Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3130392e302f32342d3234203d3e20313336373837.roa
File: 3139342e35332e3130392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: XzWipJXLRN4Et0r+N5N+nEdYv8Ch/wtuV9ouuVAAqd8=
Subject key identifier: EC:0B:F5:B1:78:B6:8E:DA:82:49:20:BE:73:A5:D5:D4:A2:A0:E5:F2
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 65A47198DCD7A6FA809C0E3D917F88C626295519
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3130392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:32 +0000
ROA not before: Fri 20 Dec 2024 15:18:32 +0000
ROA not after: Fri 19 Dec 2025 15:23:32 +0000
asID: 136787
IP address blocks: 194.53.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a4:71:98:dc:d7:a6:fa:80:9c:0e:3d:91:7f:88:c6:26:29:55:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:32 2024 GMT
Not After : Dec 19 15:23:32 2025 GMT
Subject: CN=EC0BF5B178B68EDA824920BE73A5D5D4A2A0E5F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:34:cf:f4:5b:2c:db:1b:a3:68:23:60:51:
f8:cc:5c:d0:4b:87:ed:2f:45:6f:c9:39:50:cd:3b:
c9:0d:4d:88:8b:8b:ed:a4:e3:2d:48:d1:f2:d0:17:
4b:56:d8:62:f4:4d:21:f4:5d:0f:53:51:84:ec:12:
89:51:66:4c:67:c8:7b:b3:39:18:d5:2f:9f:73:88:
8a:59:e1:19:5b:15:84:0e:f7:c5:98:19:13:2b:bc:
c6:7b:6d:b1:4d:2a:f0:59:22:5b:a6:02:47:70:ba:
f5:31:37:01:05:a5:11:84:79:4e:70:1c:6e:ee:ca:
92:84:c8:07:35:49:f2:a5:b2:59:ee:28:96:a6:4a:
6f:34:34:69:d1:3c:9c:6a:29:5e:27:de:df:3c:b1:
08:e9:b3:ee:54:5d:07:b5:99:fa:f6:ad:18:54:93:
4c:b9:d8:61:fd:ae:d1:66:60:e0:da:42:92:7b:8c:
9f:70:12:39:87:ed:c5:51:38:ed:b0:5a:70:5a:fc:
aa:19:a3:20:1b:18:ef:89:2f:30:e8:d2:6e:6b:85:
22:50:59:db:27:87:eb:e3:da:06:5a:cf:95:33:db:
c8:6f:8a:d4:ae:1c:8a:10:69:c2:17:b6:fa:7b:38:
ff:fa:3b:22:04:79:8f:f4:a0:78:49:bf:f6:28:53:
16:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0B:F5:B1:78:B6:8E:DA:82:49:20:BE:73:A5:D5:D4:A2:A0:E5:F2
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3130392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.109.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:e1:35:97:2a:bd:fe:b2:2b:83:2f:2b:17:bc:c0:f7:5c:a4:
18:69:b7:96:67:85:30:ff:57:7d:47:89:74:5a:ac:67:35:e8:
ac:c6:ef:c8:ad:2e:4c:43:2b:4d:ef:91:1d:9c:d1:4f:c0:2e:
0b:b3:ab:53:ef:08:68:4d:a9:af:71:0a:c8:73:27:9c:3a:ec:
ea:f7:00:dc:de:cb:9b:6d:72:b8:bc:2b:7d:59:84:b6:bd:d7:
71:ab:84:86:a4:d5:28:ba:5c:bb:67:b2:0b:a7:6c:81:5b:fc:
1e:9b:98:9b:5a:56:d8:c2:c2:8c:eb:79:cb:cc:41:a3:2f:71:
15:83:57:21:89:8d:fa:36:d3:bb:8c:63:8f:dd:bb:b3:93:c8:
74:6d:65:44:21:d7:a7:ed:93:80:07:d1:3f:25:35:69:d7:39:
45:93:fb:fa:ab:61:a2:6e:ad:15:4c:56:e4:14:44:c0:5d:e9:
a3:d3:87:ba:83:49:32:83:83:05:f7:62:0b:31:48:da:92:51:
cc:50:b8:09:f9:1e:0d:49:3e:cc:b5:0d:b7:03:d8:7c:bc:01:
b9:2c:16:50:59:b5:99:2e:6b:6e:33:7c:c1:5f:fd:74:c7:90:
46:d9:56:76:34:6c:10:a4:dd:19:5b:19:44:a0:23:7b:f9:4e:
72:88:ae:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:52:34 2025 by rpki-client