Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38382e3231382e3136362e302f32332d3233203d3e20323033303631.roa
File: 38382e3231382e3136362e302f32332d3233203d3e20323033303631.roa (raw, json)
Hash identifier: l9xUBHb9XOafyTAAj9SZXNLZ4xhw63N6oMNd3dZswlM=
Subject key identifier: A7:2F:8D:2D:50:6C:5B:B1:FC:93:01:3C:F9:A8:53:FC:D6:2A:FC:5B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4866760FCA396FC4DB12C1DFDC143054C6199B48
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38382e3231382e3136362e302f32332d3233203d3e20323033303631.roa
Signing time: Fri 20 Dec 2024 15:23:30 +0000
ROA not before: Fri 20 Dec 2024 15:18:30 +0000
ROA not after: Fri 19 Dec 2025 15:23:30 +0000
asID: 203061
IP address blocks: 88.218.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:66:76:0f:ca:39:6f:c4:db:12:c1:df:dc:14:30:54:c6:19:9b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:30 2024 GMT
Not After : Dec 19 15:23:30 2025 GMT
Subject: CN=A72F8D2D506C5BB1FC93013CF9A853FCD62AFC5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:73:47:aa:b4:bd:60:0d:f7:b7:8f:70:aa:
55:17:eb:84:fa:00:be:94:e1:6f:bf:7c:17:9e:2c:
2e:02:40:7e:28:d4:e8:7e:74:29:f7:9c:ca:51:57:
1b:02:7f:10:41:ad:98:80:62:f5:28:71:c0:de:80:
44:b0:26:e7:3e:a6:b7:a1:3d:0a:72:4e:4e:f9:92:
78:7c:90:7e:87:a9:64:26:ed:9e:56:04:23:48:61:
1f:0d:1c:89:a5:df:07:00:ab:74:88:80:89:7f:ac:
fc:f9:27:c3:e7:5f:96:89:2f:6b:df:1b:4f:51:68:
79:24:16:b2:38:3e:45:0d:06:53:6c:23:c4:04:98:
5d:02:a8:e9:8c:5f:dd:49:09:81:9a:4b:1c:44:1b:
90:5c:3b:68:01:ee:a2:9d:44:d6:1b:4a:bf:43:c3:
23:4c:ea:bb:da:c1:61:2b:3e:5d:51:d1:67:68:4c:
e2:28:01:48:61:8a:81:dc:ed:d0:5c:b6:e9:f3:6c:
b2:10:6a:a3:53:7f:fd:24:34:9e:38:42:a9:89:a6:
74:56:81:44:17:3b:d9:7d:3f:f0:6e:86:4d:29:a4:
2e:20:55:db:23:e2:e1:fb:9f:63:ec:5a:20:c0:b1:
27:00:c0:5a:2a:29:93:b0:68:5c:63:d8:fc:47:ec:
de:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2F:8D:2D:50:6C:5B:B1:FC:93:01:3C:F9:A8:53:FC:D6:2A:FC:5B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38382e3231382e3136362e302f32332d3233203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.166.0/23
Signature Algorithm: sha256WithRSAEncryption
25:18:f1:3f:9c:d1:24:a6:5f:97:77:62:09:b5:f4:d0:56:45:
cd:18:d2:c1:ac:fe:fd:d9:90:3d:5c:e2:00:b2:92:77:56:ce:
f2:72:1d:db:9c:5c:80:31:77:92:da:87:0a:a0:ee:67:d0:99:
91:8d:74:c4:bd:f1:e4:c0:7a:8f:24:3e:41:f5:87:db:76:3a:
97:3e:43:cc:91:e5:6b:b0:a3:f1:a8:7e:85:a9:3f:b4:8b:e7:
64:99:31:0e:f9:25:8c:47:ea:e9:b3:4b:ce:ec:7d:9a:9a:7f:
20:5b:a5:b2:f5:29:55:cd:34:a7:50:6e:8c:59:e9:82:b8:78:
b4:0e:47:36:61:27:07:f8:02:2d:c5:8a:d9:73:b2:ba:54:66:
e7:49:e8:45:50:ac:cd:83:a5:fe:30:30:62:57:91:b9:2f:e5:
84:cf:24:58:d9:01:8f:24:fc:db:f6:a1:68:25:c0:08:c5:a8:
c7:a1:de:17:b3:ab:7c:74:a2:01:26:b7:16:4e:f6:fe:d7:20:
c3:54:f5:2e:c8:2e:e4:bb:9c:00:14:43:42:3e:37:5a:f5:51:
f6:8d:9b:7d:aa:4d:b7:b3:51:11:0e:cb:e5:5a:de:c0:ba:56:
18:43:c6:a2:81:76:51:c0:14:88:48:15:f9:31:47:f1:8a:a0:
c4:dd:5f:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:50:53 2025 by rpki-client