Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132322e302f32342d3234203d3e20323039383534.roa
File: 33312e3136392e3132322e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: /WH4ho51xHEqOIn2vQSboFYOi1VTPUtOBdkXRov8zJc=
Subject key identifier: 81:AB:1A:A6:A1:B6:00:D1:F1:8B:63:45:0E:7E:36:24:79:40:9F:0C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 24B8F30AF6E9CA93F80E6D0B42126F9D1CE3BCDC
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132322e302f32342d3234203d3e20323039383534.roa
Signing time: Fri 27 Dec 2024 11:47:12 +0000
ROA not before: Fri 27 Dec 2024 11:42:12 +0000
ROA not after: Fri 26 Dec 2025 11:47:12 +0000
asID: 209854
IP address blocks: 31.169.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:b8:f3:0a:f6:e9:ca:93:f8:0e:6d:0b:42:12:6f:9d:1c:e3:bc:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:12 2024 GMT
Not After : Dec 26 11:47:12 2025 GMT
Subject: CN=81AB1AA6A1B600D1F18B63450E7E362479409F0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:81:0a:e8:6e:96:c8:3b:98:07:4f:aa:6d:
4e:94:ae:06:21:6f:b0:2c:b9:da:3d:57:c3:50:5c:
62:1e:60:5e:c1:1a:66:8c:fe:94:f4:59:17:75:c1:
27:9c:40:56:93:d7:09:bd:97:ca:77:39:36:a4:36:
92:c3:7a:99:5e:ed:b3:f2:93:72:e0:ca:fb:d9:76:
8b:93:d3:e9:44:da:c4:f5:69:72:29:3c:7f:63:85:
9c:29:1a:d7:7b:85:7d:d5:a9:ff:81:e4:1c:f1:12:
8a:b4:df:2d:f4:5c:59:e2:3a:9c:57:3a:03:57:3e:
ed:df:c1:1f:b1:95:3c:07:5d:db:ab:c3:96:74:2b:
c7:da:20:39:2c:ab:4a:93:34:75:d8:d6:84:13:12:
29:63:ac:4c:3a:42:79:78:67:0e:29:52:78:15:c5:
b3:ae:30:9a:15:7d:0f:2f:0a:da:cf:c6:68:e5:4f:
71:4c:02:c2:4c:e6:80:1c:50:cf:55:e1:94:12:ff:
0a:aa:f7:d3:69:7f:a2:a3:a1:d5:a6:3f:21:69:9a:
ad:02:4e:89:93:91:12:c4:a9:ce:ab:af:19:04:cf:
36:05:44:eb:18:76:6d:c4:af:49:27:bd:80:71:b2:
4d:0a:f7:04:bd:ff:3f:52:21:0c:d5:ff:4a:a1:17:
e0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AB:1A:A6:A1:B6:00:D1:F1:8B:63:45:0E:7E:36:24:79:40:9F:0C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132322e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.122.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:96:7c:4a:a3:9d:43:4e:ed:49:41:b1:c0:b2:a3:67:cf:e7:
91:f0:0a:4c:a3:cc:c5:ec:53:5d:9a:c3:ac:ed:f6:a4:da:cc:
5a:89:58:b2:5b:1d:cd:ed:99:7c:3f:d2:7d:75:0d:bf:32:d0:
06:43:7f:e3:a6:12:fc:68:db:1e:58:5b:37:70:a8:85:50:b6:
c2:5f:8e:2f:04:f1:aa:fc:03:b6:97:50:13:99:18:76:ae:47:
ee:fe:71:98:48:6b:86:57:31:f0:79:e0:6a:93:8e:34:ba:fb:
79:e6:e0:b5:41:79:5b:82:5f:3d:fa:26:75:3f:71:41:e3:1a:
ab:6d:6e:9e:92:7b:2f:c1:8c:5a:32:3e:39:e2:50:b6:57:03:
ab:7e:a6:2c:75:8a:ab:31:27:f8:9d:56:0d:bf:32:98:48:21:
22:b4:1f:d4:7d:35:5a:bf:2d:ce:58:86:fe:1e:2b:8e:ef:d4:
64:d3:e5:4d:17:ab:9f:6d:f1:bd:76:9e:61:8d:10:de:5c:72:
cf:63:ae:b2:8a:12:d4:31:a1:ea:4e:48:94:c9:9f:61:d0:79:
c0:f5:48:68:d9:56:47:fe:c1:b1:c1:09:b8:1b:66:68:6f:8f:
ec:26:5e:7f:d7:a9:11:61:33:c3:ca:89:1b:68:a2:6f:ed:c1:
68:f8:23:3f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:23 2025 by rpki-client