Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230392e39342e302f32332d3234203d3e203437353833.roa
File: 38352e3230392e39342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: FinjQOiknVWwZqRNVe/m75JcdJtFDI3+9KWcWTyOHg4=
Subject key identifier: 10:5F:26:BF:96:45:51:D6:4C:91:E2:88:1E:39:2A:B0:26:E6:72:B7
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0BCA1776204D0E5F3870A79161969FC7EA74032E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230392e39342e302f32332d3234203d3e203437353833.roa
Signing time: Fri 27 Dec 2024 11:47:21 +0000
ROA not before: Fri 27 Dec 2024 11:42:21 +0000
ROA not after: Fri 26 Dec 2025 11:47:21 +0000
asID: 47583
IP address blocks: 85.209.94.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ca:17:76:20:4d:0e:5f:38:70:a7:91:61:96:9f:c7:ea:74:03:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:21 2024 GMT
Not After : Dec 26 11:47:21 2025 GMT
Subject: CN=105F26BF964551D64C91E2881E392AB026E672B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:13:c1:47:97:e4:ea:3c:2f:e4:98:75:2d:
fc:56:56:83:36:58:69:c3:99:d9:68:32:50:19:c1:
37:1e:ad:22:fc:59:d5:3c:d5:ef:a3:81:f2:8f:61:
1b:21:48:91:66:42:fe:1a:b4:e4:cd:c6:91:8b:ff:
b7:63:24:d3:15:70:c0:d9:be:df:e1:21:20:f3:55:
8b:54:29:3c:f7:3d:85:3f:72:9d:23:04:8c:3d:39:
cb:dd:3c:04:dc:6d:2a:19:a6:e5:6d:23:e1:f5:07:
e0:1e:6d:06:6f:9a:28:95:9b:10:fd:96:f7:d4:fc:
7f:de:3a:a0:4d:38:46:48:54:14:cb:bd:c4:30:68:
0c:d1:e5:d8:e8:e7:fe:e0:d6:5e:f0:2d:33:2c:b8:
09:ee:1a:b3:d9:bc:e6:8b:be:f0:44:56:e0:da:51:
68:01:e1:1c:55:3d:e3:7b:73:2c:a5:39:d7:44:f9:
ae:bc:f4:67:2e:a7:99:1f:38:60:c3:70:18:39:5f:
79:81:bd:7c:67:e7:90:f2:db:e5:06:22:40:8f:6a:
49:70:65:14:42:95:00:34:56:dc:23:87:11:4a:3b:
82:70:e3:c9:9a:59:fc:5b:0c:82:15:dc:7d:06:46:
93:34:7b:c4:47:ac:e8:61:f8:07:01:8d:38:7a:0e:
40:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5F:26:BF:96:45:51:D6:4C:91:E2:88:1E:39:2A:B0:26:E6:72:B7
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230392e39342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.94.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:d6:97:98:d8:b5:38:58:57:56:92:36:f4:27:44:a3:40:72:
bd:59:90:f0:4d:5b:17:07:d6:6a:36:55:e2:93:23:15:89:ca:
bb:a3:1b:0f:a2:cb:b4:ab:fa:3c:a4:10:02:d3:7c:23:4f:6c:
5e:bb:2c:4d:d0:65:ef:c2:50:f2:c5:e9:4e:e0:6d:14:d8:36:
98:1b:36:33:17:bd:7a:3e:fe:1f:7e:93:20:b8:1a:1e:db:95:
c8:5c:6d:27:ad:8f:a7:46:66:cc:07:68:4c:1a:17:cc:4c:3a:
92:d8:fc:5b:81:3a:1e:09:b5:0a:86:48:ad:51:14:56:97:9c:
f9:8c:58:57:fc:aa:2c:f0:35:0b:6e:2e:73:74:ee:70:61:f6:
1c:d1:5e:67:c7:16:40:b3:57:9f:8a:62:f1:70:ce:4c:a5:5d:
01:ef:d9:3d:d2:dd:5e:2f:4b:7d:44:ee:0c:f0:2c:25:91:63:
d2:cc:c8:f5:90:b6:ba:46:51:0b:71:c4:b1:8f:e8:05:9b:b5:
51:39:92:ee:3c:dc:a4:0a:1d:ba:0f:15:df:1f:d3:68:db:7c:
35:7b:6d:84:96:04:66:85:fb:2c:07:4d:98:ca:86:95:6d:d2:
b8:aa:8a:8d:80:7c:26:c7:28:3b:f7:ee:7e:4c:85:50:4c:79:
cc:7d:53:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:08 2025 by rpki-client