Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e33372e302f32342d3234203d3e20313336373837.roa
File: 322e35382e33372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: bi0TpYjUNiHBhSFEVIPOdCOV46FNPUL42CBHotvBy5M=
Subject key identifier: 65:48:33:F6:49:91:04:2A:07:D1:13:F2:51:A2:A6:A1:89:E6:31:75
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 683897C6F1CF82252AAF106C2564D144F5246F2E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e33372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:32 +0000
ROA not before: Fri 27 Dec 2024 11:42:32 +0000
ROA not after: Fri 26 Dec 2025 11:47:32 +0000
asID: 136787
IP address blocks: 2.58.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:38:97:c6:f1:cf:82:25:2a:af:10:6c:25:64:d1:44:f5:24:6f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:32 2024 GMT
Not After : Dec 26 11:47:32 2025 GMT
Subject: CN=654833F64991042A07D113F251A2A6A189E63175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:71:17:40:70:97:67:e4:a1:53:e4:99:6d:d1:
d4:bc:87:60:76:b4:06:a0:f1:1b:27:ae:5b:2b:de:
5e:ed:b0:32:bc:1b:e0:00:a3:36:6c:8f:be:f0:88:
55:3f:bd:e0:32:f5:65:f4:c9:b2:c5:66:ad:4c:12:
ee:81:03:db:0f:3f:10:1e:00:d1:bc:f5:a3:54:93:
a8:d4:9d:73:d1:a8:0d:d7:a3:24:31:66:7b:19:5d:
a1:31:d4:d5:fd:5c:9f:7e:03:ef:0f:f6:3e:31:c1:
79:20:d2:82:2f:dc:46:55:1b:66:4b:42:e9:9e:04:
c1:77:ed:1e:68:1d:39:de:80:66:c1:fa:76:a4:d2:
b8:12:02:ab:96:77:21:77:36:a9:4e:ab:71:ea:5c:
3f:df:f7:6a:2e:91:57:62:c5:e3:fa:12:9b:c9:28:
2c:28:8b:30:36:95:65:32:16:82:91:b7:20:8e:2f:
fc:78:a8:b6:83:90:5e:df:a8:f0:0b:6c:5d:e8:bb:
89:ce:0b:1a:30:f4:4f:6f:af:ab:0d:74:4c:90:c9:
e0:b5:3f:cb:5a:65:cc:14:13:4d:65:9f:5e:27:a9:
d5:d6:fa:46:45:cd:8a:d3:39:2a:f3:b3:01:2c:df:
e8:2a:ae:2a:60:48:5d:6e:cd:6a:e7:89:4e:f1:62:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:48:33:F6:49:91:04:2A:07:D1:13:F2:51:A2:A6:A1:89:E6:31:75
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e33372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:77:15:2f:70:e0:e0:2c:95:af:45:e7:4d:59:e7:1a:15:2d:
fc:92:78:d3:bf:89:d6:f1:05:b4:fb:ea:7a:4d:16:db:e6:9c:
90:29:bb:ac:9e:0e:f3:e7:3d:fd:00:dc:92:25:1c:23:bf:e1:
8a:64:bf:58:1b:f0:54:8b:b5:c0:c9:dc:90:ea:c6:fd:13:bf:
db:f7:68:fc:4d:0c:d8:d0:1a:7c:62:2b:8c:34:aa:9f:f0:23:
98:b1:09:8b:92:6f:b6:da:2d:92:5f:18:8c:0f:c5:a5:3b:9f:
d8:fb:a7:d3:85:7c:13:16:b4:44:e1:3f:ae:37:e4:7c:e2:f7:
96:dd:82:86:3b:54:79:c1:27:5f:85:c3:16:3c:b6:3a:77:9c:
8c:7b:5b:de:67:1d:78:ff:4d:e1:c4:5a:27:44:28:84:a6:da:
8d:d0:5a:1a:01:13:d3:ca:32:49:be:ba:f0:22:c7:dd:18:24:
13:52:bd:e8:70:12:2d:eb:fa:0a:4d:b5:bf:3f:36:b3:d5:db:
44:b6:27:5d:af:3f:e0:53:9f:93:44:18:6a:32:1a:f4:97:f0:
55:75:25:43:b9:be:b8:37:44:b3:f6:2a:54:ac:41:3b:3d:86:
e3:b5:5d:7f:24:6b:34:40:a3:80:dc:b5:70:b7:2f:cd:2f:58:
eb:59:2e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:35:25 2025 by rpki-client