Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230322e38312e302f32342d3234203d3e20323037313337.roa
File: 38352e3230322e38312e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: azu1tw5NZ4gRKR607J0QZgNQSuNa/PWXPPi5THNas7c=
Subject key identifier: 48:F6:5A:B4:C7:1E:2B:4A:8F:0F:F4:15:82:91:54:72:2B:D4:20:35
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 415C93B5A5CDC842DD8692899D8D801134185A2A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230322e38312e302f32342d3234203d3e20323037313337.roa
Signing time: Fri 27 Dec 2024 11:47:29 +0000
ROA not before: Fri 27 Dec 2024 11:42:29 +0000
ROA not after: Fri 26 Dec 2025 11:47:29 +0000
asID: 207137
IP address blocks: 85.202.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:5c:93:b5:a5:cd:c8:42:dd:86:92:89:9d:8d:80:11:34:18:5a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:29 2024 GMT
Not After : Dec 26 11:47:29 2025 GMT
Subject: CN=48F65AB4C71E2B4A8F0FF415829154722BD42035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:94:83:79:b4:04:7d:3b:53:22:06:60:46:
1d:82:8e:01:14:e4:6f:d0:cd:f5:82:68:8a:1f:21:
68:64:e1:45:6c:68:43:30:4c:c9:1d:75:e1:a9:07:
8d:64:54:ad:eb:5e:a8:99:72:8b:79:89:93:ba:ce:
40:89:07:92:b6:e5:b2:e0:61:0f:db:27:41:fb:6d:
73:c0:1b:af:9e:5d:e1:ad:75:c9:e8:32:1f:8f:1e:
ef:83:09:a7:b8:e9:3b:a5:e6:9b:7b:61:ba:86:c2:
db:43:f9:bb:4b:43:fa:2d:75:16:ea:7c:85:ff:1f:
2a:df:c6:f2:ae:cb:90:65:1a:57:97:7b:f3:88:ed:
af:ed:0b:94:dd:49:c9:07:7b:36:50:45:44:ef:71:
45:e1:6c:24:62:13:e8:40:d9:ae:e7:33:21:a3:04:
bc:3a:f8:47:5b:d3:de:d5:1d:48:99:ed:5b:39:0d:
69:1e:b0:3d:77:ec:f0:fb:c5:c0:ca:eb:b1:3a:69:
a5:52:f0:a1:04:86:3d:92:c6:30:06:fb:87:df:2b:
39:b9:7b:85:e4:06:cf:d3:08:4b:1e:de:3b:ea:68:
52:3f:62:12:55:05:4f:d7:a9:e9:65:e3:0b:1b:ec:
e6:1a:29:4d:04:b9:e7:c5:d3:89:74:30:f2:86:97:
ab:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F6:5A:B4:C7:1E:2B:4A:8F:0F:F4:15:82:91:54:72:2B:D4:20:35
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230322e38312e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.81.0/24
Signature Algorithm: sha256WithRSAEncryption
21:5e:4e:ec:1f:43:e3:88:8e:28:47:77:2e:b8:1a:91:51:3c:
72:2a:dd:94:a8:e5:53:2b:52:86:20:06:71:65:9f:9a:4d:47:
e6:16:49:8a:ad:ec:32:8a:b1:18:7d:77:16:de:f0:3e:13:96:
e7:7e:b5:de:c8:55:fb:0f:29:98:86:f1:de:91:e0:05:b1:cc:
a7:f7:1a:df:69:44:73:8b:38:ce:59:f0:f4:85:18:77:63:e9:
2b:c8:51:ec:7c:6f:1d:78:8d:77:6e:ea:1a:e0:7d:4f:1c:b1:
84:40:24:9c:8f:f9:d3:56:0c:15:c1:92:70:c2:4b:f4:21:30:
d9:d9:42:95:90:cc:09:9d:64:b2:d7:29:f6:77:ba:9a:10:52:
53:ea:3a:43:a9:21:ae:fb:47:ff:99:e1:91:81:4a:3c:b3:f1:
c6:7e:1d:e7:f5:ca:c5:c8:02:1e:c6:fa:5a:ed:d4:b9:09:60:
3a:a2:29:a0:31:6c:8b:4a:a8:54:8d:90:5a:63:70:5d:f0:40:
3c:98:5a:42:8e:95:35:bc:86:71:79:c2:1c:21:35:c5:8b:5b:
8c:fa:11:d7:1c:a1:ab:91:f7:33:1a:e5:06:b8:68:41:35:99:
b5:b2:ee:c5:53:7b:da:42:a5:22:06:99:42:34:1a:5d:8f:17:
3e:e4:99:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:31 2025 by rpki-client