Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231322e3130332e36332e302f32342d3234203d3e20333938373831.roa
File: 3231322e3130332e36332e302f32342d3234203d3e20333938373831.roa (raw, json)
Hash identifier: WZ9YJ0qK7X4OFdqlQtSV095dTsIHkYRF62CmWpHgAJs=
Subject key identifier: 75:8E:F0:CD:19:06:AF:2E:A6:1E:49:5A:69:2C:73:E2:03:EA:92:95
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 36FA82BD03E7CC4778547E241F585BE9BCDBC381
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231322e3130332e36332e302f32342d3234203d3e20333938373831.roa
Signing time: Sat 04 Jan 2025 05:15:16 +0000
ROA not before: Sat 04 Jan 2025 05:10:16 +0000
ROA not after: Sat 03 Jan 2026 05:15:16 +0000
asID: 398781
IP address blocks: 212.103.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:fa:82:bd:03:e7:cc:47:78:54:7e:24:1f:58:5b:e9:bc:db:c3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jan 4 05:10:16 2025 GMT
Not After : Jan 3 05:15:16 2026 GMT
Subject: CN=758EF0CD1906AF2EA61E495A692C73E203EA9295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:86:e9:5d:cd:97:de:f1:ad:7c:79:87:7a:7c:
a3:20:e7:63:d0:da:87:6f:b8:b8:a5:cb:d2:d2:58:
59:da:f9:12:7d:09:e0:66:d2:83:d3:e9:3d:c8:d8:
8e:1d:dd:75:31:3b:b6:6e:2e:a4:c0:c7:69:bf:6e:
0d:d0:f7:e5:1d:d6:fb:ac:ff:d0:c4:be:d4:60:17:
4f:cd:5b:05:f5:b7:a4:25:d6:d5:00:94:d2:d1:d3:
c4:af:a9:3b:a9:c0:8f:3e:71:d0:ce:99:c7:2a:89:
a7:5a:4d:7b:f6:b4:b3:23:fa:fd:00:6e:bc:4b:40:
ab:9a:f3:f3:be:3f:43:bd:9c:d2:13:04:5c:a5:7f:
b9:11:b5:90:3a:14:c1:7c:6c:c3:d7:18:e0:f6:00:
ee:36:79:c3:c8:11:9c:72:6f:3c:d2:72:cb:37:4e:
fb:4f:44:8d:04:78:64:af:f9:03:52:58:ad:92:05:
71:2c:4e:21:51:d4:cf:fb:15:16:31:f7:54:69:d5:
4c:42:1d:2e:4e:5f:7e:3a:a5:10:be:6f:8d:76:5d:
1a:fc:10:f1:9a:f2:47:ed:ad:54:5f:fa:0c:08:6d:
33:7f:5f:52:64:95:a4:f3:ed:23:5c:a0:61:9d:8f:
ea:44:87:77:b6:16:fa:1f:aa:2d:59:9f:9c:46:c2:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8E:F0:CD:19:06:AF:2E:A6:1E:49:5A:69:2C:73:E2:03:EA:92:95
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231322e3130332e36332e302f32342d3234203d3e20333938373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.63.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:be:13:fc:49:98:78:60:61:a8:2c:68:67:ea:98:6e:4c:ad:
5d:82:f3:40:f8:c2:cb:cd:cf:67:3b:77:c6:b2:b3:42:f3:86:
79:84:77:16:ad:bf:f2:97:a9:46:ba:83:e2:14:4d:25:11:7d:
d9:4f:79:00:24:ce:68:91:3f:4f:65:51:e3:13:64:e9:31:68:
0f:2f:25:38:db:1f:fb:3b:d6:97:1a:aa:e5:50:ee:1a:a6:3e:
46:61:03:d0:2f:f7:0f:7a:74:d8:ef:72:36:8d:c2:4d:71:4a:
b5:15:6e:ca:46:4d:d7:54:1f:ed:e2:85:e7:33:b7:03:17:64:
c6:f6:c4:c9:83:c6:d4:4e:77:f6:c1:ed:52:a5:ad:8d:75:22:
bf:b0:25:af:8e:bb:c6:2b:17:2b:3f:8c:61:95:1b:4e:9a:4f:
27:11:45:0a:16:29:2b:a9:b1:4e:ec:c1:a2:88:87:bc:91:4b:
ec:76:c9:28:f8:5a:7e:7f:d9:1b:c6:3c:36:df:ff:92:18:4d:
fc:2e:07:70:0e:3f:ed:8d:a7:01:e8:11:d9:df:51:64:91:10:
e4:e2:35:32:55:d6:f5:1b:57:2b:58:d5:85:70:19:78:20:e8:
02:3d:b6:06:3f:e4:02:cd:4e:8b:a1:c0:76:61:13:ad:0a:8f:
cd:27:21:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:03:50 2025 by rpki-client