Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231352e302f32342d3234203d3e20313336373837.roa
File: 33312e34302e3231352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: JD2ApqGYS1qih6OdcAMLZrCqIjaex3wGIjynam21gPE=
Subject key identifier: D8:E2:61:77:3B:F4:1D:D0:7B:F1:02:7D:D8:FC:5D:B7:3C:FB:C1:58
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 35278F68C9DDF92D6FB2345CC1432C52DA00BB32
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:38 +0000
ROA not before: Fri 27 Dec 2024 11:42:38 +0000
ROA not after: Fri 26 Dec 2025 11:47:38 +0000
asID: 136787
IP address blocks: 31.40.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:27:8f:68:c9:dd:f9:2d:6f:b2:34:5c:c1:43:2c:52:da:00:bb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:38 2024 GMT
Not After : Dec 26 11:47:38 2025 GMT
Subject: CN=D8E261773BF41DD07BF1027DD8FC5DB73CFBC158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:4a:f7:27:5e:1e:95:dd:94:14:56:cd:b2:
5c:c5:66:7c:17:cd:fc:96:40:ec:19:e6:0f:cd:63:
7b:4a:cc:fb:87:f6:68:6e:c0:ad:a9:5c:a7:94:f4:
9e:49:05:28:9a:4d:c6:4f:69:8e:54:b8:3f:bf:fc:
ab:36:2c:4e:c3:68:c0:74:74:d0:9e:43:54:ca:66:
ab:1d:0a:7c:f4:77:10:88:53:12:fa:0b:cd:f0:fe:
e0:0d:4a:e9:cb:9b:f3:d6:e9:6e:5b:ee:1e:a6:50:
95:9e:ef:48:a3:10:f5:4f:18:59:2c:81:10:5c:b4:
ae:b9:f4:40:3d:84:ce:0f:e7:97:e6:3f:e6:ee:c7:
66:df:79:ec:0f:ab:81:60:ea:c8:17:d9:fb:f4:24:
20:53:4e:b6:0b:be:17:0b:c4:6c:65:d2:a8:b7:94:
aa:69:e8:bc:43:7b:43:d5:f8:e0:06:de:95:9a:fa:
9e:0c:86:ff:66:b9:43:28:7a:d8:59:47:6b:99:93:
7d:77:b6:f7:4d:5b:41:72:86:ae:fa:db:d8:b6:43:
41:7b:f8:de:52:10:b8:f1:ae:52:4a:53:bb:b4:16:
19:74:79:3f:c5:bf:aa:70:ae:81:e5:33:e6:e8:be:
ba:d1:54:2f:5e:b7:ec:5a:00:65:2c:16:29:da:b9:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E2:61:77:3B:F4:1D:D0:7B:F1:02:7D:D8:FC:5D:B7:3C:FB:C1:58
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.215.0/24
Signature Algorithm: sha256WithRSAEncryption
82:92:41:8d:8f:4f:ed:f3:09:6c:06:6a:7a:f5:82:4f:69:30:
06:a6:1a:24:43:22:11:f2:58:dd:9c:9b:04:a0:c1:fd:91:9d:
35:0a:49:1e:3e:45:a2:db:58:8d:6e:73:7c:39:d2:45:31:4e:
bb:24:47:4d:4e:43:1f:f1:c1:cd:6a:45:59:de:61:28:fd:a3:
bb:f9:40:b7:f0:76:2b:64:08:f1:1e:8a:ae:4e:51:3c:6f:49:
1d:61:80:2c:5f:17:46:0a:d1:e4:7c:b0:48:33:74:f1:c2:cb:
04:3f:58:19:1a:bc:40:c8:63:de:1e:37:2d:2e:b7:7e:b1:6c:
f2:b8:5a:6c:58:e7:53:b0:d7:2f:e2:bd:22:fe:62:bb:66:f4:
0f:fa:7c:45:e2:ee:90:ff:7e:ff:2a:d8:3c:4f:d9:bb:3e:71:
49:db:ba:bc:61:24:ab:e2:15:ba:fe:88:cf:de:7d:6f:5c:43:
e9:fb:ce:d4:59:b7:78:2f:7b:d4:59:17:b1:be:4d:87:50:90:
51:c7:bb:c4:0f:4b:79:bd:1b:b9:4b:36:6e:4a:b2:ed:dc:53:
96:a4:d1:f9:7b:c1:fc:2f:18:b4:33:c9:92:0f:19:24:18:b3:
a0:2c:72:20:b8:1a:02:b5:73:47:fa:61:82:c9:dc:5a:b4:8d:
e8:91:fb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:55:01 2025 by rpki-client