Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3235302e302f32332d3234203d3e20313336373837.roa
File: 38332e3137312e3235302e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier: qoYLSm57CcLXPvoYn7AM/J1a5HrQeH0HqMlHeopc/Wo=
Subject key identifier: 83:E6:D0:12:BF:15:88:43:A5:70:96:C3:80:F5:B7:F0:24:87:26:C2
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3290F294E501B2A186F638C17042948C404EA075
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3235302e302f32332d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:30 +0000
ROA not before: Fri 20 Dec 2024 15:18:30 +0000
ROA not after: Fri 19 Dec 2025 15:23:30 +0000
asID: 136787
IP address blocks: 83.171.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:90:f2:94:e5:01:b2:a1:86:f6:38:c1:70:42:94:8c:40:4e:a0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:30 2024 GMT
Not After : Dec 19 15:23:30 2025 GMT
Subject: CN=83E6D012BF158843A57096C380F5B7F0248726C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:30:f4:6b:16:e1:e1:e2:d0:15:39:9d:6f:bb:
b0:41:4d:42:43:3e:dd:aa:69:28:30:da:5c:40:19:
d4:2f:b3:61:7e:db:c3:09:99:db:bf:84:76:b4:b2:
6f:ab:1b:91:b2:dc:62:00:21:30:02:fa:a8:f6:c5:
dc:a0:a3:e1:ba:64:00:8d:0b:a0:69:10:01:ee:c0:
6a:4c:09:10:67:46:b8:18:6b:11:f9:05:a2:bf:66:
35:14:9b:0f:3b:0f:5b:f8:97:d1:fc:03:16:af:21:
fd:e3:7e:0a:b9:b9:66:28:67:84:e5:18:7a:c9:1d:
18:a1:93:ea:de:35:40:f9:43:29:4b:2c:ba:26:25:
32:ad:4c:12:08:ca:d7:a1:05:fa:5f:f7:da:54:71:
06:37:48:85:e3:72:fd:3f:64:3d:f9:74:b6:ea:4e:
9c:9b:d4:06:08:54:23:f2:a9:b7:c3:67:8b:07:9b:
46:75:00:2d:13:af:7d:c7:9b:f7:ed:76:2e:d6:5e:
9e:9a:b5:2c:bc:b7:77:d2:73:5e:58:93:73:14:c3:
9d:7f:ce:93:cc:98:4b:f1:c7:d3:2e:50:04:bc:a5:
6f:cb:69:b3:ff:bb:be:54:93:dc:31:a1:39:8d:ad:
ce:a2:23:bd:89:c3:8a:27:86:05:f8:c2:04:1d:96:
46:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E6:D0:12:BF:15:88:43:A5:70:96:C3:80:F5:B7:F0:24:87:26:C2
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3235302e302f32332d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.250.0/23
Signature Algorithm: sha256WithRSAEncryption
cb:00:25:df:9b:bd:e0:d3:05:a3:df:63:43:03:dc:3a:b2:b6:
09:f5:58:f3:f3:64:03:9d:a0:17:98:aa:b7:dc:b3:39:54:f6:
40:b2:38:b3:58:84:09:9b:c0:6c:3f:2f:f5:8a:63:d4:47:c6:
97:ed:42:57:38:b2:a5:64:5b:3d:08:c1:d3:75:d1:1f:e7:68:
1a:ac:71:65:67:4d:17:3f:3c:ce:4c:d5:eb:51:9b:75:14:94:
d4:3b:8b:a4:1e:69:f9:1f:3c:ce:5f:02:8c:21:0e:ba:d8:aa:
9c:05:07:c0:da:89:4b:c6:68:ee:45:d3:2b:d3:c3:ea:6e:12:
5a:16:1b:22:eb:fc:0c:4f:71:a8:e7:b4:77:85:80:44:30:68:
7d:01:df:6c:72:9e:a3:a2:e7:2a:a4:30:07:05:cb:22:e6:e1:
a1:87:6a:e5:ee:0d:88:c6:68:4a:1a:82:54:f9:9d:2a:4a:2a:
6a:e9:04:95:c7:22:f7:81:f5:9b:58:51:27:05:76:bf:72:67:
ee:65:f3:71:ea:4d:bf:ed:5f:a7:be:3e:7d:28:7f:c2:09:32:
a5:5a:73:32:72:e1:b4:f1:7a:05:d5:20:5b:17:87:10:6c:66:
cf:ff:07:6d:26:7e:b1:cc:7f:00:30:3e:68:f6:8f:9a:01:c5:
e5:ab:36:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:17:29 2025 by rpki-client