Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3137302e302f32342d3234203d3e20313336373837.roa
File: 38342e32312e3137302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 4kVS6T0+fNCph2296CPXCgfYoam0YuwDjO2g8udXFwA=
Subject key identifier: 9D:B9:48:AF:CB:D7:85:2C:7A:BD:79:4E:D5:E9:6C:3E:B3:EB:6F:6F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 180D0751974BD737598F9472DB648C5AEF2A9074
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3137302e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:35 +0000
ROA not before: Fri 20 Dec 2024 15:18:35 +0000
ROA not after: Fri 19 Dec 2025 15:23:35 +0000
asID: 136787
IP address blocks: 84.21.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:0d:07:51:97:4b:d7:37:59:8f:94:72:db:64:8c:5a:ef:2a:90:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:35 2024 GMT
Not After : Dec 19 15:23:35 2025 GMT
Subject: CN=9DB948AFCBD7852C7ABD794ED5E96C3EB3EB6F6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:b7:ba:15:08:13:9b:84:01:24:73:e7:7e:
f5:02:cf:1b:6b:60:0a:4e:e9:a3:54:8d:ad:54:13:
cd:93:3d:24:aa:97:75:c7:49:08:5b:6b:b3:0f:ff:
72:50:5c:b2:28:bc:5e:cb:55:13:12:90:71:e2:8b:
1f:bb:b8:f3:f6:11:c3:bc:14:1e:29:87:55:52:f4:
dc:c4:f9:08:e1:6e:8b:ab:14:7d:9f:6b:95:ef:96:
8a:6e:25:8a:cc:56:94:d7:f9:50:df:fb:29:4c:a7:
ae:ab:dc:03:eb:37:83:d7:0e:2f:0d:a2:e3:54:56:
b6:57:36:23:ee:26:a4:f4:73:c8:b8:e9:d2:71:0c:
a8:96:81:f1:b2:b2:4c:ca:5a:fc:d5:36:26:17:96:
cf:eb:35:68:de:66:84:7e:9b:8c:9e:75:08:d4:0e:
60:79:d3:7c:76:d2:66:c3:19:89:10:9e:cc:1e:de:
4f:3d:41:c7:d8:56:63:55:47:ba:48:df:5a:1f:ee:
34:3d:8e:7d:0f:20:a7:57:09:3f:74:c9:8d:c9:ca:
0f:87:8a:b2:79:22:a9:e1:ad:2a:33:f3:83:74:90:
92:ce:4f:99:c0:52:d7:74:25:ec:de:7f:68:0d:b6:
7c:8f:92:b1:8a:2c:83:16:9c:8a:19:57:60:fa:27:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B9:48:AF:CB:D7:85:2C:7A:BD:79:4E:D5:E9:6C:3E:B3:EB:6F:6F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3137302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.170.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e1:2a:13:e2:fb:b0:77:c3:08:7a:e4:8b:42:c0:3a:6d:34:
89:e0:8f:69:b3:0a:fd:8f:d7:48:93:c8:db:58:13:7b:50:ed:
cd:19:79:93:38:b6:76:33:d2:8c:98:71:cb:54:17:8d:88:ee:
60:07:f2:a2:e8:08:aa:a5:ad:e3:39:cc:e7:ec:df:b2:db:5f:
88:a0:d2:b6:56:7e:b6:bd:2c:54:91:be:03:76:75:4b:ab:44:
03:fd:92:a1:f3:9a:b7:00:30:c3:c8:75:e4:f5:17:7a:2e:11:
2c:12:97:fa:dc:b5:a3:aa:f6:59:b4:1e:84:22:60:9b:4a:d2:
eb:e4:5a:c0:8e:4c:8f:12:65:ce:9f:3c:7d:9d:9c:06:4f:f6:
97:d4:30:1b:20:c1:fa:2f:cf:da:e6:a7:6b:ce:5a:38:9f:3c:
65:e6:05:69:f2:6e:89:e6:e4:af:23:cc:57:70:8d:7d:20:57:
49:53:e1:c1:6a:a2:9e:18:96:d3:70:cb:20:20:f8:fb:ae:0d:
73:73:17:aa:11:85:68:aa:65:27:1b:cd:9b:7a:a0:96:5e:01:
7d:4f:a0:77:19:34:95:28:7c:fa:41:03:1d:88:81:c0:5d:f6:
85:ad:9d:3f:87:ee:87:bd:3f:c5:58:3d:dc:96:b9:2d:e0:d7:
46:cf:82:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:02 2025 by rpki-client