Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231322e3130332e36312e302f32342d3234203d3e20313336373837.roa
File: 3231322e3130332e36312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: fjDFg8czQHBMaYPO7CkJhaWxdx2W3QPhyMcvaBDfDQw=
Subject key identifier: A8:AE:BA:E2:34:0C:54:3B:2C:5C:D6:F3:C1:F7:C9:6C:40:8A:EF:5B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 623C280501C89793E4944EBCF83FD94F0D103393
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231322e3130332e36312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:36 +0000
ROA not before: Fri 27 Dec 2024 11:42:36 +0000
ROA not after: Fri 26 Dec 2025 11:47:36 +0000
asID: 136787
IP address blocks: 212.103.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3c:28:05:01:c8:97:93:e4:94:4e:bc:f8:3f:d9:4f:0d:10:33:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:36 2024 GMT
Not After : Dec 26 11:47:36 2025 GMT
Subject: CN=A8AEBAE2340C543B2C5CD6F3C1F7C96C408AEF5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:00:c0:c4:f9:1b:25:2b:5a:1c:bf:46:38:04:
87:c9:3e:e5:9b:fd:a5:df:82:3f:2e:ee:99:30:25:
4f:6a:56:25:19:54:22:53:ea:b3:15:86:1c:9f:47:
aa:e3:ef:7a:85:12:e6:64:69:bb:e7:de:2f:ed:0a:
0f:39:8f:e1:b4:63:54:c8:38:a3:e1:69:09:b1:26:
ef:0e:46:6d:64:64:74:fb:42:89:0a:da:72:24:8c:
8b:0d:82:00:36:81:ce:c7:76:cd:b2:3d:69:e7:9e:
31:bf:89:98:05:04:b5:93:ce:26:97:af:a3:61:ea:
29:a6:ad:31:71:73:c6:aa:4d:e9:f4:d4:bb:60:66:
d5:8b:d0:cd:21:02:4f:49:f7:5a:ee:78:e3:8a:32:
93:9f:66:0b:bd:5b:01:9f:0b:e8:9b:f6:a0:01:09:
61:96:92:90:15:48:2a:0e:63:92:7c:c3:a5:99:7d:
fd:ec:b3:1d:eb:b2:3a:d5:52:bb:5a:79:36:67:24:
20:f8:08:f1:ac:49:35:a2:82:2a:95:c2:c8:49:ef:
c6:fa:d9:f9:ea:5c:09:3c:9f:b6:74:aa:1c:33:be:
71:fc:3d:7a:9f:75:9c:04:8c:c3:94:9e:a2:8d:6e:
cc:99:fc:61:5e:a0:2f:c2:58:6f:db:ef:e9:91:26:
41:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AE:BA:E2:34:0C:54:3B:2C:5C:D6:F3:C1:F7:C9:6C:40:8A:EF:5B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231322e3130332e36312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.61.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:13:8b:57:1a:d2:5f:e5:d0:27:bc:5d:9b:e3:2f:07:ca:b5:
14:57:f1:b9:e5:1b:3e:e8:1f:83:6d:85:0b:8a:07:54:eb:30:
c1:97:27:4c:3e:30:1d:a3:01:c6:e3:56:95:70:05:49:c3:e3:
c5:f2:4c:e9:84:6c:f2:64:c1:13:7e:e2:8f:79:8d:8d:7e:84:
b2:aa:74:6d:89:a4:ee:17:5b:92:d2:b7:a1:63:78:0f:4e:e2:
c0:0e:c6:8f:71:0a:90:94:a2:d2:ba:0a:70:7f:54:f2:22:e9:
b9:42:b5:d3:a6:8f:89:38:78:78:db:2d:30:de:cd:07:a8:f5:
64:b5:6a:23:54:d9:d1:c9:e4:2d:03:f2:5f:12:0e:bf:93:d5:
ad:14:16:05:d8:bf:cf:82:39:a1:9c:58:e1:30:b0:c1:25:13:
63:ba:79:07:6b:2b:2e:b3:4b:5a:c9:c6:85:e5:15:2e:14:51:
e7:d7:97:73:bb:04:20:48:7d:20:ad:e5:8e:d7:96:22:b4:95:
d6:bd:32:2e:a6:25:5e:e1:b8:84:12:36:36:fc:33:33:03:5d:
11:ce:ce:ad:a9:b0:a4:cf:53:88:20:b0:e7:7f:b4:20:7c:3b:
7a:0e:50:8c:4a:70:19:35:f8:be:d2:42:2a:7c:c4:a0:d1:d6:
0f:2c:a1:4c
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUYjwoBQHIl5PklE68+D/ZTw0QM5MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMzZaFw0yNTEyMjYxMTQ3MzZaMDMxMTAvBgNV
BAMTKEE4QUVCQUUyMzQwQzU0M0IyQzVDRDZGM0MxRjdDOTZDNDA4QUVGNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiAMDE+RslK1ocv0Y4BIfJPuWb
/aXfgj8u7pkwJU9qViUZVCJT6rMVhhyfR6rj73qFEuZkabvn3i/tCg85j+G0Y1TI
OKPhaQmxJu8ORm1kZHT7QokK2nIkjIsNggA2gc7Hds2yPWnnnjG/iZgFBLWTziaX
r6Nh6immrTFxc8aqTen01LtgZtWL0M0hAk9J91rueOOKMpOfZgu9WwGfC+ib9qAB
CWGWkpAVSCoOY5J8w6WZff3ssx3rsjrVUrtaeTZnJCD4CPGsSTWigiqVwshJ78b6
2fnqXAk8n7Z0qhwzvnH8PXqfdZwEjMOUnqKNbsyZ/GFeoC/CWG/b7+mRJkGPAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUqK664jQMVDssXNbzwffJbECK71swHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjMxMzIyZTMxMzAz
MzJlMzYzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEANRnPTANBgkqhkiG9w0BAQsFAAOCAQEAWhOLVxrSX+XQJ7xdm+MvB8q1
FFfxueUbPugfg22FC4oHVOswwZcnTD4wHaMBxuNWlXAFScPjxfJM6YRs8mTBE37i
j3mNjX6Esqp0bYmk7hdbktK3oWN4D07iwA7Gj3EKkJSi0roKcH9U8iLpuUK106aP
iTh4eNstMN7NB6j1ZLVqI1TZ0cnkLQPyXxIOv5PVrRQWBdi/z4I5oZxY4TCwwSUT
Y7p5B2srLrNLWsnGheUVLhRR59eXc7sEIEh9IK3ljteWIrSV1r0yLqYlXuG4hBI2
NvwzMwNdEc7OramwpM9TiCCw53+0IHw7eg5QjEpwGTX4vtJCKnzEoNHWDyyhTA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:46:27 2025 by rpki-client