Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135342e302f32342d3234203d3e20313336373837.roa
File: 3139342e352e3135342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 0ysjzxnMb5twwDEoOxsXmAyIrU1EJ31ZAsqVxVZ3xN4=
Subject key identifier: E6:0D:FA:C6:AF:C0:60:C0:4E:D2:E0:80:EC:3E:D7:EA:89:89:5A:CD
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 095BDA8FD466E8008E2DF215A48735264C2D3CAD
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:34 +0000
ROA not before: Fri 20 Dec 2024 15:18:34 +0000
ROA not after: Fri 19 Dec 2025 15:23:34 +0000
asID: 136787
IP address blocks: 194.5.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:5b:da:8f:d4:66:e8:00:8e:2d:f2:15:a4:87:35:26:4c:2d:3c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:34 2024 GMT
Not After : Dec 19 15:23:34 2025 GMT
Subject: CN=E60DFAC6AFC060C04ED2E080EC3ED7EA89895ACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a0:00:ad:b7:1c:31:df:07:95:38:63:f2:79:
0e:40:7f:80:28:48:da:75:9b:f8:b9:cd:25:21:48:
ca:79:3f:89:72:a3:88:6a:0b:8c:62:47:33:d0:ef:
4f:04:6c:25:a6:df:a2:cc:c3:e4:5b:e3:1e:4e:78:
7e:db:0b:cd:8e:5c:fc:38:69:14:d5:95:2a:b6:3f:
5a:06:8e:71:5c:2f:7f:dc:01:31:a2:94:77:eb:3f:
83:cb:05:f6:5a:4e:40:22:35:f4:de:7c:d8:89:ae:
b7:d9:26:b5:02:4d:7f:9b:b3:e1:6a:6c:bd:40:14:
03:fc:68:dd:6b:e4:cd:d0:f4:1b:ea:ac:2e:c4:9a:
94:53:99:98:87:00:6e:71:18:bb:4e:ed:a8:4a:5b:
d8:48:20:7e:57:81:d2:7f:6b:90:b8:52:a3:ac:b1:
08:a1:df:df:68:90:49:41:da:56:9a:9a:94:85:6b:
19:15:68:08:28:5d:fe:cf:0f:35:1a:bf:e7:99:f4:
80:e5:db:45:c8:46:4e:0f:62:d2:62:7c:49:21:d8:
76:1a:0b:81:de:57:c9:a6:2f:f2:e0:a3:6d:21:db:
79:89:ac:e7:91:2a:ea:03:df:d1:c4:e9:c3:92:8b:
c8:f3:07:6a:91:fd:06:58:df:cf:11:1d:24:59:f7:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0D:FA:C6:AF:C0:60:C0:4E:D2:E0:80:EC:3E:D7:EA:89:89:5A:CD
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.154.0/24
Signature Algorithm: sha256WithRSAEncryption
af:f6:12:08:51:8e:19:f2:d9:78:bd:94:b8:a0:c7:41:f6:52:
90:43:49:35:f4:30:02:71:8e:44:de:62:1a:ca:1d:67:b7:29:
34:4a:f6:f5:34:50:86:ff:07:ef:3d:92:36:22:ea:b7:71:43:
c0:a3:5b:60:c3:06:20:37:b7:55:85:24:98:ff:58:e6:63:fd:
03:d1:8c:19:74:2e:58:d1:0c:da:cf:91:67:05:41:43:fe:7e:
2f:44:bc:5b:c3:e8:13:ad:63:64:62:24:c9:04:4a:95:83:a6:
f6:89:85:ee:9e:37:31:5a:2c:bd:83:e7:a8:c2:e4:a6:32:08:
a3:6d:8a:f9:e1:64:65:62:ae:67:f5:6d:29:83:c7:e0:77:3a:
af:47:a9:6c:4f:53:f0:0d:da:92:86:9e:09:90:09:d0:bb:d5:
48:c6:61:94:fa:d5:76:59:38:dc:aa:83:fb:0a:d8:94:ba:11:
64:07:13:f3:13:b3:ad:d9:a1:89:bb:f5:03:30:9b:4a:50:c2:
6e:80:5d:b2:82:09:78:6e:38:f8:b7:af:f4:e6:be:cc:5a:e3:
81:c0:41:58:04:20:dd:9e:d5:35:23:ee:f0:ba:ed:9d:2c:20:
f5:ce:47:a2:9f:6b:ac:02:b1:b3:34:6c:c0:a0:28:c1:e4:a6:
30:82:4a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:23:16 2025 by rpki-client