Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231322e302f32342d3234203d3e20313336323538.roa
File: 33312e34302e3231322e302f32342d3234203d3e20313336323538.roa (raw, json)
Hash identifier: VO/wNj9gz7G+GeRR1Nbdb5tdfr/5dL+0zLWQ4Ta5EhM=
Subject key identifier: AD:11:84:90:3A:F3:2A:DC:DE:87:B7:C3:E3:6B:0D:51:CF:35:26:C3
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 77D8E6335A1A4323C22B232C2953B6EB6A49137C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231322e302f32342d3234203d3e20313336323538.roa
Signing time: Fri 27 Dec 2024 11:47:10 +0000
ROA not before: Fri 27 Dec 2024 11:42:10 +0000
ROA not after: Fri 26 Dec 2025 11:47:10 +0000
asID: 136258
IP address blocks: 31.40.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:d8:e6:33:5a:1a:43:23:c2:2b:23:2c:29:53:b6:eb:6a:49:13:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:10 2024 GMT
Not After : Dec 26 11:47:10 2025 GMT
Subject: CN=AD1184903AF32ADCDE87B7C3E36B0D51CF3526C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:a1:d9:35:fc:66:7b:0a:e4:74:fa:50:a6:
fd:51:6d:1e:4e:d5:82:3c:8a:c0:24:32:14:2e:be:
01:89:9a:c5:df:10:ae:53:38:d4:d1:52:ca:ae:91:
81:d9:53:d8:57:8c:90:06:76:3c:ae:93:81:4c:f3:
4f:5e:10:d3:df:a8:8f:38:68:fe:86:05:23:70:f6:
e4:64:30:41:dc:b0:42:b3:4d:33:f2:93:8e:73:9d:
f8:97:5b:a2:81:ed:f8:73:dc:37:f1:af:47:7c:42:
87:d8:5e:1e:dc:fc:f9:e7:19:2c:10:f2:80:b0:9e:
60:f7:c5:0c:15:d2:a2:00:7f:20:a1:71:20:55:60:
8a:ba:d3:4d:6f:04:78:ec:25:a4:9a:59:5d:9d:74:
0d:7f:fe:ec:b3:79:b0:41:23:22:74:0a:1f:fb:2d:
db:43:fa:6a:7e:c8:74:38:39:72:29:ce:ec:89:6b:
fd:0e:b3:c3:b8:84:e2:9b:56:50:99:8d:60:f6:b7:
d1:47:b5:25:59:40:ef:12:06:cf:fb:67:7e:8c:ce:
dd:9e:fd:42:52:af:72:5a:14:ae:2b:e7:12:28:20:
43:f6:5c:fb:fa:2c:03:d4:9e:85:8d:97:a1:2e:5a:
ff:31:c1:2f:9c:67:a6:82:fa:b3:98:0c:e0:6a:96:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:11:84:90:3A:F3:2A:DC:DE:87:B7:C3:E3:6B:0D:51:CF:35:26:C3
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231322e302f32342d3234203d3e20313336323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.212.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a0:54:0b:83:e5:06:a0:ef:3a:3e:5a:2b:d6:96:c4:6b:c5:
83:06:3c:c0:1d:8c:c8:1c:74:44:f7:5f:c3:85:f1:4d:33:52:
b0:f8:bc:55:21:5e:6e:ca:07:97:8c:37:bc:b6:1f:c7:84:50:
41:c9:4c:b7:e2:f0:4e:72:8f:04:90:0e:a5:bd:68:66:32:63:
2d:e9:e2:e5:6b:05:81:7f:59:d6:fb:26:ba:56:36:91:9c:92:
13:97:fd:3b:b4:43:0c:6b:72:c5:af:c9:3e:98:0f:d3:51:ba:
45:34:6d:ba:d5:03:45:f5:9f:e3:d7:bc:2a:12:30:93:98:d7:
d8:a5:3e:72:c0:71:dd:37:fa:e9:25:35:b2:46:5a:c5:a3:2f:
a3:6e:c9:64:95:8d:17:c2:28:d1:da:bf:b5:f7:21:8e:d5:d8:
0e:97:20:ab:1f:5b:fd:eb:91:03:47:15:f5:5e:b8:7e:c7:30:
be:03:99:73:60:0d:cd:58:4d:38:ad:dc:9d:df:32:17:bb:b5:
f4:55:13:5b:1e:8a:1a:6d:17:0a:fe:cc:bf:0f:ae:e0:70:51:
c5:30:eb:79:cb:30:f4:1a:02:7d:56:b8:50:96:d5:a2:b5:c8:
eb:3c:d1:14:8d:ab:dd:40:8a:54:24:da:2b:6e:d6:fc:0c:ae:
10:88:ba:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:17 2025 by rpki-client