Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e342e302f32342d3234203d3e203437353833.roa
File: 3231332e3139302e342e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: RPmBd4CZzXbvA79MbNgbldghrdKsugle9N9XNwfVbe0=
Subject key identifier: 70:B0:36:9B:20:DE:1B:05:10:0D:78:D2:35:D7:BC:9B:3B:6B:AC:F2
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 485986A18EAECDD4DB945A8C847D219FB750583C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e342e302f32342d3234203d3e203437353833.roa
Signing time: Fri 20 Dec 2024 15:23:36 +0000
ROA not before: Fri 20 Dec 2024 15:18:36 +0000
ROA not after: Fri 19 Dec 2025 15:23:36 +0000
asID: 47583
IP address blocks: 213.190.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:59:86:a1:8e:ae:cd:d4:db:94:5a:8c:84:7d:21:9f:b7:50:58:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:36 2024 GMT
Not After : Dec 19 15:23:36 2025 GMT
Subject: CN=70B0369B20DE1B05100D78D235D7BC9B3B6BACF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:7b:90:f7:19:fa:6f:0f:0b:71:d0:a6:13:
a9:96:2f:7e:76:8d:c7:03:35:ca:01:da:ee:6b:df:
17:2e:24:f6:76:19:bb:02:8e:6e:26:bc:97:7a:88:
65:ba:43:ea:1b:7d:0c:fe:8e:cd:63:72:52:b7:ad:
dd:ff:1e:5c:c5:eb:91:4a:b4:cf:dc:fc:84:a6:bb:
b2:76:b8:13:cd:50:cc:5b:a2:00:91:23:d3:63:d0:
a2:73:98:47:e3:90:f3:c1:81:b0:e6:46:aa:95:8e:
77:88:72:9a:93:2b:20:8e:dc:50:a4:8b:4e:1a:cd:
c4:69:43:9b:8d:49:dc:a8:9f:4c:55:2c:6e:4c:52:
e2:bb:60:08:32:a9:45:cc:96:b3:8d:fb:85:09:67:
c8:cb:8f:98:a8:66:2e:30:4e:ef:59:4d:eb:b0:80:
6d:28:e9:41:43:f0:69:c7:c3:eb:d3:8b:66:21:81:
b8:44:db:b8:33:14:1e:12:eb:97:c3:e0:df:d3:3b:
e5:fa:b8:0d:45:d1:1c:8e:33:e2:f9:c3:41:c0:8e:
92:21:48:27:65:61:8d:bd:10:7c:ba:a8:a3:01:3e:
db:5e:5b:e4:50:83:4a:88:cf:a5:44:bd:44:d6:c9:
e7:74:05:19:cc:d3:ca:ab:c5:67:2a:bf:19:0b:f7:
f8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:36:9B:20:DE:1B:05:10:0D:78:D2:35:D7:BC:9B:3B:6B:AC:F2
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e342e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.4.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:06:94:5d:e7:5b:36:15:bc:ca:1a:90:87:9e:27:11:04:e1:
03:3f:60:49:f8:69:73:d4:64:2a:47:ae:f8:cd:f6:c2:b0:c7:
d1:ca:76:c4:8c:02:1e:1b:92:aa:e4:3e:52:20:3e:88:4d:12:
fa:13:c8:9b:e6:45:07:8a:5b:89:b8:dc:03:9d:11:ea:1d:c4:
db:d0:e8:27:e3:91:02:64:8a:f0:d3:57:4a:1d:0e:62:57:58:
9a:bf:53:e8:34:e0:2f:82:6e:10:99:4b:9e:75:c1:d5:f2:29:
97:66:48:4d:31:fd:2e:7d:0e:44:5b:07:3d:16:72:18:c2:87:
c9:1c:8a:bc:96:65:aa:a3:7c:ab:c0:33:78:c2:5a:f7:c1:8c:
ba:dc:3c:55:a6:af:dd:c2:22:74:17:74:52:0b:11:ac:35:cb:
b5:b9:5d:b6:91:bd:fd:2a:7a:8f:7e:5c:03:06:6e:c2:62:d0:
91:49:b9:ff:87:93:31:67:aa:08:ce:63:0c:19:98:be:74:df:
e2:09:a0:66:a1:b6:79:95:4a:b0:4c:51:3d:5e:a3:3a:55:b3:
3c:20:9b:77:59:58:dc:05:b5:6d:0b:05:0d:88:87:49:d7:91:
48:d2:51:1b:de:01:bf:51:87:79:c8:cd:7a:39:d2:cf:ab:f1:
c0:0f:a4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:35 2025 by rpki-client