Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36342e302f32342d3234203d3e20313336373837.roa
File: 39312e3231342e36342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: LPNhoJBf28sSBLysB0e4NZE+tBgEIgie+7HKBcOUNeM=
Subject key identifier: 23:2F:4E:47:C0:73:7B:E3:56:F6:62:26:4C:45:58:9D:C8:66:C1:8F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7B1FB570776AB4C373DBD4397947F06CF9336746
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:35 +0000
ROA not before: Fri 27 Dec 2024 11:42:35 +0000
ROA not after: Fri 26 Dec 2025 11:47:35 +0000
asID: 136787
IP address blocks: 91.214.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:1f:b5:70:77:6a:b4:c3:73:db:d4:39:79:47:f0:6c:f9:33:67:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:35 2024 GMT
Not After : Dec 26 11:47:35 2025 GMT
Subject: CN=232F4E47C0737BE356F662264C45589DC866C18F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:40:a2:2a:fb:07:7b:31:00:18:2c:98:a1:
95:51:51:81:2e:0b:f6:de:0e:41:86:ed:8f:b3:5a:
32:9c:d8:44:80:61:88:7a:08:a9:3a:bc:76:b7:55:
b3:df:3b:d6:00:65:80:ac:e3:69:36:83:53:24:5d:
c2:13:c7:af:c5:19:0b:38:c7:53:92:e1:af:40:86:
8c:c6:4e:cf:17:d8:1a:ee:bb:2f:66:06:c3:2d:84:
17:5c:92:c7:55:eb:14:6b:13:d0:6f:54:8a:b7:ea:
b9:73:8d:09:39:cb:26:93:ce:e6:67:af:e9:af:0f:
36:7f:d1:f8:04:b1:eb:c3:a2:19:3b:ac:d1:d7:4a:
76:e2:d6:cd:16:96:a2:36:ec:41:99:4a:24:67:cc:
68:17:3e:1f:87:cf:bc:19:cd:14:25:39:fb:87:ea:
4c:ac:76:00:5b:32:b4:d9:35:4a:6d:cb:52:63:c0:
f6:41:55:1a:e9:f2:1d:5b:90:f4:50:2f:7a:92:6f:
73:7e:1b:55:03:e3:4d:e4:d6:ab:f0:93:ab:db:23:
4b:dc:6d:f9:34:80:86:98:d0:e4:91:73:80:63:0b:
68:55:67:d6:36:b0:a2:48:05:a9:a9:c6:30:5d:e6:
ca:28:39:10:77:62:30:80:15:f4:12:23:74:24:22:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2F:4E:47:C0:73:7B:E3:56:F6:62:26:4C:45:58:9D:C8:66:C1:8F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.64.0/24
Signature Algorithm: sha256WithRSAEncryption
45:23:20:8b:10:6c:e2:54:70:64:47:dd:be:45:cc:2d:34:6c:
70:94:d9:6d:f6:51:dc:6c:28:6f:44:45:07:e3:80:e6:03:3e:
3d:58:05:1a:5b:e0:0d:fe:82:98:ed:62:98:7b:4c:c4:69:80:
44:5b:8e:6c:6b:ca:09:7d:ef:af:91:c7:e0:62:07:5c:55:3d:
77:ff:7b:ef:14:40:a6:d3:0b:30:8d:9d:3a:fb:12:fc:c0:13:
b9:d1:81:e4:09:41:19:32:02:03:62:89:d6:d0:d0:de:0a:e6:
b2:ee:ac:ea:bd:f1:65:70:c0:cf:3a:aa:94:fa:f7:8c:2d:94:
52:c4:48:01:70:5f:18:c0:30:f1:a4:40:8d:3a:a8:9a:ba:8a:
15:b7:a5:94:c8:f4:81:43:5c:77:33:5e:44:4e:52:fa:47:65:
1e:68:e2:f8:b4:3f:fa:21:0c:1e:47:e1:07:d6:bd:25:b5:d7:
54:71:85:42:4a:7b:c9:a7:18:e5:79:ed:2f:fc:91:6d:9a:42:
e0:4e:f1:f3:3d:69:2a:a3:e6:cf:e6:25:c1:90:17:d3:ec:93:
25:b5:95:f0:3b:7d:2b:ab:c6:31:59:35:4a:91:57:c7:d3:c6:
6d:f0:15:95:99:ff:32:97:97:ae:4c:ff:72:cd:4e:34:0d:11:
cf:1f:8e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:55:08 2025 by rpki-client