Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3230392e302f32342d3234203d3e20323034313730.roa
File: 38302e36352e3230392e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: OWZItxpNG+ChOB4ACi59zIL01ykZrEulKA7hDmPdQVs=
Subject key identifier: 11:E0:7F:C1:A0:D6:6A:A4:81:A3:E8:1B:71:BA:44:44:56:4A:0F:DE
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4272ECF18FCE065692D5E14637893FE6049E05D5
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3230392e302f32342d3234203d3e20323034313730.roa
Signing time: Fri 20 Dec 2024 15:23:31 +0000
ROA not before: Fri 20 Dec 2024 15:18:31 +0000
ROA not after: Fri 19 Dec 2025 15:23:31 +0000
asID: 204170
IP address blocks: 80.65.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:72:ec:f1:8f:ce:06:56:92:d5:e1:46:37:89:3f:e6:04:9e:05:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:31 2024 GMT
Not After : Dec 19 15:23:31 2025 GMT
Subject: CN=11E07FC1A0D66AA481A3E81B71BA4444564A0FDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:bb:b1:6a:e7:d6:bf:19:d2:b6:e5:a2:bd:
23:b3:11:f3:d9:13:fd:ff:8b:85:25:01:37:0e:fc:
dc:5b:ef:14:84:26:81:61:71:35:8e:09:6f:0d:d4:
43:f4:cb:ec:ed:09:75:28:31:10:37:af:9e:a4:e9:
8c:18:79:ca:8b:6e:a0:db:9c:c9:fb:22:9f:08:a7:
71:99:d5:a5:50:1b:d6:e3:09:63:28:d6:3f:b8:0e:
26:a7:77:ff:55:d2:66:10:1d:36:4a:62:07:13:13:
e2:35:7d:73:35:f2:e2:94:e7:d2:ba:40:0b:2d:4c:
93:f9:ec:f7:eb:0e:c9:6e:3b:b4:cb:35:91:8d:5f:
30:ce:bb:a5:58:ce:65:43:59:2f:cb:6a:ab:35:82:
08:16:d3:9d:4b:f1:8e:84:0d:ce:62:30:ce:2a:0c:
27:9d:31:09:87:8b:8e:c7:11:30:fd:12:8c:85:7b:
fc:11:31:43:d4:69:b8:34:60:3b:cc:dc:d3:e0:87:
bd:2f:7d:4a:19:8d:56:46:4c:98:64:c7:1a:20:71:
a6:35:68:73:d2:f3:df:41:83:46:ec:b9:b0:89:fb:
c8:f4:92:fc:1f:1a:d3:f9:12:16:c1:87:87:2c:c3:
6c:c1:0a:21:6f:96:ba:1d:94:71:62:c5:27:af:b3:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E0:7F:C1:A0:D6:6A:A4:81:A3:E8:1B:71:BA:44:44:56:4A:0F:DE
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3230392e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.209.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:62:c1:bd:cd:41:f3:49:59:45:aa:b0:60:fa:a8:65:d4:c6:
aa:22:60:b4:4d:cf:10:05:af:b2:46:5b:54:90:90:66:99:a9:
2c:fe:79:61:6b:3c:b3:86:e2:44:13:45:f9:cf:d4:0b:6f:ed:
65:65:60:a5:d1:c2:88:e7:60:49:bc:72:64:8a:31:c6:ed:5e:
31:0d:50:0d:a7:f1:6a:62:f8:3b:9a:36:a6:2e:15:11:09:80:
58:b9:ec:5b:59:71:7b:27:b9:6b:8a:21:c5:06:9f:9b:0c:bc:
e9:26:83:e4:c9:fe:dd:fb:60:47:08:fe:cf:70:bd:64:f8:18:
1c:b4:37:2d:1e:07:44:0e:ed:8e:50:40:af:53:72:ad:4c:62:
54:8a:07:8c:55:a8:55:1a:20:9d:23:a7:3a:3f:1a:ec:64:e1:
c4:c1:30:61:ab:ea:f5:e6:3f:d0:c8:55:19:19:16:d9:62:c3:
c7:9e:fd:10:f0:30:a3:77:cb:98:31:2d:1c:47:33:2a:47:d4:
32:37:06:4c:8f:a6:99:83:82:e5:16:51:95:94:c9:93:86:67:
b6:c5:8a:15:6d:60:80:cf:f1:9e:79:7c:01:ab:d6:71:c1:52:
c7:23:05:dc:ef:a8:7c:9e:db:f9:1c:7f:72:78:0a:c5:90:2c:
4f:f2:4b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:38:19 2025 by rpki-client