Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e3234352e3130382e302f32322d3234203d3e20323031333431.roa
File: 38302e3234352e3130382e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier: obyJ7X1LPxIbhC726h6nb/tlTZasocs7xGYeRzEQ1oQ=
Subject key identifier: 7D:52:88:C4:02:EA:5B:70:27:BF:BC:9C:07:F9:4B:DE:0E:78:8B:DC
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0E7A9F22ADFC8AA78F3B436EC641D2DEF742D69A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e3234352e3130382e302f32322d3234203d3e20323031333431.roa
Signing time: Fri 27 Dec 2024 11:47:06 +0000
ROA not before: Fri 27 Dec 2024 11:42:06 +0000
ROA not after: Fri 26 Dec 2025 11:47:06 +0000
asID: 201341
IP address blocks: 80.245.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:7a:9f:22:ad:fc:8a:a7:8f:3b:43:6e:c6:41:d2:de:f7:42:d6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:06 2024 GMT
Not After : Dec 26 11:47:06 2025 GMT
Subject: CN=7D5288C402EA5B7027BFBC9C07F94BDE0E788BDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:30:19:44:d8:fb:80:ab:d4:56:07:79:4c:93:
06:b9:25:b0:87:4b:7a:e6:24:fe:17:be:3c:e6:dc:
07:8b:20:0c:9e:69:1c:fe:3e:d9:54:3d:f7:3d:80:
dd:0d:99:eb:6a:b9:70:a5:17:d9:b6:bb:bd:9b:f5:
aa:b4:be:66:91:d2:a2:14:b9:d5:fb:59:9f:48:db:
8c:6b:d0:ec:3a:21:3d:fa:a0:65:25:3d:bf:1f:be:
55:64:6b:14:6c:c4:f4:b6:b4:74:2f:3a:12:e2:01:
a6:90:22:48:4e:84:8d:6a:a1:d6:34:1a:c3:85:d7:
35:21:93:05:17:b8:f7:91:20:fd:55:0b:95:26:18:
2f:a3:95:ee:06:c4:30:84:a6:34:c9:fa:55:9f:3d:
a1:b2:e2:70:26:0c:0f:ef:31:cf:a3:15:7d:75:de:
3d:0b:35:40:2f:15:24:51:bd:06:e9:ac:23:ed:f6:
20:d9:ac:7c:72:63:4b:0f:bc:bd:b5:5d:0b:27:9b:
40:4c:dc:4c:2a:64:02:00:11:c4:0e:0a:00:b7:66:
7b:00:b0:ae:59:7d:84:c3:04:83:52:1d:75:1c:c6:
de:c5:53:95:e2:f4:87:48:e3:f5:95:07:37:1e:76:
19:d5:34:3e:8c:a3:c8:a6:f4:84:09:89:8e:d2:d2:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:52:88:C4:02:EA:5B:70:27:BF:BC:9C:07:F9:4B:DE:0E:78:8B:DC
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e3234352e3130382e302f32322d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.108.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:c2:fa:57:ad:d2:c4:c1:3d:d2:33:38:b6:34:8d:0f:31:2f:
ca:3b:95:a7:0d:46:a7:2a:dc:71:03:5d:d9:05:ca:bc:32:22:
e5:5d:e4:50:c9:c4:9b:ae:e4:6f:98:aa:83:1a:55:21:4c:d0:
ee:20:83:0d:6a:31:5b:67:8c:a3:da:1f:07:82:cd:66:f8:46:
af:43:f3:65:4a:ef:5f:f0:75:e8:1c:3a:d3:df:09:0c:56:31:
11:fe:bc:ab:17:1c:f9:14:cc:f9:6e:fa:79:3c:c9:c6:ca:5d:
08:f3:21:5b:2a:e9:9d:19:f7:7b:24:8a:1d:c3:4c:5d:d5:7c:
de:97:ba:33:98:ab:f3:75:0f:13:b8:06:8a:bf:75:1d:5b:1b:
17:c1:92:74:9b:02:a5:1b:dc:1c:5c:39:4f:78:5b:fd:31:77:
f0:b4:90:a4:72:bc:e5:c3:62:08:4e:0c:a1:6f:7e:88:33:43:
40:9e:1b:52:4d:f2:bd:71:77:78:5d:f8:71:10:b0:a0:6c:d9:
84:87:e3:69:f5:30:43:37:28:aa:0b:f2:86:12:3a:74:da:d1:
40:1e:56:00:03:40:cd:0b:3e:96:ae:18:a5:bb:a9:79:38:75:
b4:7c:7f:4a:f9:64:72:61:e5:9d:d5:7f:a3:c2:f1:f9:c9:d2:
79:54:61:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:30:09 2025 by rpki-client