Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131322e302f32342d3234203d3e20323039383534.roa
File: 38332e39372e3131322e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: 008hu5ZuvcagLTJh/Q/CIwkQm5j2X9+6eoXP5WlMsqw=
Subject key identifier: B4:16:04:D4:C5:24:06:3C:5B:F0:87:6D:B9:77:79:5A:0D:35:0B:B7
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4488EE7021A37210E2421AB5684AEC1A874A5F61
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131322e302f32342d3234203d3e20323039383534.roa
Signing time: Fri 27 Dec 2024 11:47:31 +0000
ROA not before: Fri 27 Dec 2024 11:42:31 +0000
ROA not after: Fri 26 Dec 2025 11:47:31 +0000
asID: 209854
IP address blocks: 83.97.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:88:ee:70:21:a3:72:10:e2:42:1a:b5:68:4a:ec:1a:87:4a:5f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:31 2024 GMT
Not After : Dec 26 11:47:31 2025 GMT
Subject: CN=B41604D4C524063C5BF0876DB977795A0D350BB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:33:68:77:f7:23:8f:d0:92:5c:01:53:af:
19:4e:4d:49:29:f4:0f:5e:c2:e5:72:b9:78:fb:1d:
02:01:9d:87:c2:98:f9:2d:bd:03:31:60:aa:09:31:
36:cb:df:d3:f1:35:19:d9:7e:ef:de:67:d5:49:d2:
ec:19:89:fc:2e:e5:b6:a1:75:7f:a3:fc:47:5d:0c:
34:2c:b9:57:30:0d:ee:0c:08:91:f1:74:5c:b2:24:
6e:4e:11:52:3e:0a:6b:53:43:0b:52:ae:08:06:fd:
63:9d:5d:ff:1b:27:ec:47:51:0d:28:79:f0:2b:7a:
45:f3:32:0f:44:f9:3c:b9:1b:0d:31:9d:89:91:22:
27:a6:6c:71:bd:b8:2b:c2:75:dc:4e:03:ff:0c:01:
a6:20:13:12:47:28:d4:20:e0:80:70:df:0a:1b:8b:
49:c6:0b:b3:9b:d4:a4:1a:5c:22:0f:a6:89:fd:f5:
a0:bf:c2:19:66:0d:bd:6f:ae:71:2a:1b:f8:93:c0:
b9:1b:27:87:5a:e2:6a:88:c6:49:79:82:91:99:b7:
d7:c0:40:b2:c5:e7:b7:26:cd:2a:94:94:b7:ba:58:
47:db:c2:09:a5:75:b8:5f:41:da:42:7a:18:67:7a:
df:39:d5:f9:c0:0b:6c:e1:63:56:bc:21:1d:06:bb:
14:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:16:04:D4:C5:24:06:3C:5B:F0:87:6D:B9:77:79:5A:0D:35:0B:B7
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131322e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.112.0/24
Signature Algorithm: sha256WithRSAEncryption
54:db:03:6d:d5:97:82:23:51:3d:b3:b9:22:03:cf:69:03:b7:
f6:e4:11:13:22:39:92:a8:b7:1b:50:b8:b2:f2:5c:1b:d5:12:
be:dc:39:d8:e2:70:01:4d:13:56:32:5f:db:38:c4:80:e6:04:
23:3f:0d:79:b2:be:f4:58:78:eb:13:1f:38:3d:c8:f5:33:7a:
0a:0f:73:f1:58:5b:9a:01:d6:83:f9:c4:ec:ee:1f:d8:48:d4:
75:f5:17:26:1e:34:04:d6:e1:48:5f:bc:4b:b0:2e:55:4c:fc:
81:ea:75:58:f9:ba:a4:68:c3:a0:d6:d4:c5:e5:70:90:df:fc:
de:70:2d:25:fe:b4:33:91:09:13:58:2c:0a:06:63:4b:8f:43:
7e:55:7d:f0:2a:ea:3c:d4:c4:83:ef:05:1b:fa:a7:7a:0b:fa:
f5:68:01:3b:97:85:45:45:a6:b8:ba:c8:79:77:08:8a:72:51:
6b:dc:39:23:12:74:73:a2:35:c7:36:2f:a9:8e:c6:22:54:e6:
f1:45:e3:43:7b:4b:29:fb:b0:72:40:34:30:3f:1e:0a:fc:f1:
3a:dc:e8:1f:e4:f0:d2:1f:4a:d4:da:b2:05:bd:0b:ea:53:5e:
4e:06:73:5f:d8:f1:ef:39:dc:7a:1b:1e:2e:b5:c9:c5:29:f8:
f9:74:d9:25
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIURIjucCGjchDiQhq1aErsGodKX2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMzFaFw0yNTEyMjYxMTQ3MzFaMDMxMTAvBgNV
BAMTKEI0MTYwNEQ0QzUyNDA2M0M1QkYwODc2REI5Nzc3OTVBMEQzNTBCQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxeTNod/cjj9CSXAFTrxlOTUkp
9A9ewuVyuXj7HQIBnYfCmPktvQMxYKoJMTbL39PxNRnZfu/eZ9VJ0uwZifwu5bah
dX+j/EddDDQsuVcwDe4MCJHxdFyyJG5OEVI+CmtTQwtSrggG/WOdXf8bJ+xHUQ0o
efArekXzMg9E+Ty5Gw0xnYmRIiembHG9uCvCddxOA/8MAaYgExJHKNQg4IBw3wob
i0nGC7Ob1KQaXCIPpon99aC/whlmDb1vrnEqG/iTwLkbJ4da4mqIxkl5gpGZt9fA
QLLF57cmzSqUlLe6WEfbwgmldbhfQdpCehhnet851fnAC2zhY1a8IR0GuxS9AgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUtBYE1MUkBjxb8IdtuXd5Wg01C7cwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMzMmUzOTM3MmUz
MTMxMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzkzODM1MzQucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABTYXAwDQYJKoZIhvcNAQELBQADggEBAFTbA23Vl4IjUT2zuSIDz2kDt/bk
ERMiOZKotxtQuLLyXBvVEr7cOdjicAFNE1YyX9s4xIDmBCM/DXmyvvRYeOsTHzg9
yPUzegoPc/FYW5oB1oP5xOzuH9hI1HX1FyYeNATW4UhfvEuwLlVM/IHqdVj5uqRo
w6DW1MXlcJDf/N5wLSX+tDORCRNYLAoGY0uPQ35VffAq6jzUxIPvBRv6p3oL+vVo
ATuXhUVFpri6yHl3CIpyUWvcOSMSdHOiNcc2L6mOxiJU5vFF40N7Syn7sHJANDA/
Hgr88Trc6B/k8NIfStTasgW9C+pTXk4Gc1/Y8e853HobHi61ycUp+Pl02SU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:19 2025 by rpki-client