Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3136342e302f32332d3234203d3e203437353833.roa
File: 3139342e35392e3136342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: 5vyIBg0bZag62XYH2MLv1y1tRySXQu9vCntVHaTD1EE=
Subject key identifier: B0:73:F0:EC:2B:98:59:B4:FB:A5:B5:26:F0:E4:F4:A3:60:61:77:9B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2ABBFA88D1FDE2265C2999596BE2726F0E891E49
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3136342e302f32332d3234203d3e203437353833.roa
Signing time: Fri 27 Dec 2024 11:47:46 +0000
ROA not before: Fri 27 Dec 2024 11:42:46 +0000
ROA not after: Fri 26 Dec 2025 11:47:46 +0000
asID: 47583
IP address blocks: 194.59.164.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:bb:fa:88:d1:fd:e2:26:5c:29:99:59:6b:e2:72:6f:0e:89:1e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:46 2024 GMT
Not After : Dec 26 11:47:46 2025 GMT
Subject: CN=B073F0EC2B9859B4FBA5B526F0E4F4A36061779B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d7:42:50:61:e5:e1:f4:34:d0:11:c8:e8:20:
0d:b5:49:20:cc:f1:fd:86:a5:8a:b6:5e:19:99:f3:
fd:32:f7:a9:f0:14:5d:bf:bd:d4:7d:c2:59:72:42:
f8:c7:e5:cc:7a:10:eb:23:a3:30:70:af:1c:4e:c0:
14:4d:2c:8d:e4:3c:1a:8b:c8:d7:f9:b6:d4:8c:c0:
ea:db:75:74:e9:ce:9b:57:d1:27:e2:fe:94:55:99:
60:2e:aa:a2:47:85:03:24:9c:92:41:5c:cd:a8:5f:
b2:7d:cc:31:89:5b:b9:fc:b8:c4:28:ae:70:de:c0:
46:ee:02:7f:4f:ad:02:a8:1b:a4:47:97:e2:45:0b:
32:00:d8:cd:e3:54:45:46:c0:ae:4b:a7:de:45:f7:
b9:27:f4:87:e7:0f:c6:e4:c4:72:28:3b:61:91:d2:
34:5c:14:c7:dd:fb:49:6c:74:f9:08:1c:37:cc:b0:
a2:a1:e4:eb:d1:76:3e:2f:70:b1:82:45:ad:81:62:
4b:ca:ab:e0:9e:3b:22:e0:2d:80:e3:40:bb:1f:2f:
5a:86:b4:a6:dd:66:ac:d8:d1:2f:48:3f:85:b8:8d:
48:73:14:fd:60:e2:6f:80:e9:11:1e:2e:9c:5f:3d:
31:13:ca:e1:d8:88:ce:dc:69:b3:1c:9e:02:1e:81:
6b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:73:F0:EC:2B:98:59:B4:FB:A5:B5:26:F0:E4:F4:A3:60:61:77:9B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3136342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.164.0/23
Signature Algorithm: sha256WithRSAEncryption
43:d1:79:fd:fb:15:03:2d:a1:f3:fb:79:0e:a0:db:3f:22:2e:
96:b6:bb:7b:fb:51:dc:5f:32:1a:e1:63:08:4b:5b:b1:26:bf:
bc:e6:70:3c:ac:e2:4f:1b:3b:af:a5:9e:8a:88:51:dc:2e:2d:
51:c6:d9:df:50:f1:59:38:e8:49:87:0f:cd:a3:0d:eb:98:18:
4c:f0:c2:a6:8a:3c:7e:5c:ec:c7:aa:dd:3d:e2:51:80:d8:c2:
d9:ff:c7:f5:b4:55:99:b0:2f:f8:84:a0:0c:38:98:5d:8e:9f:
b5:50:88:e3:34:99:4b:d2:d2:20:68:6c:e8:d1:69:d9:25:81:
8d:7d:95:30:c2:55:f2:c9:14:24:22:f9:62:10:b8:b1:d9:72:
7f:ed:2a:3a:eb:6e:ba:c3:51:38:c8:40:00:c5:6f:0d:8a:49:
58:e9:40:a3:5e:86:70:3a:04:14:f9:37:32:c5:c0:90:4a:d4:
2f:14:b8:27:3e:72:2d:6b:e2:a7:36:48:19:19:94:67:14:94:
cf:0d:43:3b:72:19:04:88:0c:1b:16:2a:ca:a0:61:bb:3c:5e:
98:4b:e2:7c:b9:5f:4d:7a:3a:b4:07:2f:5f:79:7b:26:4b:c4:
7e:1c:93:ca:cf:f9:f8:fd:a1:14:33:43:1c:93:86:98:e6:db:
62:ab:3f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:49 2025 by rpki-client