Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e36392e302f32342d3234203d3e20313336373837.roa
File: 39312e3139362e36392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Kb6iwr0qHVss/akP/KqGimJkhcNstG8N1omxElUa+rE=
Subject key identifier: 2F:6B:5F:6F:64:A4:30:89:96:EA:83:88:61:AA:DF:EE:32:D0:49:17
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6A63A9640295C8AD335D38304458F65ADF39623F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e36392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:41 +0000
ROA not before: Fri 20 Dec 2024 15:18:41 +0000
ROA not after: Fri 19 Dec 2025 15:23:41 +0000
asID: 136787
IP address blocks: 91.196.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:63:a9:64:02:95:c8:ad:33:5d:38:30:44:58:f6:5a:df:39:62:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:41 2024 GMT
Not After : Dec 19 15:23:41 2025 GMT
Subject: CN=2F6B5F6F64A4308996EA838861AADFEE32D04917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:44:38:7b:e3:d1:ed:ad:b8:7b:94:37:60:2b:
fb:f6:05:0d:53:99:01:b3:c8:1f:af:22:1e:26:62:
99:67:23:b8:48:9a:fc:a2:da:cd:74:24:83:eb:9f:
e0:4f:b8:aa:07:9f:73:53:56:80:26:2e:e3:70:0a:
df:20:78:d6:f1:73:7c:b0:53:dc:68:32:66:65:36:
00:3e:9b:9f:d4:9b:f9:67:86:73:b7:1d:01:f4:fe:
74:fd:16:cc:66:0d:0d:f7:8e:1c:4c:75:9b:d9:1a:
58:49:5a:fd:8c:b1:27:7d:47:b9:c6:72:0e:c9:09:
16:16:c7:8e:62:82:7c:96:45:17:16:3e:d3:7c:3c:
6c:a9:33:40:f8:b5:53:30:2f:6a:e4:17:b7:07:1f:
5a:e8:ad:1c:d6:12:f8:04:c4:2f:99:4c:b2:1c:fd:
31:10:ce:d4:b2:de:df:c5:13:5f:d9:5a:20:b2:ea:
77:e5:92:f5:74:a9:9d:1f:5c:11:d1:48:10:51:e4:
12:76:9c:2a:0c:3f:ef:f1:37:4f:25:41:9c:9c:26:
76:06:d8:94:6e:48:03:09:82:29:9c:86:03:e7:6d:
a7:8e:f4:f3:4f:9c:fd:0e:37:54:c0:43:65:7f:6d:
93:ff:ed:77:4d:14:d2:9e:04:f2:8c:e8:49:30:4e:
29:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6B:5F:6F:64:A4:30:89:96:EA:83:88:61:AA:DF:EE:32:D0:49:17
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e36392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.69.0/24
Signature Algorithm: sha256WithRSAEncryption
73:24:77:40:f1:6a:82:0d:eb:eb:81:d0:d8:37:32:fe:33:3f:
62:79:b9:0d:04:93:05:7b:ef:8c:1a:b8:96:16:c1:33:5b:46:
b7:32:47:d9:e6:96:25:11:6b:4b:40:c9:5e:0c:32:94:1a:4c:
a0:4e:8d:32:08:b8:aa:62:bb:5e:a6:04:31:db:e9:4c:27:5a:
71:d7:c7:52:c4:d5:8d:b5:50:39:cc:e9:9d:35:c7:83:59:b3:
ce:cb:e1:11:70:49:c1:03:8a:4c:3d:84:f3:ca:df:be:19:2c:
5a:68:e9:e1:ca:e2:ab:fb:de:5f:2a:e2:5f:d9:b6:dc:cc:47:
a4:50:1c:95:84:58:01:6f:18:83:48:0a:b1:04:1f:e6:8f:49:
ff:0d:d6:3e:d5:14:0e:fa:f5:ad:45:96:78:5c:b5:2b:43:9c:
83:51:60:56:97:4f:21:36:45:e6:df:6d:f9:14:b5:25:52:25:
16:30:56:03:3c:5a:43:c3:32:49:61:16:ea:78:23:31:a9:62:
28:a6:87:59:ec:c7:15:e6:02:a3:55:ab:7d:0f:06:e1:2f:42:
d6:c7:1f:8a:64:f7:0a:75:b8:09:e7:83:0b:ad:9f:e3:80:bf:
24:e2:82:93:c9:78:53:70:2a:14:1c:b9:5b:42:1c:af:f0:09:
a8:60:e5:2c
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUamOpZAKVyK0zXTgwRFj2Wt85Yj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjAxNTE4NDFaFw0yNTEyMTkxNTIzNDFaMDMxMTAvBgNV
BAMTKDJGNkI1RjZGNjRBNDMwODk5NkVBODM4ODYxQUFERkVFMzJEMDQ5MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWRDh749Htrbh7lDdgK/v2BQ1T
mQGzyB+vIh4mYplnI7hImvyi2s10JIPrn+BPuKoHn3NTVoAmLuNwCt8geNbxc3yw
U9xoMmZlNgA+m5/Um/lnhnO3HQH0/nT9FsxmDQ33jhxMdZvZGlhJWv2MsSd9R7nG
cg7JCRYWx45ignyWRRcWPtN8PGypM0D4tVMwL2rkF7cHH1rorRzWEvgExC+ZTLIc
/TEQztSy3t/FE1/ZWiCy6nflkvV0qZ0fXBHRSBBR5BJ2nCoMP+/xN08lQZycJnYG
2JRuSAMJgimchgPnbaeO9PNPnP0ON1TAQ2V/bZP/7XdNFNKeBPKM6EkwTil1AgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUL2tfb2SkMImW6oOIYarf7jLQSRcwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMTM5MzYy
ZTM2MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABbxEUwDQYJKoZIhvcNAQELBQADggEBAHMkd0DxaoIN6+uB0Ng3Mv4zP2J5
uQ0EkwV774wauJYWwTNbRrcyR9nmliURa0tAyV4MMpQaTKBOjTIIuKpiu16mBDHb
6UwnWnHXx1LE1Y21UDnM6Z01x4NZs87L4RFwScEDikw9hPPK374ZLFpo6eHK4qv7
3l8q4l/ZttzMR6RQHJWEWAFvGINICrEEH+aPSf8N1j7VFA769a1FlnhctStDnINR
YFaXTyE2RebfbfkUtSVSJRYwVgM8WkPDMklhFup4IzGpYiimh1nsxxXmAqNVq30P
BuEvQtbHH4pk9wp1uAnngwutn+OAvyTigpPJeFNwKhQcuVtCHK/wCahg5Sw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:51:43 2025 by rpki-client