Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33362e3138342e302f32332d3234203d3e203437353833.roa
File: 3139342e33362e3138342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: kIKJpgMXI83pd1g69adlV/9zGy3gPNSgqxZWUGeLq4k=
Subject key identifier: 39:6F:1B:66:E6:44:B3:D5:1B:86:C7:B0:31:A7:88:E2:CF:F3:1D:8D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 209FA7F67E5B66579678DD02B74ED2EC9865D09E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33362e3138342e302f32332d3234203d3e203437353833.roa
Signing time: Fri 27 Dec 2024 11:47:24 +0000
ROA not before: Fri 27 Dec 2024 11:42:24 +0000
ROA not after: Fri 26 Dec 2025 11:47:24 +0000
asID: 47583
IP address blocks: 194.36.184.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:9f:a7:f6:7e:5b:66:57:96:78:dd:02:b7:4e:d2:ec:98:65:d0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:24 2024 GMT
Not After : Dec 26 11:47:24 2025 GMT
Subject: CN=396F1B66E644B3D51B86C7B031A788E2CFF31D8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:ee:a2:8b:3f:48:0e:8e:e5:fe:34:9a:c5:
fa:02:db:09:ae:f1:23:ae:d3:f9:cc:bd:a3:6e:a4:
51:b1:eb:6b:55:4c:47:90:75:2b:9e:03:cc:dd:7d:
0d:54:6a:d0:16:cf:c2:bb:12:a8:20:dd:72:79:0d:
54:c4:40:f1:43:af:e7:0e:11:82:23:c5:9a:eb:c8:
14:e4:63:6b:af:27:e6:bf:15:6d:f2:5b:8a:5c:2c:
60:b9:34:00:fc:07:a1:0a:4e:00:d6:35:83:e6:80:
54:36:89:d5:b8:92:4a:0a:50:2f:d9:c8:df:62:d8:
67:e0:67:9b:db:4e:85:38:14:a5:8b:e5:1a:d7:d0:
95:dc:b2:43:9a:62:70:8c:3c:ae:44:a1:d0:c3:2d:
64:62:71:4b:51:0f:66:63:67:50:c1:42:7b:54:03:
a2:24:33:64:9d:27:ee:a6:49:d7:4a:24:21:27:70:
3e:df:e5:57:40:8e:21:2f:23:18:9e:64:19:9e:25:
66:e1:fd:cc:3d:fe:a8:ee:09:d7:da:f7:a0:1d:08:
94:23:b9:a0:06:91:66:97:c3:62:52:c7:61:43:04:
78:6f:74:16:0f:23:74:e6:d3:57:f9:e1:e0:37:c6:
ca:2b:ab:20:73:1f:c8:1d:a1:04:ba:d0:35:50:9a:
8e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6F:1B:66:E6:44:B3:D5:1B:86:C7:B0:31:A7:88:E2:CF:F3:1D:8D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33362e3138342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.184.0/23
Signature Algorithm: sha256WithRSAEncryption
46:b5:d9:3c:a3:cc:f4:e0:1d:29:1f:08:90:1b:a1:38:8f:1b:
3e:71:5b:dd:4b:fb:2e:d0:f9:8b:6f:3e:da:43:ca:7f:22:ca:
e6:86:09:7b:4a:48:f7:6a:ea:b3:3b:f1:2b:a2:90:f3:ac:c3:
22:90:64:47:71:22:d3:b0:b1:3b:72:8a:ba:96:dd:91:a1:18:
79:51:85:0d:79:43:79:95:f8:d9:8a:b9:9f:cb:be:81:9a:90:
38:ef:b0:dc:f7:a0:f5:ff:0d:dd:ef:46:75:57:2b:9a:57:59:
c6:c5:c3:61:b8:4e:25:5d:8d:4b:0e:93:d1:40:5d:e2:9d:f1:
5a:75:86:4b:f5:9f:ff:a6:88:37:56:2c:4b:53:c4:f1:4f:d4:
67:0c:d2:8b:67:bf:45:32:d7:30:91:d6:22:0b:6d:c8:52:ac:
dd:13:db:24:ab:a5:9f:fb:78:bc:88:c6:11:e0:44:0d:61:6a:
35:a0:ef:c8:fc:3a:c6:5b:9b:8d:ad:9f:ad:4d:98:ec:1c:a2:
09:06:af:46:83:a2:bc:58:03:79:98:49:ac:42:ec:19:62:dc:
63:2c:dc:51:69:2f:ea:09:97:86:9e:cb:74:30:e8:66:1d:6e:
9e:06:61:b8:22:8e:5b:85:e8:5a:f0:25:01:12:54:41:21:c0:
e9:14:3c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:07:08 2025 by rpki-client