Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132312e302f32342d3234203d3e20323039383534.roa
File: 33312e3136392e3132312e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: a2Pox2vS4pwXRmxa+wiwMta85XUASiH3Odd8wnmIqT8=
Subject key identifier: 98:4F:2F:38:14:6C:F8:F9:75:BF:F5:5F:8F:01:29:5A:A1:BD:EE:B5
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 55EB7E7DC8658CC9A9F3EB0C0991CF8AB1DD72A7
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132312e302f32342d3234203d3e20323039383534.roa
Signing time: Fri 27 Dec 2024 11:47:39 +0000
ROA not before: Fri 27 Dec 2024 11:42:39 +0000
ROA not after: Fri 26 Dec 2025 11:47:39 +0000
asID: 209854
IP address blocks: 31.169.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:eb:7e:7d:c8:65:8c:c9:a9:f3:eb:0c:09:91:cf:8a:b1:dd:72:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:39 2024 GMT
Not After : Dec 26 11:47:39 2025 GMT
Subject: CN=984F2F38146CF8F975BFF55F8F01295AA1BDEEB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:6c:48:cc:ae:5c:25:d4:91:13:8c:b2:38:
f3:3e:4b:2d:79:5d:66:85:e4:0a:33:13:98:cd:da:
19:bf:be:13:77:a0:9a:49:fa:4b:af:2d:39:36:08:
26:3b:ba:6d:86:b9:04:a3:f4:18:47:b3:33:ef:c5:
57:44:f0:14:4d:bb:07:b8:c9:97:6e:23:66:52:79:
ff:76:bf:3e:13:8c:53:af:97:6f:be:08:37:83:ed:
fd:14:4b:2a:89:f6:a7:37:92:cb:9c:f5:d1:99:07:
ab:ee:e6:47:94:f3:d7:c5:8f:fd:14:33:d0:3a:39:
45:27:33:c6:bf:6d:c2:51:85:b0:1f:6b:b5:20:8c:
04:b2:29:4b:69:84:85:00:96:2e:38:60:9f:95:c8:
44:96:a9:5f:57:a9:a8:31:59:9c:98:a3:30:76:22:
b2:ff:0e:1a:bc:84:c7:34:57:44:62:62:46:da:d8:
fb:ff:b0:0d:d7:b5:bb:2e:93:99:c3:ae:68:61:b4:
3e:3d:f7:1f:2a:29:b9:12:1b:ef:dc:94:0a:b2:45:
4a:e5:ae:0e:c8:c4:87:6f:1c:6b:74:3f:79:cf:48:
61:3e:25:e8:e6:c2:f6:45:30:74:96:cb:1b:03:47:
ad:48:79:c6:fd:0d:8a:8c:77:65:b7:2b:d9:de:4b:
96:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4F:2F:38:14:6C:F8:F9:75:BF:F5:5F:8F:01:29:5A:A1:BD:EE:B5
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132312e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.121.0/24
Signature Algorithm: sha256WithRSAEncryption
54:64:ea:ca:34:bf:89:aa:e2:3f:ba:ac:2d:46:9d:60:44:ad:
c3:ed:45:0d:46:a1:0c:ed:f7:5a:57:91:9a:fd:3d:11:28:93:
75:a0:2e:4e:50:8a:92:e1:cc:be:d0:33:aa:e6:86:11:af:bb:
85:0a:b1:13:10:87:00:19:d7:20:e8:43:45:3c:b3:cb:97:d8:
dc:d2:4f:e5:6f:13:69:59:13:54:e0:fb:82:dc:4a:97:a7:2a:
78:4b:e6:c6:54:2b:e8:d8:c7:ca:73:5f:cd:34:10:1a:78:16:
86:5c:81:87:a8:bf:37:10:eb:ed:55:12:74:b4:02:8c:0b:d3:
cb:07:7c:9f:07:91:5d:0f:23:1a:35:9e:0a:cb:cf:08:91:4a:
48:7b:c8:78:3b:ad:7f:22:17:c2:d7:4d:a8:92:6b:4e:fa:e6:
ce:25:e5:c3:a8:2b:ce:bc:d2:c9:f8:50:21:4e:b5:2a:86:7c:
bd:3a:7c:91:f8:6d:89:33:3d:72:8b:67:32:80:28:7e:7c:3e:
df:17:07:32:25:94:a9:4d:f0:0f:48:52:9f:0b:55:75:41:fb:
6b:c2:a6:d9:69:3b:80:e9:84:fe:b8:50:3a:ae:fc:4c:94:12:
11:55:a6:38:92:45:87:27:29:27:72:2b:94:a0:ba:1c:96:cc:
e3:20:f8:2a
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUVet+fchljMmp8+sMCZHPirHdcqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMzlaFw0yNTEyMjYxMTQ3MzlaMDMxMTAvBgNV
BAMTKDk4NEYyRjM4MTQ2Q0Y4Rjk3NUJGRjU1RjhGMDEyOTVBQTFCREVFQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVGxIzK5cJdSRE4yyOPM+Sy15
XWaF5AozE5jN2hm/vhN3oJpJ+kuvLTk2CCY7um2GuQSj9BhHszPvxVdE8BRNuwe4
yZduI2ZSef92vz4TjFOvl2++CDeD7f0USyqJ9qc3ksuc9dGZB6vu5keU89fFj/0U
M9A6OUUnM8a/bcJRhbAfa7UgjASyKUtphIUAli44YJ+VyESWqV9XqagxWZyYozB2
IrL/Dhq8hMc0V0RiYkba2Pv/sA3Xtbsuk5nDrmhhtD499x8qKbkSG+/clAqyRUrl
rg7IxIdvHGt0P3nPSGE+JejmwvZFMHSWyxsDR61Iecb9DYqMd2W3K9neS5YTAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUmE8vOBRs+Pl1v/VfjwEpWqG97rUwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMzMxMmUzMTM2Mzky
ZTMxMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzOTM4MzUzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAB+peTANBgkqhkiG9w0BAQsFAAOCAQEAVGTqyjS/iariP7qsLUadYESt
w+1FDUahDO33WleRmv09ESiTdaAuTlCKkuHMvtAzquaGEa+7hQqxExCHABnXIOhD
RTyzy5fY3NJP5W8TaVkTVOD7gtxKl6cqeEvmxlQr6NjHynNfzTQQGngWhlyBh6i/
NxDr7VUSdLQCjAvTywd8nweRXQ8jGjWeCsvPCJFKSHvIeDutfyIXwtdNqJJrTvrm
ziXlw6grzrzSyfhQIU61KoZ8vTp8kfhtiTM9cotnMoAofnw+3xcHMiWUqU3wD0hS
nwtVdUH7a8Km2Wk7gOmE/rhQOq78TJQSEVWmOJJFhycpJ3IrlKC6HJbM4yD4Kg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:08:17 2025 by rpki-client