Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131352e302f32342d3234203d3e20323039383534.roa
File: 38332e39372e3131352e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: bMP9jHE4aWm7U3c+nPMZ/kmgOlx1weTz8C69hpZarkk=
Subject key identifier: 08:F1:DD:29:AA:AE:5B:12:46:0C:F4:83:29:71:54:16:31:B4:79:05
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1DBF9E3E286C2EB01D143EF4B9D31F3C5BE4EB73
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131352e302f32342d3234203d3e20323039383534.roa
Signing time: Fri 27 Dec 2024 11:47:34 +0000
ROA not before: Fri 27 Dec 2024 11:42:34 +0000
ROA not after: Fri 26 Dec 2025 11:47:34 +0000
asID: 209854
IP address blocks: 83.97.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:bf:9e:3e:28:6c:2e:b0:1d:14:3e:f4:b9:d3:1f:3c:5b:e4:eb:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:34 2024 GMT
Not After : Dec 26 11:47:34 2025 GMT
Subject: CN=08F1DD29AAAE5B12460CF4832971541631B47905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:91:a4:e2:85:0d:26:37:42:81:ae:ea:32:
11:28:03:3c:ff:a0:48:d4:a0:d5:cb:55:3f:ed:62:
c0:42:4c:91:bd:0b:c5:cf:eb:2d:4f:ec:dd:f2:61:
12:36:98:05:81:1c:43:1f:e1:43:04:35:d9:1a:b8:
5f:13:8e:b8:1a:f2:12:af:0a:2b:fc:33:2f:7a:6e:
94:1e:e3:4d:41:22:04:05:f2:15:b4:ee:9b:11:2c:
db:e5:ed:ad:98:50:c9:dc:00:a1:58:99:23:f0:bd:
51:51:d2:2f:15:78:78:41:bd:7f:7e:29:76:41:c3:
ef:4b:61:9a:2a:05:5d:fa:77:0c:d1:b0:03:1f:5e:
61:79:20:7d:2a:b0:5e:f9:27:b6:cc:c8:24:8f:b0:
b5:64:2b:ab:bf:ee:e3:ff:24:00:f3:16:e4:2e:95:
f7:87:d0:cc:83:77:3e:c4:54:32:c5:c5:40:57:6d:
3c:ce:ba:b8:a1:b6:26:c6:f7:41:d5:e7:2c:ac:0c:
3b:c0:75:bc:2b:53:e5:ba:5d:f0:96:f1:76:eb:89:
42:ee:1a:16:61:72:2d:c5:b3:9c:47:84:f7:c2:da:
87:27:f2:1f:56:b2:63:00:ad:72:bd:63:ff:b4:c6:
70:1d:0e:76:86:22:81:7f:ed:3a:39:8f:af:eb:54:
9c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F1:DD:29:AA:AE:5B:12:46:0C:F4:83:29:71:54:16:31:B4:79:05
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131352e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.115.0/24
Signature Algorithm: sha256WithRSAEncryption
29:18:73:46:4a:13:23:5a:16:39:e4:af:99:e2:38:45:ce:ef:
75:37:0c:2d:ef:9b:8f:0c:63:9c:7c:59:57:4d:77:fb:5a:fa:
e0:66:ec:f2:df:94:bb:61:86:93:17:28:e5:a1:c0:0b:b2:9d:
9d:c2:ce:f6:92:8c:11:4c:d9:09:8b:61:c2:45:dd:ba:58:c9:
d3:76:7e:b9:3a:92:fd:ab:44:44:fe:6b:9c:7e:94:44:19:c8:
90:e8:e0:d1:b7:dc:13:bd:36:8d:5d:20:8d:ae:bc:5e:4e:21:
08:fe:20:59:f1:66:51:5b:64:92:c0:b3:ed:6d:ee:e3:b4:e1:
3c:53:3e:5e:9f:e8:3d:65:ce:97:20:42:41:a7:33:91:50:d0:
2e:c2:60:03:70:38:2c:1c:b9:cb:82:bc:8d:57:f6:28:65:f4:
78:58:ed:d3:0a:3e:d1:12:e1:2a:74:8d:f4:f7:56:53:7f:40:
16:b7:61:37:25:52:59:91:bf:c7:06:3c:92:54:51:56:c9:98:
89:bc:51:8b:96:42:d1:4b:ff:83:07:29:22:48:61:fd:88:12:
ca:32:49:46:5f:7e:8a:d4:1f:4c:4a:2c:9f:d5:bd:c2:35:e6:
2a:ef:b0:7e:ec:04:88:de:15:be:96:a6:b6:20:9d:21:29:63:
ea:dd:c4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:11 2025 by rpki-client