Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3231312e302f32342d3332203d3e203531313637.roa
File: 38302e36352e3231312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: YcX9bNVhfB95lJsNvZ7J3HoZjR4P9Bw6bgOlwe/I/UM=
Subject key identifier: 1C:6D:86:31:BB:D4:14:A4:84:19:5F:EF:A0:45:0E:2A:4A:8B:50:22
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 426F42622065EEC35F23943FC30DB598C3154ADB
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3231312e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Dec 2024 15:23:39 +0000
ROA not before: Fri 20 Dec 2024 15:18:39 +0000
ROA not after: Fri 19 Dec 2025 15:23:39 +0000
asID: 51167
IP address blocks: 80.65.211.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:6f:42:62:20:65:ee:c3:5f:23:94:3f:c3:0d:b5:98:c3:15:4a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:39 2024 GMT
Not After : Dec 19 15:23:39 2025 GMT
Subject: CN=1C6D8631BBD414A484195FEFA0450E2A4A8B5022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8e:1d:6b:4f:de:13:9e:0f:2a:45:ce:9d:05:
84:25:1a:f1:c2:13:b2:fa:4a:6b:ca:e2:64:7d:db:
d2:80:f6:e4:96:36:a1:8b:be:46:43:69:28:fb:78:
32:3b:56:1e:43:50:ec:ce:77:82:23:f5:14:74:d8:
8f:00:6b:71:76:f5:3a:13:9b:87:34:de:71:34:64:
b8:8d:34:37:e7:19:9a:e5:90:f8:1a:7f:c4:5f:c5:
fc:e9:43:f0:f4:f4:e2:30:14:17:1f:bc:1a:49:49:
1f:b1:fa:33:be:bf:f5:73:1e:64:f6:68:5a:8d:e5:
12:90:21:f8:e9:1e:34:01:f1:bb:16:f3:19:2d:b5:
8f:91:c8:f7:6f:cf:ec:2a:a2:de:8d:83:8f:ea:03:
97:2a:7c:3f:2d:c4:6c:c4:c3:33:04:15:e5:c8:af:
c5:07:f6:37:3c:16:62:1b:a0:3a:92:28:d2:81:1e:
4f:71:ea:f5:11:e6:4a:f1:e7:6e:ad:17:f8:a9:c6:
95:6b:4a:7f:30:d5:e5:6f:23:4a:28:c7:5f:90:94:
63:23:11:7d:69:ad:ed:cb:a0:29:73:3e:11:5f:38:
9c:f8:9a:fa:cd:da:ab:4d:4d:d6:de:24:5e:97:d7:
da:c8:64:ac:df:53:5a:69:53:e8:43:22:8b:f8:fd:
6e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6D:86:31:BB:D4:14:A4:84:19:5F:EF:A0:45:0E:2A:4A:8B:50:22
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3231312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.211.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e7:f1:6b:3d:b9:12:50:e8:3a:96:7f:6b:6a:f8:b7:86:fc:
e0:1f:4b:8b:19:8b:13:31:e8:e0:31:31:a2:5a:b8:83:62:58:
e2:4a:6e:2f:9d:45:c8:29:ff:5f:50:e9:1e:4d:77:6a:c8:bb:
0f:1a:75:40:2f:fd:5a:c2:45:42:2e:29:54:58:db:05:59:21:
d7:d1:39:38:ee:ad:83:20:d6:d3:17:55:38:4a:38:1c:43:0d:
a4:f0:3e:e3:b9:da:b1:a6:73:81:6d:a4:15:37:de:2b:f3:ea:
ca:d4:93:5f:6f:a8:26:74:70:5f:5b:eb:83:1c:34:94:68:75:
35:ad:d7:e8:8f:c6:f1:d7:7c:83:94:b6:cd:73:0a:4c:bf:f2:
16:66:fc:99:a7:d5:2f:87:cf:33:d9:af:87:6e:90:21:ca:2b:
6b:93:e0:e1:77:36:8d:6d:1e:81:3e:9e:f9:03:89:90:0e:5a:
eb:12:42:51:73:12:f1:43:06:6e:d5:20:37:03:e0:72:d6:f2:
75:17:fe:dc:ff:70:a1:82:b4:86:6f:d1:11:22:6c:97:61:3f:
c2:c7:58:44:98:9e:73:6c:18:dd:f2:09:11:17:bd:ed:cb:2d:
01:43:79:4b:17:62:b7:24:58:0e:81:67:ac:c0:7c:f2:14:f2:
c8:fc:ff:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:06:55 2025 by rpki-client