Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e372e302f32342d3234203d3e203437353833.roa
File: 3231332e3139302e372e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: 51YTSIPU0DcIe5nsJ65Af8WZt2bzjgK2FEVSn7+2qxI=
Subject key identifier: AC:8A:75:FC:71:C7:5D:C2:A5:0C:7D:F7:C1:85:EE:BF:9C:23:1E:1A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0FC09F7DB27254ED4A05361E8DCD5B63ED5548B4
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e372e302f32342d3234203d3e203437353833.roa
Signing time: Fri 20 Dec 2024 15:23:29 +0000
ROA not before: Fri 20 Dec 2024 15:18:29 +0000
ROA not after: Fri 19 Dec 2025 15:23:29 +0000
asID: 47583
IP address blocks: 213.190.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:c0:9f:7d:b2:72:54:ed:4a:05:36:1e:8d:cd:5b:63:ed:55:48:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:29 2024 GMT
Not After : Dec 19 15:23:29 2025 GMT
Subject: CN=AC8A75FC71C75DC2A50C7DF7C185EEBF9C231E1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:67:ee:aa:85:ae:11:c5:ab:e2:64:38:4e:
28:42:b9:3c:fd:32:04:f7:fe:c8:d5:db:7b:f0:fb:
0d:3c:27:24:f3:24:d9:10:b3:ed:07:7b:3c:41:4b:
1d:09:21:c7:b2:66:3a:10:66:e9:01:91:c8:fa:5e:
96:16:08:de:03:43:50:67:ea:c1:e4:7c:8d:5e:8a:
bc:72:2f:34:26:3b:91:0b:bc:fe:11:4b:e3:bc:35:
f7:89:2c:db:23:50:44:1c:41:c7:5e:6f:b0:e8:cb:
7a:3a:90:c8:26:49:5c:28:8d:2d:75:27:9e:fc:94:
e9:0b:9f:12:52:4b:ee:92:75:6a:3d:53:47:05:bc:
9c:ab:cb:09:0d:a9:fc:b3:b9:33:54:c4:7d:89:1b:
89:a1:c9:63:b4:3d:cd:03:76:f9:9d:ab:55:d5:76:
16:48:05:84:31:57:ff:38:5e:a2:49:c6:59:85:47:
e1:8f:05:c0:f7:d1:d5:ce:54:e0:21:24:a6:59:71:
31:9a:df:e3:d4:25:83:f0:96:44:20:cc:fa:f5:1d:
71:30:51:7b:c0:18:5c:7f:26:09:5a:fc:c1:2e:d5:
ab:e3:a4:3e:f1:20:80:f9:22:9c:2c:a3:0f:09:c5:
57:28:fc:1b:9b:2b:de:be:c4:17:e3:07:29:0c:30:
f0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8A:75:FC:71:C7:5D:C2:A5:0C:7D:F7:C1:85:EE:BF:9C:23:1E:1A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e372e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.7.0/24
Signature Algorithm: sha256WithRSAEncryption
17:a9:a2:92:09:9b:21:67:1f:e0:cd:2f:26:10:81:01:fb:cc:
ae:a7:34:50:7c:b2:14:67:2f:80:d0:41:99:8e:28:6b:8f:dc:
13:74:0d:e2:2e:8e:f8:df:2c:2d:ee:3e:de:bf:be:75:94:5d:
c8:73:97:f0:d7:c5:70:0e:20:98:d9:74:21:7b:96:7f:b1:d2:
64:da:c9:83:50:7a:e9:9b:c9:26:f2:10:fe:18:fa:8b:a3:0b:
15:45:06:f0:a1:75:f3:01:15:45:30:3f:5a:2e:ae:e1:1e:36:
83:6a:c6:8c:b5:43:47:d3:77:77:70:00:63:2c:be:b5:84:48:
28:cb:77:8a:04:58:f1:f7:1e:ef:a1:80:d9:8d:b4:b1:de:b4:
ca:3c:60:11:bb:01:e2:12:b9:a8:a3:45:2d:97:80:16:3b:a2:
04:74:84:98:d7:76:64:d1:e9:b7:8d:da:5d:db:67:08:4b:cb:
6d:83:89:c3:a5:83:d0:69:ca:a9:89:b5:4a:6a:c4:e2:ae:01:
79:12:57:73:69:f2:ef:40:8f:73:a0:81:40:7e:d8:a2:b0:41:
0a:63:96:3a:4e:bb:20:85:01:5c:f0:96:52:4b:33:9b:6d:6c:
75:60:2e:eb:0f:84:82:be:77:b1:9f:e2:a9:45:25:20:ab:f1:
8c:9e:01:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:38 2025 by rpki-client