Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3136362e302f32332d3234203d3e203437353833.roa
File: 3139342e35392e3136362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: 8Ve0gL8rdfNfbvhLK4C3udykjmVmvTJohS9VnXoms1A=
Subject key identifier: 36:63:D0:EF:72:FA:D4:B3:83:D8:BF:2E:A2:30:5D:41:58:C1:7C:43
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5EEE02C69A0365EC6DEA53130A4DE6DCD469D446
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3136362e302f32332d3234203d3e203437353833.roa
Signing time: Fri 27 Dec 2024 11:47:25 +0000
ROA not before: Fri 27 Dec 2024 11:42:25 +0000
ROA not after: Fri 26 Dec 2025 11:47:25 +0000
asID: 47583
IP address blocks: 194.59.166.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ee:02:c6:9a:03:65:ec:6d:ea:53:13:0a:4d:e6:dc:d4:69:d4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:25 2024 GMT
Not After : Dec 26 11:47:25 2025 GMT
Subject: CN=3663D0EF72FAD4B383D8BF2EA2305D4158C17C43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:53:c1:da:e2:dc:1c:6c:dd:80:38:b3:98:
ad:7b:db:0f:4e:5b:67:f4:bc:e9:06:47:18:c9:97:
66:c4:34:4f:fc:37:39:0f:ff:bc:d8:22:f9:e0:55:
4d:fb:3c:51:55:00:66:2d:55:07:c5:ea:7c:0c:cd:
2c:6b:ea:cb:9c:68:6c:1e:5b:41:f1:1c:a2:af:f7:
5d:12:13:63:52:ef:75:db:bf:2c:f4:88:88:02:d5:
d0:c7:ed:80:78:e6:83:2d:0e:f2:8e:0d:f0:c3:f8:
5b:db:c0:ee:e1:c3:83:c9:d6:95:84:2d:05:36:9b:
a6:29:92:30:8a:d4:db:7c:fc:89:f5:02:20:f5:32:
23:80:41:f7:ec:7d:19:41:5b:03:eb:51:05:a7:9b:
4f:b2:42:00:e8:61:75:f9:24:d5:de:eb:7f:ae:eb:
df:82:61:55:c1:04:53:0c:f5:e9:c7:54:ad:dd:c0:
73:03:a4:39:72:e7:d4:3b:50:78:33:5d:5a:69:75:
fc:96:93:56:b7:68:20:26:1d:8e:b2:36:1f:b1:e2:
f8:d6:88:b7:55:56:2a:8b:43:6b:3f:86:a1:f0:51:
cb:07:d0:de:a1:4c:4c:b8:d7:d9:e7:0e:93:f2:e0:
97:d5:2e:c2:fc:c5:b0:85:7a:89:84:36:bd:6c:fa:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:63:D0:EF:72:FA:D4:B3:83:D8:BF:2E:A2:30:5D:41:58:C1:7C:43
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3136362e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.166.0/23
Signature Algorithm: sha256WithRSAEncryption
65:16:ff:be:98:cf:be:8e:15:65:bf:2e:76:21:45:ac:cb:19:
06:af:26:b4:7e:a3:de:ab:a4:70:9b:38:26:2f:63:5f:3f:f9:
cd:7a:04:80:f8:1e:68:6e:93:09:9a:11:08:ff:4a:eb:18:e6:
6a:c9:88:8a:92:aa:cf:3a:ae:48:73:f2:18:69:87:c5:05:1a:
37:6e:87:48:29:94:51:6b:25:7f:d7:c6:b1:f5:5b:2b:57:23:
1d:e3:fe:9a:b3:04:5e:68:b0:7a:db:7a:60:d4:4a:d9:0d:e7:
78:e1:ec:47:bb:fd:ad:3b:8b:cf:d5:5a:39:06:1f:12:3e:fa:
6a:be:ea:b5:50:e7:60:95:3d:0c:71:3c:ac:7b:06:27:5c:26:
f8:54:37:11:30:c0:c7:35:9e:b8:8a:93:2f:51:43:bb:fb:c2:
9f:74:be:37:ff:f5:e6:51:e2:9a:5c:84:40:87:1d:8c:e7:01:
9b:ad:39:a5:d7:66:b0:4c:b3:46:c1:ab:5d:cb:ad:6f:6a:8e:
49:ba:78:0d:86:0f:37:14:c2:48:85:66:1e:ee:17:ab:e4:a0:
73:48:7c:63:a8:2d:7a:aa:1d:06:ea:8a:62:d8:3f:69:1b:40:
c5:97:42:a2:8b:19:27:1a:5e:89:37:df:82:ee:4a:7b:39:1f:
c9:ad:e2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:35 2025 by rpki-client