Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3136382e302f32342d3234203d3e20313336373837.roa
File: 38342e32312e3136382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: hM4jbK/G17ps7cvzn/tNA+IF5/PFDE72Lp0u5sIuRJo=
Subject key identifier: D5:0D:22:BF:50:94:AD:EF:89:2A:34:8D:B7:51:82:52:1D:BA:A7:12
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 517B5C47B6F8DBCF9341BC4BC7BE69FA3E68B2D0
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3136382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:31 +0000
ROA not before: Fri 20 Dec 2024 15:18:31 +0000
ROA not after: Fri 19 Dec 2025 15:23:31 +0000
asID: 136787
IP address blocks: 84.21.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:7b:5c:47:b6:f8:db:cf:93:41:bc:4b:c7:be:69:fa:3e:68:b2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:31 2024 GMT
Not After : Dec 19 15:23:31 2025 GMT
Subject: CN=D50D22BF5094ADEF892A348DB75182521DBAA712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:f3:1d:5d:e3:e3:18:91:32:eb:46:27:98:
bd:40:a3:20:d4:5e:2e:ce:a2:36:61:6e:d3:90:f4:
7b:30:4d:25:c4:28:ac:50:7f:11:88:29:07:bd:b7:
46:cc:cd:20:a5:b7:6e:8c:d3:70:6e:f0:a0:43:e2:
9f:72:c0:d6:fe:5e:8f:26:f5:4c:4a:48:3b:3a:01:
c7:3e:df:c0:32:1c:7f:2b:57:c8:40:91:e9:2a:7e:
18:a2:66:4b:97:41:0c:0d:63:89:16:52:f8:fe:05:
25:22:5e:bd:03:58:85:62:13:17:76:cc:e2:4d:ce:
8f:4a:ba:32:9a:5e:1d:2b:23:eb:34:f2:8e:86:f8:
11:dc:58:12:23:8b:e9:e9:d8:5f:ea:15:dc:ba:bf:
21:2b:aa:ea:6d:95:35:17:28:b4:ae:69:ab:16:c3:
b1:19:14:cc:af:95:98:73:ef:c0:d2:19:87:dd:21:
76:34:a9:2d:d6:b0:9f:4a:c5:d3:de:f1:0b:73:12:
2a:55:ea:e0:b0:bb:6b:dc:c0:94:bb:13:7b:26:c7:
ae:89:2e:7a:a7:7e:85:f0:e1:ea:06:8e:0d:89:0c:
0c:2d:e1:6d:f3:f2:fc:bf:fd:a2:d2:2f:7e:28:95:
ad:ac:22:0d:22:91:62:cb:3c:12:cf:09:a3:de:6c:
2d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0D:22:BF:50:94:AD:EF:89:2A:34:8D:B7:51:82:52:1D:BA:A7:12
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3136382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.168.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c7:48:24:28:ba:c7:56:fd:f7:7e:8b:60:bc:eb:fa:c1:dd:
96:2b:0e:49:6d:91:cb:10:84:06:03:50:2f:3d:70:e3:56:c8:
12:cc:ed:dc:f6:8c:e7:8b:7f:28:ed:ca:bd:19:23:73:8d:f7:
a4:5c:1c:d6:91:d1:a7:e0:fb:91:c8:00:19:c3:5f:22:86:f2:
f1:48:c6:08:5c:b8:0c:aa:31:0a:46:23:ea:9a:a2:8a:1c:f8:
e4:e4:45:11:0f:6b:3f:7e:0e:01:8e:1b:14:3c:40:ef:8b:34:
5d:fc:66:b6:36:da:b3:db:fc:6e:97:ab:55:36:27:67:30:bc:
24:e3:85:9c:67:d3:72:88:39:5d:4d:f4:2d:ef:00:f2:93:b0:
80:bd:d9:3f:84:fc:49:04:88:f0:87:9b:04:6b:a9:cf:75:31:
2a:95:6e:58:84:d1:23:2b:96:98:48:56:de:ef:d7:9a:60:9e:
73:0f:76:c6:b6:0f:b8:b2:ab:f9:1a:e2:c9:1b:d0:fa:d6:65:
0f:4c:a4:16:de:f3:d0:00:d3:1c:a5:19:3f:85:fd:3b:6c:8f:
e8:bd:27:f2:ad:c0:2a:80:48:11:13:ff:80:d4:89:7f:26:09:
16:48:6f:04:0e:ac:2a:04:8f:09:07:89:30:16:8f:6c:18:18:
d4:fa:2a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:09:10 2025 by rpki-client