Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3133322e322e302f32342d3234203d3e20313336373837.roa
File: 39312e3133322e322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ZM+WzR/7TYvM9jn6uGUMjU2HInUnHSZhZbPpnJNgmxk=
Subject key identifier: 88:94:CE:C5:A8:27:2F:36:64:68:9A:DE:44:FE:C9:F7:EA:F4:17:9D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 417262381FF7D8D412B5C8439C6AEA54A3969A44
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3133322e322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:33 +0000
ROA not before: Fri 27 Dec 2024 11:42:33 +0000
ROA not after: Fri 26 Dec 2025 11:47:33 +0000
asID: 136787
IP address blocks: 91.132.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:72:62:38:1f:f7:d8:d4:12:b5:c8:43:9c:6a:ea:54:a3:96:9a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:33 2024 GMT
Not After : Dec 26 11:47:33 2025 GMT
Subject: CN=8894CEC5A8272F3664689ADE44FEC9F7EAF4179D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:63:db:f5:b1:b1:69:65:a7:b7:44:13:00:
65:de:4f:f7:ef:f9:ee:d3:f5:5a:3f:b7:2c:af:4e:
e1:98:fd:77:79:d8:a0:f1:d4:57:92:5a:b3:35:a2:
82:9a:1a:75:da:2d:5b:a9:7d:6f:ff:e5:69:23:b0:
e4:58:2f:5e:18:ab:04:ea:84:c4:19:a5:f0:a4:42:
fd:89:f0:0f:74:98:92:15:a3:38:16:5c:a0:8a:64:
1a:a5:19:33:b2:d7:68:d7:60:87:6b:22:5e:67:ab:
96:d0:a6:d4:1e:4c:67:ce:a6:8d:0e:b3:bf:c7:9d:
b8:5e:82:53:ba:5b:3c:db:31:c0:d2:63:88:d3:7d:
c8:24:86:5f:2b:9d:cc:0b:2f:71:51:67:48:f4:07:
8c:39:b1:c7:7f:5c:11:8e:31:ee:0d:d0:ed:db:8f:
2d:56:60:0e:00:f1:d9:55:c6:9d:b7:5a:b2:43:d6:
6d:d7:9d:d9:8d:a1:f7:8a:09:fc:46:04:b1:f4:4b:
f2:7c:42:d5:2f:99:b8:03:4a:cc:1b:18:ba:f2:8e:
f8:6c:6c:ac:ac:73:0e:0b:31:94:ff:4c:27:1d:75:
68:e3:17:3e:70:d5:59:9f:f4:7f:b9:34:c3:68:2a:
b8:9f:ba:47:1b:b2:ec:74:eb:cd:d5:aa:37:9f:42:
e3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:94:CE:C5:A8:27:2F:36:64:68:9A:DE:44:FE:C9:F7:EA:F4:17:9D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3133322e322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.2.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f9:09:00:0e:69:ae:b5:ad:bc:4e:0f:41:3b:f7:b7:e7:e3:
08:5d:fd:c6:6d:f8:d2:dd:7f:7b:91:9c:09:ef:f6:99:f8:81:
29:5f:94:5c:56:fa:f4:53:bb:0b:ba:23:f2:e6:5d:1a:3d:a1:
4b:58:e0:51:e7:bd:a1:d2:26:1c:8e:d6:50:9d:2b:20:31:0f:
a2:46:a5:3d:45:a9:ea:84:c5:b2:c3:ae:1d:8a:f7:85:32:6a:
93:d6:1a:a7:8b:f5:00:f2:a7:eb:de:39:b3:8b:69:fc:ea:07:
f8:40:dc:8f:17:7a:6b:b7:8f:e4:31:87:00:e8:b8:d7:bb:84:
30:86:de:bb:39:57:98:f7:85:68:87:a3:80:50:f0:ad:c3:11:
6d:ff:43:8a:1d:65:10:30:0b:4a:07:cb:32:97:6b:10:d1:bc:
39:9c:8c:43:ec:1f:3a:7e:73:d2:99:31:0e:5c:4a:4f:27:0c:
f1:a9:bb:d6:4c:7f:56:57:97:74:9d:b8:da:cd:b8:8c:ab:62:
f8:a6:d0:26:6a:41:27:20:f2:51:1d:be:a2:73:75:9c:44:a0:
0d:4c:98:3a:ff:a4:bf:00:5d:82:7b:4f:14:5e:18:fe:dd:df:
b6:dd:bb:c9:38:85:bf:f7:ad:5e:0a:2b:ea:4e:b2:9b:2c:22:
3f:cf:a8:68
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUQXJiOB/32NQStchDnGrqVKOWmkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMzNaFw0yNTEyMjYxMTQ3MzNaMDMxMTAvBgNV
BAMTKDg4OTRDRUM1QTgyNzJGMzY2NDY4OUFERTQ0RkVDOUY3RUFGNDE3OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI2WPb9bGxaWWnt0QTAGXeT/fv
+e7T9Vo/tyyvTuGY/Xd52KDx1FeSWrM1ooKaGnXaLVupfW//5WkjsORYL14YqwTq
hMQZpfCkQv2J8A90mJIVozgWXKCKZBqlGTOy12jXYIdrIl5nq5bQptQeTGfOpo0O
s7/HnbheglO6WzzbMcDSY4jTfcgkhl8rncwLL3FRZ0j0B4w5scd/XBGOMe4N0O3b
jy1WYA4A8dlVxp23WrJD1m3XndmNofeKCfxGBLH0S/J8QtUvmbgDSswbGLryjvhs
bKyscw4LMZT/TCcddWjjFz5w1Vmf9H+5NMNoKrifukcbsux0683VqjefQuPxAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUiJTOxagnLzZkaJreRP7J9+r0F50wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMTMzMzIy
ZTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAW4QCMA0GCSqGSIb3DQEBCwUAA4IBAQBy+QkADmmuta28Tg9BO/e35+MIXf3G
bfjS3X97kZwJ7/aZ+IEpX5RcVvr0U7sLuiPy5l0aPaFLWOBR572h0iYcjtZQnSsg
MQ+iRqU9RanqhMWyw64diveFMmqT1hqni/UA8qfr3jmzi2n86gf4QNyPF3prt4/k
MYcA6LjXu4Qwht67OVeY94Voh6OAUPCtwxFt/0OKHWUQMAtKB8syl2sQ0bw5nIxD
7B86fnPSmTEOXEpPJwzxqbvWTH9WV5d0nbjazbiMq2L4ptAmakEnIPJRHb6ic3Wc
RKANTJg6/6S/AF2Ce08UXhj+3d+23bvJOIW/961eCivqTrKbLCI/z6ho
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:47:13 2025 by rpki-client