Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135372e302f32342d3234203d3e20313336373837.roa
File: 38352e3230382e3135372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: cThihf3Js7y7UBJ5HzZxeWXKs6ubUfORp4+Xezo/5r8=
Subject key identifier: 09:7E:48:CA:4F:BD:46:8E:C2:41:A3:9D:60:AC:14:C8:0F:5B:EA:B5
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3E8AC7587B2ED8099BC2F5DA8A5E52340932A467
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:33 +0000
ROA not before: Fri 20 Dec 2024 15:18:33 +0000
ROA not after: Fri 19 Dec 2025 15:23:33 +0000
asID: 136787
IP address blocks: 85.208.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:8a:c7:58:7b:2e:d8:09:9b:c2:f5:da:8a:5e:52:34:09:32:a4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:33 2024 GMT
Not After : Dec 19 15:23:33 2025 GMT
Subject: CN=097E48CA4FBD468EC241A39D60AC14C80F5BEAB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:69:82:cf:f7:b9:4c:67:a8:0b:22:eb:88:
a9:06:15:ad:5d:e5:67:f9:14:fb:26:7e:e2:22:4a:
4b:ef:ce:3a:02:01:7d:18:3b:c7:b9:af:91:b8:8a:
ad:00:51:d9:5d:1e:ce:a3:f0:56:71:56:e1:56:f0:
89:6a:d0:05:03:fd:f5:73:da:e4:56:10:41:2e:d3:
3c:4c:12:ee:d7:c1:6d:c4:07:6e:f5:bc:8e:16:b9:
b6:ef:aa:39:14:9c:0e:d1:18:74:64:24:ee:a8:2e:
c9:c3:52:95:6e:70:c0:f3:31:5d:97:96:c1:9c:40:
d9:d6:da:41:e6:d2:0a:bc:46:fd:74:70:a7:8f:3b:
b0:0c:f4:0c:2d:76:05:6f:88:bb:d9:ab:e5:55:95:
81:76:23:81:e4:44:c9:3b:77:36:b6:ad:98:a6:6d:
df:3e:81:5e:95:ff:a8:e4:6f:a8:45:c8:aa:a1:29:
19:ab:ff:40:7c:90:c1:25:68:fb:f4:da:e3:14:00:
a9:8a:1b:7e:37:24:ef:d2:53:5d:27:77:34:ae:b4:
d5:4b:57:be:b1:31:53:f2:95:0d:d7:e4:2d:3a:9d:
b2:7e:2e:bf:64:f9:40:8e:1c:4a:4f:6b:86:2b:01:
da:85:f1:07:90:ec:7a:f8:db:a3:db:9d:9b:7c:71:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7E:48:CA:4F:BD:46:8E:C2:41:A3:9D:60:AC:14:C8:0F:5B:EA:B5
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.157.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:6e:fe:57:7c:0c:7f:c4:ee:68:63:ae:3b:40:23:5f:6f:74:
b1:a2:84:9c:29:05:b3:e5:b8:70:ff:aa:87:4a:f4:1e:74:2d:
ec:c4:74:8f:4c:b9:5b:89:1b:1b:54:e1:f0:fd:70:c5:45:93:
28:d1:88:8d:2c:bc:09:a9:14:89:99:f6:a9:5f:83:51:12:81:
77:11:d7:74:dd:a7:e5:70:77:e5:d8:13:1d:b3:a0:a0:c5:ac:
d3:32:63:1e:f0:f2:38:02:db:74:83:b0:f3:c9:ec:1f:9c:e8:
d8:23:2a:5e:52:50:51:fe:4c:db:3f:86:0c:18:b7:a4:ac:b5:
cc:0a:f4:fa:69:20:8c:68:bd:e3:eb:8a:d0:99:25:d2:a7:d0:
98:19:42:ad:eb:76:47:77:70:60:22:e4:6d:24:8f:a4:63:70:
bb:e4:8e:54:01:6f:af:b2:39:ac:05:af:22:33:b6:0d:4d:1b:
b0:4f:2a:b5:de:50:7d:90:a9:ff:e9:b4:2f:68:9a:e7:af:63:
59:9f:b4:f9:1c:43:59:d3:d4:38:3c:b3:53:6d:41:a1:d1:93:
e9:0e:16:7e:3d:be:c3:c0:9b:34:6b:f6:84:5c:66:5b:ab:34:
14:5f:02:ee:41:58:af:1d:1b:74:31:bc:07:e3:f0:fd:1e:50:
4b:a9:b5:b7
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUPorHWHsu2AmbwvXail5SNAkypGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjAxNTE4MzNaFw0yNTEyMTkxNTIzMzNaMDMxMTAvBgNV
BAMTKDA5N0U0OENBNEZCRDQ2OEVDMjQxQTM5RDYwQUMxNEM4MEY1QkVBQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAjWmCz/e5TGeoCyLriKkGFa1d
5Wf5FPsmfuIiSkvvzjoCAX0YO8e5r5G4iq0AUdldHs6j8FZxVuFW8Ilq0AUD/fVz
2uRWEEEu0zxMEu7XwW3EB271vI4WubbvqjkUnA7RGHRkJO6oLsnDUpVucMDzMV2X
lsGcQNnW2kHm0gq8Rv10cKePO7AM9AwtdgVviLvZq+VVlYF2I4HkRMk7dza2rZim
bd8+gV6V/6jkb6hFyKqhKRmr/0B8kMElaPv02uMUAKmKG343JO/SU10ndzSutNVL
V76xMVPylQ3X5C06nbJ+Lr9k+UCOHEpPa4YrAdqF8QeQ7Hr426PbnZt8cVHFAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUCX5Iyk+9Ro7CQaOdYKwUyA9b6rUwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODM1MmUzMjMwMzgy
ZTMxMzUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAFXQnTANBgkqhkiG9w0BAQsFAAOCAQEA2W7+V3wMf8TuaGOuO0AjX290
saKEnCkFs+W4cP+qh0r0HnQt7MR0j0y5W4kbG1Th8P1wxUWTKNGIjSy8CakUiZn2
qV+DURKBdxHXdN2n5XB35dgTHbOgoMWs0zJjHvDyOALbdIOw88nsH5zo2CMqXlJQ
Uf5M2z+GDBi3pKy1zAr0+mkgjGi94+uK0Jkl0qfQmBlCret2R3dwYCLkbSSPpGNw
u+SOVAFvr7I5rAWvIjO2DU0bsE8qtd5QfZCp/+m0L2ia569jWZ+0+RxDWdPUODyz
U21BodGT6Q4Wfj2+w8CbNGv2hFxmW6s0FF8C7kFYrx0bdDG8B+Pw/R5QS6m1tw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:08:26 2025 by rpki-client