Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33382e302f32342d3332203d3e203430303231.roa
File: 38312e32322e33382e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier: T4iya3vwv9+BunziBtXHi2f0fs6vlwOwuW0MgjsE7S4=
Subject key identifier: B9:70:14:E2:13:E6:FD:E3:C3:E0:65:6A:52:2E:8F:EF:54:98:0E:BF
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5C429B9D79B62D3DD048F6C76815E702EE913425
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33382e302f32342d3332203d3e203430303231.roa
Signing time: Fri 20 Dec 2024 15:23:40 +0000
ROA not before: Fri 20 Dec 2024 15:18:40 +0000
ROA not after: Fri 19 Dec 2025 15:23:40 +0000
asID: 40021
IP address blocks: 81.22.38.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:42:9b:9d:79:b6:2d:3d:d0:48:f6:c7:68:15:e7:02:ee:91:34:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:40 2024 GMT
Not After : Dec 19 15:23:40 2025 GMT
Subject: CN=B97014E213E6FDE3C3E0656A522E8FEF54980EBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:11:89:56:fb:4e:66:9d:6c:ab:20:fa:36:
19:48:90:80:ea:04:f3:33:81:c0:8e:d0:e2:6b:e3:
49:51:fd:bb:2b:6d:75:dd:60:cc:9c:74:2b:98:35:
cb:11:62:7a:af:3e:0b:76:f5:ea:55:b6:19:b2:5e:
21:10:4f:49:e0:d1:fc:ee:c4:52:29:46:48:4b:ed:
fd:23:98:cc:69:1b:84:9e:17:64:f1:32:ed:6b:f8:
6b:c5:7c:aa:e2:3f:96:2b:15:3f:3b:d4:13:c0:8b:
1c:c7:6e:94:f0:2a:d8:b9:12:f7:51:1a:17:1b:3c:
46:bc:06:11:fd:db:04:45:67:fd:26:e1:60:ea:e6:
e1:09:e7:45:04:7a:1d:d5:99:2a:95:2a:69:84:cf:
4c:1c:7b:94:04:04:bc:b2:03:4f:8f:60:5f:fe:ee:
37:79:8a:e0:68:45:bb:25:1a:29:7e:de:c1:48:3a:
31:db:d9:fc:c6:74:78:7b:1b:42:0e:2c:95:e6:a8:
37:d3:0e:b5:ff:5c:7c:da:1c:b2:06:d5:6d:e8:3b:
18:7e:06:10:20:e0:88:57:de:46:e4:bb:d2:91:b0:
f6:7d:4c:0c:dc:55:6e:d0:2d:bb:0e:6a:3c:30:b2:
e2:0e:e4:a3:ac:fa:ea:83:eb:d1:60:02:b1:2f:1b:
31:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:70:14:E2:13:E6:FD:E3:C3:E0:65:6A:52:2E:8F:EF:54:98:0E:BF
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33382e302f32342d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.38.0/24
Signature Algorithm: sha256WithRSAEncryption
50:5a:ab:f9:1a:93:9c:7a:dd:ec:34:d2:ad:ed:07:9f:35:f6:
65:66:ed:a8:6c:a9:1d:b9:33:e2:33:42:5a:ca:50:4e:d1:a7:
90:da:73:cf:51:ff:ef:e1:cb:7c:ee:31:91:57:da:f9:23:cb:
6b:6a:cf:da:0f:67:c2:9c:39:c2:3a:2c:d2:76:1f:ec:56:98:
04:24:e3:f3:ba:74:c9:f5:a0:6d:fd:39:13:91:8d:7d:e5:a8:
1a:c0:b5:96:1f:0b:18:12:9e:b8:3e:a4:50:24:11:ab:6e:8e:
9c:ca:7a:52:25:24:8d:f9:6d:3f:e0:01:11:cf:7b:d6:38:91:
11:95:81:11:03:75:3a:75:a9:cb:f8:4d:5b:82:5e:bd:96:9b:
60:9e:22:39:2e:dd:2f:d2:d1:da:de:e2:d9:3c:ce:e1:db:12:
cc:c8:35:5c:c3:b5:76:3d:b5:21:89:29:a6:d8:9d:e6:44:0c:
6f:f0:18:b1:d9:40:23:7e:16:60:a7:99:65:d9:3e:13:29:c8:
5a:fb:bb:aa:bd:e0:9f:54:86:2b:04:2f:99:8f:8f:67:5e:8f:
fa:64:ed:be:6c:c4:36:e6:51:cf:f4:12:83:f8:3d:d0:8c:46:
24:dd:f1:34:a6:2f:67:78:01:95:4f:7f:4c:b4:06:a0:a2:f3:
3e:56:70:87
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIUXEKbnXm2LT3QSPbHaBXnAu6RNCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjAxNTE4NDBaFw0yNTEyMTkxNTIzNDBaMDMxMTAvBgNV
BAMTKEI5NzAxNEUyMTNFNkZERTNDM0UwNjU2QTUyMkU4RkVGNTQ5ODBFQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpihGJVvtOZp1sqyD6NhlIkIDq
BPMzgcCO0OJr40lR/bsrbXXdYMycdCuYNcsRYnqvPgt29epVthmyXiEQT0ng0fzu
xFIpRkhL7f0jmMxpG4SeF2TxMu1r+GvFfKriP5YrFT871BPAixzHbpTwKti5EvdR
GhcbPEa8BhH92wRFZ/0m4WDq5uEJ50UEeh3VmSqVKmmEz0wce5QEBLyyA0+PYF/+
7jd5iuBoRbslGil+3sFIOjHb2fzGdHh7G0IOLJXmqDfTDrX/XHzaHLIG1W3oOxh+
BhAg4IhX3kbku9KRsPZ9TAzcVW7QLbsOajwwsuIO5KOs+uqD69FgArEvGzHlAgMB
AAGjggI+MIICOjAdBgNVHQ4EFgQUuXAU4hPm/ePD4GVqUi6P71SYDr8wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMxMmUzMjMyMmUz
MzM4MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzQzMDMwMzIzMS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AFEWJjANBgkqhkiG9w0BAQsFAAOCAQEAUFqr+RqTnHrd7DTSre0HnzX2ZWbtqGyp
Hbkz4jNCWspQTtGnkNpzz1H/7+HLfO4xkVfa+SPLa2rP2g9nwpw5wjos0nYf7FaY
BCTj87p0yfWgbf05E5GNfeWoGsC1lh8LGBKeuD6kUCQRq26OnMp6UiUkjfltP+AB
Ec971jiREZWBEQN1OnWpy/hNW4JevZabYJ4iOS7dL9LR2t7i2TzO4dsSzMg1XMO1
dj21IYkpptid5kQMb/AYsdlAI34WYKeZZdk+EynIWvu7qr3gn1SGKwQvmY+PZ16P
+mTtvmzENuZRz/QSg/g90IxGJN3xNKYvZ3gBlU9/TLQGoKLzPlZwhw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:27:34 2025 by rpki-client