8:4f:
61:ae:79:9e:7d:83:5b:6b:97:59:70:4f:ab:46:14:
80:82:a1:cf:9e:ad:bc:ea:3d:0b:86:55:bf:9a:d8:
31:d9:63:c6:13:ca:59:dc:f1:00:66:7e:c0:ea:ca:
6a:01:04:cc:0f:3a:24:9b:dd:58:2c:a0:54:89:cb:
57:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:43:A8:E2:8A:D3:92:D9:1E:BF:EA:60:A1:33:31:61:B6:BC:5C:E9
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132332e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:29:bc:4c:ac:7a:fc:9f:ff:ce:59:8c:48:b5:91:bd:63:43:
62:d4:c4:f6:d4:bf:f7:53:40:b8:d0:67:b2:76:61:82:5d:0c:
fd:be:5d:02:30:d0:16:79:3a:37:b7:55:a0:c3:fc:35:e2:91:
2d:5c:8a:bd:7a:c3:46:ef:57:96:ed:5e:a3:5a:fb:a2:a2:c1:
98:18:f0:ae:be:5f:1d:d7:af:42:db:25:61:78:69:58:53:49:
fd:ec:97:04:36:80:73:92:26:c3:aa:6b:fa:81:91:a7:37:32:
4d:98:ef:19:ff:59:c8:41:c1:d3:9f:5b:c5:d5:b2:f4:ac:40:
ce:dd:bd:10:ee:3f:77:83:d6:0d:14:ba:89:80:b3:6c:a7:28:
6c:a1:14:46:75:5d:8b:50:54:5c:bf:42:cf:04:82:bd:ea:f0:
b3:47:2f:8f:ad:40:ff:a3:a9:6a:98:15:e5:f8:24:08:69:29:
20:05:c9:2f:30:d1:e8:5b:71:64:46:9f:f0:90:c8:f3:85:4f:
62:16:b3:d7:8f:95:27:5d:53:29:bc:95:f7:a5:9f:07:73:76:
bb:1d:3d:86:5b:11:c3:23:b7:73:23:fb:0d:6b:d3:57:4e:1b:
82:93:ee:19:31:ec:ac:02:0f:98:57:03:dd:87:19:10:8e:09:
4a:29:78:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:16:08 2025 by rpki-client