Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3235332e302f32342d3234203d3e20313336373837.roa
File: 3139342e35392e3235332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 1EJ4iVH+wmQ62IR0b2Z3xYzo9eiYP/Y0ic38h0aVXxQ=
Subject key identifier: 0D:EB:84:08:E8:FE:FA:A5:CB:DB:17:03:9E:27:26:94:AC:2E:92:49
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7C1B413D317E3816C93EDF57107260B62DB21D33
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3235332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:11 +0000
ROA not before: Fri 27 Dec 2024 11:42:11 +0000
ROA not after: Fri 26 Dec 2025 11:47:11 +0000
asID: 136787
IP address blocks: 194.59.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:1b:41:3d:31:7e:38:16:c9:3e:df:57:10:72:60:b6:2d:b2:1d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:11 2024 GMT
Not After : Dec 26 11:47:11 2025 GMT
Subject: CN=0DEB8408E8FEFAA5CBDB17039E272694AC2E9249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:e8:d0:c4:57:20:ff:6e:90:34:7b:8b:4e:
60:ea:1a:41:b0:9c:57:f6:9b:de:e8:7a:14:d7:1c:
f2:f2:17:28:fa:7e:e0:f0:9a:c5:b9:ae:30:5c:e0:
f9:1e:69:ed:e6:b5:3c:71:8f:80:d3:23:89:77:dc:
b0:5e:19:9b:68:19:82:8b:2f:b0:0f:db:b4:89:2c:
e4:14:88:63:09:2e:86:46:95:9b:44:38:c3:a5:a8:
26:29:18:2e:64:c3:a2:a1:77:ad:26:1a:85:44:04:
54:8c:00:27:e9:8b:7a:04:53:39:a3:e8:60:94:86:
16:47:56:44:fa:1b:2c:9b:56:18:c2:9f:cb:dc:9a:
6c:27:26:85:a5:37:54:c0:79:a7:3c:db:a3:33:fa:
5e:94:44:74:9e:0d:72:8a:3f:ca:24:2c:62:48:c3:
1a:c7:1d:eb:6f:c3:d8:30:ac:11:3d:30:20:0f:e2:
5c:bc:a5:07:eb:08:23:5c:d9:a1:f0:b5:72:ca:74:
87:82:39:a1:32:f6:6a:7a:db:3a:81:ca:3c:19:0d:
02:bd:76:e3:c5:89:93:e7:46:9c:d0:2f:c1:1b:10:
28:3b:3d:b9:52:48:28:9a:ed:00:a1:43:98:8b:0b:
a9:a6:01:f4:10:00:5c:2f:b4:d9:cd:27:21:03:49:
e2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EB:84:08:E8:FE:FA:A5:CB:DB:17:03:9E:27:26:94:AC:2E:92:49
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3235332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.253.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b9:61:59:53:6c:0d:f7:11:3b:ad:87:7d:14:08:51:82:4e:
a3:16:b6:50:b4:1a:b3:fd:eb:51:31:f0:cb:67:fe:fb:d9:4b:
a0:a6:11:a8:05:c9:dd:be:e5:b6:64:05:6b:56:2e:12:13:0d:
fd:33:5a:fc:05:43:a7:37:f6:5b:32:e4:f0:d1:f9:5a:6c:3e:
44:27:ab:54:96:e5:c4:12:23:46:d5:9c:8c:1e:b8:c8:5c:f0:
ef:92:fa:93:d4:27:14:09:90:c5:f0:ad:52:c1:d7:e0:a4:5c:
80:77:bf:cd:37:2a:8f:99:91:c5:4c:d7:1f:75:9a:8d:f6:31:
47:ef:a5:1b:02:9e:f5:5d:23:1a:61:88:ac:13:ff:e7:65:ea:
d7:d3:4b:11:f3:32:38:92:8c:c4:d1:f6:e6:1d:51:36:ac:40:
ff:99:b5:be:30:bb:10:44:46:e1:5c:b6:3e:b1:40:bf:99:93:
d1:2b:0e:3c:5d:4b:63:5d:d7:0b:ca:fe:fc:11:35:20:a9:42:
7d:e1:82:94:f6:ce:8e:c3:b0:74:72:e2:c7:e1:51:fb:81:fc:
b3:12:b5:14:32:2f:e5:ae:6c:74:03:80:76:f6:a9:46:cf:95:
03:6b:14:a9:cc:1f:dc:8f:73:8b:5d:6b:15:d9:5c:b6:0c:df:
1a:f7:d9:10
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:28:59 2025 by rpki-client