Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38372e302f32342d3234203d3e20333935303932.roa
File: 3139342e36302e38372e302f32342d3234203d3e20333935303932.roa (raw, json)
Hash identifier: 2phFIEQlQVEZcqvI/x7cYjIFkM+bHPsbChfmpXzOpsg=
Subject key identifier: 03:B3:2A:71:74:F5:37:D2:B3:47:6E:BA:69:4B:EA:75:FB:F1:41:4C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 22E6CDDC8AC6E15B24979E03AF512FA53919B638
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38372e302f32342d3234203d3e20333935303932.roa
Signing time: Fri 27 Dec 2024 11:47:43 +0000
ROA not before: Fri 27 Dec 2024 11:42:43 +0000
ROA not after: Fri 26 Dec 2025 11:47:43 +0000
asID: 395092
IP address blocks: 194.60.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:e6:cd:dc:8a:c6:e1:5b:24:97:9e:03:af:51:2f:a5:39:19:b6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:43 2024 GMT
Not After : Dec 26 11:47:43 2025 GMT
Subject: CN=03B32A7174F537D2B3476EBA694BEA75FBF1414C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1e:60:12:12:26:14:88:fa:6d:64:da:cb:8f:
e4:37:77:54:60:02:f2:33:b8:72:1b:9e:af:77:78:
0f:eb:c1:6f:e7:93:89:74:63:b0:0a:a0:e5:af:93:
2a:d6:47:71:24:7e:8b:a8:de:19:50:f5:d3:7d:6b:
c8:dc:ed:f5:0c:76:38:6a:c3:8f:ae:e6:c6:cf:a5:
32:11:4b:ee:15:39:20:f3:8f:cc:c7:6c:26:65:75:
e4:67:f8:91:76:0f:57:3e:c5:73:f3:ec:69:be:b1:
fb:2a:14:c9:35:3a:f8:db:a4:d3:43:3b:0d:b7:d3:
4d:a7:fb:a8:2f:91:bd:94:cb:09:78:86:f8:27:37:
e0:c9:98:b7:2f:b2:c2:20:ea:9a:30:75:77:21:f0:
d5:79:00:61:fc:6d:36:3d:b0:96:65:d8:c6:41:3d:
86:ef:c4:8e:2c:8b:ed:f8:e0:64:7d:be:38:7a:c2:
37:71:2d:8a:28:53:8d:f9:87:80:e9:04:aa:ac:ad:
26:c0:e5:52:b5:07:33:f0:bd:11:da:d5:48:10:44:
f1:ae:9b:33:53:f7:1b:75:38:f1:59:8d:bc:19:04:
69:dd:9b:28:93:c3:69:8e:9f:d3:61:30:d3:6a:b3:
3a:e6:26:16:ce:20:c2:d3:97:d1:c9:07:e3:df:3e:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B3:2A:71:74:F5:37:D2:B3:47:6E:BA:69:4B:EA:75:FB:F1:41:4C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38372e302f32342d3234203d3e20333935303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:c1:59:b2:20:4f:13:e5:70:39:79:e9:44:1e:4a:55:c5:04:
0a:7d:9f:94:ed:00:93:37:38:e0:19:cf:40:71:1f:83:c6:70:
6b:57:8a:78:f2:b1:d6:22:a7:c8:75:20:85:20:dc:5c:46:88:
3c:f1:5c:55:2d:f7:c6:bc:a9:04:c2:76:88:ba:b4:73:b2:3a:
c5:c2:a3:1c:6d:36:98:97:69:b7:27:7f:bf:4b:b2:70:62:36:
22:c9:53:fa:9c:7c:a1:15:d2:09:fd:ad:52:b1:cc:b5:80:c7:
ef:88:47:00:b8:da:14:4c:6e:a8:d9:bd:b1:7c:ce:9e:8c:b3:
47:96:cd:97:57:53:2b:0f:06:17:27:66:0c:7e:09:43:11:af:
8b:5e:1d:f7:be:8c:70:7c:ca:34:f1:6c:a4:8b:62:3a:31:00:
45:b1:b1:5e:90:5c:38:e7:b0:1e:7c:e2:13:1b:74:cf:07:8c:
e9:9d:cd:19:5f:ef:f1:9b:77:c5:d4:5e:91:95:5b:ed:69:0b:
e7:dc:6f:bf:df:7a:c0:f9:8a:8e:2f:4b:65:fe:79:eb:f7:82:
4e:db:6e:11:fe:d9:4c:f6:1e:33:ad:26:00:25:5c:70:06:65:
4e:fd:83:a7:21:81:59:f9:04:17:a2:8b:34:c8:90:03:0a:13:
a5:f9:9c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:32:10 2025 by rpki-client