Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135392e302f32342d3234203d3e20313336373837.roa
File: 38352e3230382e3135392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: JRdUj7QDrKqDwrTYMgqQk5wo2AedAEtzWgPk1MKTz5o=
Subject key identifier: 26:F5:6E:88:09:97:1F:0E:5F:EB:09:46:7C:EF:46:56:ED:23:59:F9
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 12BD15D8806C8609B57ED214BB58B07B39A8393F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:27 +0000
ROA not before: Fri 20 Dec 2024 15:18:27 +0000
ROA not after: Fri 19 Dec 2025 15:23:27 +0000
asID: 136787
IP address blocks: 85.208.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:bd:15:d8:80:6c:86:09:b5:7e:d2:14:bb:58:b0:7b:39:a8:39:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:27 2024 GMT
Not After : Dec 19 15:23:27 2025 GMT
Subject: CN=26F56E8809971F0E5FEB09467CEF4656ED2359F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b1:f0:12:c1:7f:17:3c:94:43:cf:3e:1f:e9:
b6:a8:e8:9f:df:62:34:35:0c:73:c1:80:9e:a2:76:
d7:39:ff:f2:63:83:b3:f0:c4:df:43:4a:59:98:9a:
7f:f8:a2:63:52:95:41:b8:b6:bb:73:02:3e:fb:09:
60:df:18:db:00:ae:57:2b:88:38:f5:d8:2c:eb:d3:
cc:63:df:5b:c3:f2:ac:19:d4:ab:89:e4:a4:6b:dd:
0d:6b:c3:1b:a1:76:7d:8a:b0:9d:4d:e7:68:87:45:
41:e6:c0:ef:83:32:aa:ad:71:06:8e:45:71:14:8a:
75:63:a3:28:1c:11:51:24:97:5b:09:e5:4b:e1:8a:
d9:07:0a:6b:d0:e7:50:b5:ed:f2:2a:c4:a8:7a:8d:
71:1e:a2:08:2d:25:a0:3d:67:de:b5:f9:e4:50:cf:
40:fe:6c:85:73:49:d6:97:5e:3b:31:7f:05:33:fc:
31:c4:d7:d1:47:87:21:f4:33:f9:8e:f4:ad:fa:87:
bc:d8:3b:88:95:f4:4e:c6:24:89:85:3b:db:9c:e7:
c0:9a:62:30:e5:9e:7c:47:0f:54:b8:b3:72:6d:05:
77:40:dd:af:8a:81:4a:a1:9b:33:3c:2a:9f:e3:3c:
8f:50:80:49:30:7d:7d:14:ca:9b:ef:39:26:50:23:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F5:6E:88:09:97:1F:0E:5F:EB:09:46:7C:EF:46:56:ED:23:59:F9
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230382e3135392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.159.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:ca:6e:29:14:90:aa:8b:16:1c:f1:0f:1f:5d:b2:f5:0c:47:
81:d1:b2:c8:d3:9c:2d:47:0a:06:7a:84:04:db:9c:35:2d:e8:
be:0c:a9:b2:c9:26:08:50:8a:c6:2c:8b:19:58:52:ed:8d:b0:
65:e5:0f:f1:02:d9:75:b7:cd:b4:30:90:a1:40:78:e2:3c:f6:
60:15:91:c4:7c:94:8e:96:85:ae:7b:a9:30:75:b0:3b:25:a1:
6a:70:18:4c:7e:76:d6:be:69:b2:48:e4:2a:24:70:be:b1:38:
42:ee:af:f9:fe:e6:8a:32:ac:4e:78:8f:ca:79:0a:63:dc:53:
25:b8:af:3f:36:b0:b7:7f:dc:80:86:b6:8b:b4:f8:4c:84:a3:
0f:67:22:30:f0:97:36:f7:08:9a:5a:54:29:cb:b9:86:5e:1a:
7d:e0:97:e6:c2:35:82:29:3b:77:b1:93:d0:51:46:6e:3c:97:
a2:f0:a8:da:40:91:95:3f:68:56:be:af:55:f7:25:49:77:de:
8f:b2:d0:84:77:d2:ee:59:b0:ee:c3:6b:49:8b:95:95:1a:d8:
58:e3:6c:1d:08:85:af:f2:ed:91:bb:a5:d7:23:4e:ea:21:0d:
c1:28:9e:d0:7d:a0:75:49:e8:2f:29:c0:87:98:9f:fd:c3:dc:
e9:2b:4c:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:58 2025 by rpki-client