Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e32382e302f32342d3332203d3e203531313637.roa
File: 3139342e36312e32382e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: jrKkXJrWFSR1TVgyWQc0JN/E/6jlP8nXEsdfe61gmXk=
Subject key identifier: 3C:99:A9:64:49:5E:73:CE:30:87:3A:19:44:D1:C8:69:D9:79:95:13
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 387177FE0D44DECF161B7DD270E4ACE17E69048F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e32382e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Dec 2024 15:23:33 +0000
ROA not before: Fri 20 Dec 2024 15:18:33 +0000
ROA not after: Fri 19 Dec 2025 15:23:33 +0000
asID: 51167
IP address blocks: 194.61.28.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:71:77:fe:0d:44:de:cf:16:1b:7d:d2:70:e4:ac:e1:7e:69:04:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:33 2024 GMT
Not After : Dec 19 15:23:33 2025 GMT
Subject: CN=3C99A964495E73CE30873A1944D1C869D9799513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f9:33:ff:c5:17:0a:e5:a8:86:2e:e8:22:ff:
64:1a:6e:52:1a:e6:86:87:9b:93:58:6c:ba:e6:61:
64:4c:80:c7:51:79:ca:e5:ec:d0:e4:71:8c:17:cf:
b5:b7:79:a7:9f:e4:5b:7b:b3:b7:3a:3f:5a:8a:37:
11:99:ff:88:33:7c:52:83:89:cb:42:e6:07:8d:f5:
79:17:87:b0:ef:c7:c6:8e:0d:44:fd:a5:cb:da:3d:
72:e5:45:f9:e6:5d:27:aa:85:0b:c1:d5:90:6e:0b:
3c:97:49:6e:7f:58:50:ce:d6:f9:a0:b3:bc:26:71:
00:a8:d1:8e:b7:08:c3:58:98:51:f9:af:52:35:d2:
3c:54:c3:c7:6d:6f:0e:ec:15:82:9f:7d:19:1b:6a:
73:7f:06:db:0c:25:d8:32:e2:5c:dc:a4:b8:eb:c4:
33:5d:cb:c3:68:d8:1f:b3:bf:ac:f3:57:fc:df:5a:
55:5d:6b:eb:bf:b7:ad:95:b8:b4:95:9c:d3:fe:70:
bc:ac:8f:2b:7b:39:76:ca:06:32:ab:3a:22:7f:4a:
51:97:9b:0f:9e:9c:d6:f8:aa:cd:d2:19:01:81:57:
ad:a4:21:f8:aa:87:1c:b0:82:ec:34:b5:30:df:cb:
ab:90:8a:80:da:0e:4e:09:e5:5f:68:d3:35:5f:65:
d0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:99:A9:64:49:5E:73:CE:30:87:3A:19:44:D1:C8:69:D9:79:95:13
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36312e32382e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.28.0/24
Signature Algorithm: sha256WithRSAEncryption
21:af:df:1c:6d:93:9a:66:3e:c0:2c:ba:f1:a5:ed:98:ce:36:
09:59:85:6c:f4:4b:2d:f8:a4:c3:dd:6b:b7:db:be:73:03:7d:
95:ef:6b:cd:db:54:fa:20:9f:7a:9b:9c:d1:f7:b9:74:b2:6e:
0f:00:74:17:29:3a:1f:a7:5d:85:f8:7f:05:41:69:ca:fd:34:
03:e8:76:37:14:86:ec:75:2e:31:db:f7:e6:4e:a8:0f:4b:2b:
44:7a:ff:d2:a0:c6:f0:68:a5:08:61:ac:d4:e0:93:60:4b:db:
1a:aa:2c:8e:05:d4:cb:7e:20:2b:05:f8:11:69:75:14:13:e0:
d6:d5:31:7e:40:f1:dd:b2:40:bb:9f:c4:50:5b:c7:c0:9c:6a:
b7:86:bd:06:98:8c:53:fd:8e:61:3a:ea:3b:fd:8a:a2:5e:57:
4c:d4:34:27:a1:0b:be:1b:38:e4:91:66:2a:d2:4c:7d:ef:ea:
d3:b4:62:29:5f:e1:39:83:73:e9:cc:7e:a9:cd:d7:a3:eb:b0:
79:ba:86:6e:bc:77:10:5b:b7:a8:5e:10:72:96:ea:55:4b:0d:
f1:39:05:4c:8c:23:de:bb:9f:5b:b3:66:a1:ef:ba:79:84:c5:
fc:8e:14:4b:1b:20:21:a3:81:4a:96:f3:50:e8:ec:56:2f:22:
a1:b0:dc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:12:20 2025 by rpki-client