Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232312e302f32342d3234203d3e20313336373837.roa
File: 39312e3139362e3232312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: C/EF6I3QWXWArjwLi63RovBVjvtUMQ0WQ73LEIL82c0=
Subject key identifier: 51:6A:F0:70:50:28:19:8E:A1:35:C2:33:38:41:AB:29:01:65:AF:6F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0FF8ADE517F4779C9F058C3CC146FD370DFA6926
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:45 +0000
ROA not before: Fri 27 Dec 2024 11:42:45 +0000
ROA not after: Fri 26 Dec 2025 11:47:45 +0000
asID: 136787
IP address blocks: 91.196.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:f8:ad:e5:17:f4:77:9c:9f:05:8c:3c:c1:46:fd:37:0d:fa:69:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:45 2024 GMT
Not After : Dec 26 11:47:45 2025 GMT
Subject: CN=516AF0705028198EA135C2333841AB290165AF6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cf:99:a5:e3:2c:3b:0c:68:9f:ab:91:98:59:
b9:b6:d8:d0:54:c9:dc:32:cd:ee:74:79:e4:7d:d8:
f5:0b:c6:49:61:b1:22:a6:ec:66:a7:5f:3f:ca:e9:
fc:1d:1a:ef:45:34:c5:7c:28:78:66:4b:5c:7f:83:
5e:8c:10:4a:23:da:60:c1:02:76:a4:2f:de:54:90:
49:37:23:ef:1f:25:7d:93:69:4c:c9:b8:12:9a:62:
b8:30:16:5a:71:f0:9d:74:45:59:e4:7c:7e:1c:bf:
84:e4:1f:07:f5:f5:85:d9:fc:3a:3a:87:47:2b:1e:
01:01:26:59:01:e6:4a:0c:86:a6:07:63:e3:28:26:
b5:1a:ec:ba:9f:c7:70:c7:51:f6:62:7b:29:b0:99:
4d:27:8e:0a:d9:4b:d8:40:85:b2:88:af:d3:48:e9:
00:db:c9:0e:d2:67:60:58:91:2e:89:52:d1:5a:8f:
43:3a:c2:85:46:a9:36:3d:3e:8a:a3:95:0d:7b:bd:
fa:00:7b:f0:fc:54:ee:a8:ba:05:0e:7d:48:4f:5f:
a3:0e:33:56:91:53:44:01:f3:20:c8:c9:16:e2:51:
f2:36:71:d6:3e:8f:fa:0c:de:92:c5:f2:6e:92:77:
d4:11:43:3b:a7:8a:80:51:d5:47:73:1b:c4:3d:61:
4d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6A:F0:70:50:28:19:8E:A1:35:C2:33:38:41:AB:29:01:65:AF:6F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.221.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:cc:71:2b:89:08:e2:3f:61:fa:a2:59:80:69:48:23:6e:a6:
fc:25:b0:e2:f3:79:d7:10:3b:9c:e1:23:45:cf:45:38:f8:e6:
3c:db:44:19:84:5c:7b:cc:ed:18:3e:47:f8:9c:fb:46:06:e4:
f1:bc:e2:df:49:62:13:9a:c8:9b:5d:c2:fa:03:e4:06:ee:8d:
97:83:83:94:08:ff:c3:23:bb:0a:49:70:48:6b:3a:9e:ca:a8:
19:e9:f8:0e:3c:9f:b8:52:bd:db:6c:ad:7f:d5:79:c9:23:64:
07:b2:ef:91:fc:49:e9:08:95:b8:10:da:ae:92:b6:e0:49:db:
f2:a1:56:0d:ae:2f:af:ae:2d:80:38:ba:97:d6:c5:ba:d7:33:
5f:50:35:fd:25:76:40:7c:8e:35:f7:a0:4c:b2:b0:c7:5a:cc:
59:ce:7c:36:e7:e5:ca:f2:68:dc:ef:9b:72:b2:9e:c7:8e:58:
1a:7d:39:e9:38:ed:68:99:86:4f:0a:1a:f5:9d:ca:ff:1a:76:
b4:f4:47:e7:13:82:81:54:04:05:9c:bb:f5:40:63:f9:74:8f:
84:06:d9:d8:6e:7c:e5:f8:0a:ec:b7:b6:c8:c2:e3:b1:a7:ac:
a9:71:f1:60:f6:52:1b:ef:8f:7a:3e:96:5e:72:af:fc:df:31:
a3:d2:e0:60
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 10 01:32:46 2025 by rpki-client