Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135352e302f32342d3234203d3e20313336373837.roa
File: 3139342e352e3135352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: aRRM2NZXpbjoFker67NBxw/+treVINPAs5ZjtIaq7CE=
Subject key identifier: 80:F6:C5:6A:A5:B1:EE:7F:10:27:B8:03:54:44:F2:51:71:ED:01:E5
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0D08537D5476BA61AC4CA37B77A4BE8111153B91
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:35 +0000
ROA not before: Fri 20 Dec 2024 15:18:35 +0000
ROA not after: Fri 19 Dec 2025 15:23:35 +0000
asID: 136787
IP address blocks: 194.5.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:08:53:7d:54:76:ba:61:ac:4c:a3:7b:77:a4:be:81:11:15:3b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:35 2024 GMT
Not After : Dec 19 15:23:35 2025 GMT
Subject: CN=80F6C56AA5B1EE7F1027B8035444F25171ED01E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:1e:38:1a:66:5c:d1:de:ad:07:ec:f4:0b:
7b:5a:f1:40:45:2d:85:ce:e8:89:7f:e7:22:f0:b9:
3b:d2:74:48:c6:58:f7:6a:17:c1:55:77:96:0c:3e:
6a:b6:2a:2a:2c:dc:24:f3:dd:09:69:18:fb:17:6b:
88:5a:0c:8b:fe:43:a4:70:57:2e:c8:fe:44:7e:33:
f5:fc:26:1c:90:da:0d:86:ca:8c:ab:bd:62:40:e7:
45:66:e1:3f:5d:83:64:59:d6:19:f6:f1:70:5d:fc:
43:75:0c:25:ec:94:0a:78:92:f3:4f:2d:05:11:ef:
e4:b4:67:0d:7d:cb:c1:f4:10:72:9e:33:20:8c:6f:
86:50:62:f1:96:64:ea:b7:eb:a8:30:01:81:6a:42:
88:81:ed:71:1d:9c:03:51:b2:41:c7:7f:87:bb:5d:
1f:81:fe:a2:97:5a:bc:db:e5:cc:2a:ea:79:b8:85:
92:0f:a0:c4:d9:30:7e:1b:2f:85:6d:50:0e:70:3a:
c6:88:26:f1:10:3d:fa:e1:02:77:df:83:b2:8b:95:
98:45:07:28:e4:16:c9:66:8a:f1:2b:92:7d:f2:89:
d1:1e:2a:ba:c9:64:25:e8:6c:74:21:fb:94:07:00:
a2:49:75:70:48:a0:7b:80:fc:a5:01:3f:f8:92:e6:
3a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F6:C5:6A:A5:B1:EE:7F:10:27:B8:03:54:44:F2:51:71:ED:01:E5
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e352e3135352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.155.0/24
Signature Algorithm: sha256WithRSAEncryption
49:23:b4:00:a6:fb:3a:14:9f:95:f0:82:49:ff:af:d2:c6:cb:
c2:f2:75:cd:1b:03:07:1c:cd:97:cd:70:14:06:6d:67:d1:a8:
dc:e7:c3:39:83:5f:11:13:06:a5:43:18:b1:f0:5b:f2:a6:50:
fd:1c:ed:b2:1b:bc:a0:41:00:dc:cc:d5:06:0a:4f:bd:58:2a:
86:17:2e:95:56:09:e4:70:ed:41:bc:e4:24:ff:13:c6:83:72:
3c:97:46:af:b3:91:33:99:bc:23:d8:19:a3:17:08:2d:18:00:
1e:39:6e:83:eb:f9:59:c0:4f:f0:52:73:d5:30:5c:63:b8:01:
cc:4b:d2:6a:0b:18:cd:25:bf:58:f2:a8:72:54:9b:b7:07:4e:
a5:6f:be:22:b3:bb:80:14:7c:a5:59:ba:53:3d:c0:5d:4e:62:
52:57:c4:10:80:c0:f0:9d:5e:90:35:c2:63:db:32:1d:bb:2b:
1c:e5:ac:43:e2:72:df:6c:58:df:6a:43:16:b7:66:a2:58:82:
e0:ee:ae:db:95:c8:ee:4a:f0:cf:7c:5b:52:5d:70:80:b5:ad:
ed:29:40:e6:e3:b2:29:e5:c2:b0:86:37:f4:e7:1b:a5:cb:86:
40:35:e7:f6:bc:7c:22:46:4c:b4:9e:8f:ff:18:ac:df:86:96:
87:1d:f2:ba
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUDQhTfVR2umGsTKN7d6S+gREVO5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjAxNTE4MzVaFw0yNTEyMTkxNTIzMzVaMDMxMTAvBgNV
BAMTKDgwRjZDNTZBQTVCMUVFN0YxMDI3QjgwMzU0NDRGMjUxNzFFRDAxRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/FB44GmZc0d6tB+z0C3ta8UBF
LYXO6Il/5yLwuTvSdEjGWPdqF8FVd5YMPmq2Kios3CTz3QlpGPsXa4haDIv+Q6Rw
Vy7I/kR+M/X8JhyQ2g2GyoyrvWJA50Vm4T9dg2RZ1hn28XBd/EN1DCXslAp4kvNP
LQUR7+S0Zw19y8H0EHKeMyCMb4ZQYvGWZOq366gwAYFqQoiB7XEdnANRskHHf4e7
XR+B/qKXWrzb5cwq6nm4hZIPoMTZMH4bL4VtUA5wOsaIJvEQPfrhAnffg7KLlZhF
ByjkFslmivErkn3yidEeKrrJZCXobHQh+5QHAKJJdXBIoHuA/KUBP/iS5jpJAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUgPbFaqWx7n8QJ7gDVETyUXHtAeUwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM1MmUz
MTM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADCBZswDQYJKoZIhvcNAQELBQADggEBAEkjtACm+zoUn5Xwgkn/r9LGy8Ly
dc0bAwcczZfNcBQGbWfRqNznwzmDXxETBqVDGLHwW/KmUP0c7bIbvKBBANzM1QYK
T71YKoYXLpVWCeRw7UG85CT/E8aDcjyXRq+zkTOZvCPYGaMXCC0YAB45boPr+VnA
T/BSc9UwXGO4AcxL0moLGM0lv1jyqHJUm7cHTqVvviKzu4AUfKVZulM9wF1OYlJX
xBCAwPCdXpA1wmPbMh27KxzlrEPict9sWN9qQxa3ZqJYguDurtuVyO5K8M98W1Jd
cIC1re0pQObjsinlwrCGN/TnG6XLhkA15/a8fCJGTLSej/8YrN+Glocd8ro=
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:34:07 2025 by rpki-client