Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33372e302f32342d3234203d3e20313336373837.roa
File: 38312e32322e33372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: O1zqIZ/Y8cnlHGBHCx4NCRrdELzPwjTYDXib7LJNCPE=
Subject key identifier: 73:4D:FA:E2:1F:FC:5A:F6:AB:41:C9:AE:49:6C:2E:4D:B1:83:63:B5
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2B9676D1572E5483E88A46B176BBF55502D1D344
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:37 +0000
ROA not before: Fri 20 Dec 2024 15:18:37 +0000
ROA not after: Fri 19 Dec 2025 15:23:37 +0000
asID: 136787
IP address blocks: 81.22.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:96:76:d1:57:2e:54:83:e8:8a:46:b1:76:bb:f5:55:02:d1:d3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:37 2024 GMT
Not After : Dec 19 15:23:37 2025 GMT
Subject: CN=734DFAE21FFC5AF6AB41C9AE496C2E4DB18363B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:01:0e:59:d4:f0:6c:55:f3:5d:d9:7d:a7:46:
c2:93:11:2e:60:c4:81:75:58:36:b6:cb:86:09:d2:
27:ad:74:5a:dc:67:7a:e4:80:e2:f8:63:52:1e:59:
2a:b3:c6:2f:c3:d9:d4:7d:ab:14:bb:f4:0d:f0:4d:
3f:f7:17:50:97:cd:7e:6a:f0:ef:54:cc:6d:fa:bc:
2a:78:97:f0:e7:15:e8:bb:9d:7d:7d:3b:79:f7:80:
a1:49:72:16:ad:b1:4c:07:a8:ba:4e:6a:ca:ed:e1:
b2:93:45:42:c1:a6:ba:53:90:9c:b7:ce:2a:f3:f5:
a1:69:20:8e:5f:8d:8f:22:14:5c:0f:6f:da:22:2b:
6c:96:cf:70:91:e6:05:1b:86:5d:82:68:50:a2:55:
7e:5a:91:ef:35:14:95:90:db:31:c6:a3:42:91:e5:
49:6d:cc:3d:99:1f:94:e7:2f:43:c0:2c:67:d1:9b:
0d:c5:e7:fc:c5:c3:37:ad:f5:19:83:3d:34:30:1a:
fb:30:24:72:ef:ae:ce:63:61:e9:00:8d:4b:07:24:
20:98:d5:b0:c6:c2:f2:cc:de:f5:db:ff:18:18:e8:
0c:bb:23:5d:9b:3e:40:11:21:ec:77:99:9e:d1:e9:
85:72:c0:88:e0:36:4a:c7:c9:ec:95:b0:52:8f:ef:
61:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4D:FA:E2:1F:FC:5A:F6:AB:41:C9:AE:49:6C:2E:4D:B1:83:63:B5
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.37.0/24
Signature Algorithm: sha256WithRSAEncryption
13:4a:7a:e7:a4:78:3a:a8:16:28:dd:d0:a0:6b:8f:06:23:d6:
ed:2d:50:93:1d:78:92:41:3b:0a:6e:53:d4:92:f9:94:80:d6:
93:b2:04:e6:c9:92:74:a2:9c:e6:90:d4:ad:b0:54:23:0d:4c:
49:85:db:f3:c1:d4:81:68:69:26:1b:f6:8c:0d:d9:99:a9:80:
84:bd:71:e5:fa:ba:f9:ca:fe:b5:19:9d:03:2e:2a:20:26:81:
44:ca:ea:7d:24:d6:47:08:ad:a1:b1:f2:34:ef:b6:01:73:8a:
d4:2f:26:95:48:e9:41:c1:a7:86:ed:af:bc:ac:b2:87:07:c6:
34:78:ee:0a:dc:bc:1b:79:17:21:3b:43:91:c2:7b:1e:e4:d9:
16:e2:8a:09:f1:ee:42:94:32:7e:ac:3b:c5:32:91:c7:25:85:
d5:d9:02:44:49:d7:7f:1e:7b:83:1d:b8:ab:73:8d:88:e0:76:
bb:70:7e:50:6c:c2:88:39:62:c2:77:b4:60:6b:03:36:9e:ec:
35:aa:ef:40:32:f2:9f:fb:4e:67:16:12:18:82:2c:63:7f:65:
61:14:99:04:cb:8a:8a:82:1d:fc:c5:fb:84:14:62:dc:d0:32:
b2:de:cb:0b:dc:40:7d:c6:e0:12:41:da:e8:59:d8:6f:80:04:
5f:22:ac:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:43:39 2025 by rpki-client