Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36362e302f32342d3332203d3e20313336373837.roa
File: 39312e3231342e36362e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: 8u7eHNX8oLlJlSPyWiz4kECGNutK8+m3ZKGVQEdsS0A=
Subject key identifier: 71:17:05:7F:54:F1:6E:EA:2C:88:81:74:20:46:AC:AF:1C:64:51:5F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3691E45563D232D0CD874952633488D2C2708D1F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36362e302f32342d3332203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:32 +0000
ROA not before: Fri 27 Dec 2024 11:42:32 +0000
ROA not after: Fri 26 Dec 2025 11:47:32 +0000
asID: 136787
IP address blocks: 91.214.66.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:91:e4:55:63:d2:32:d0:cd:87:49:52:63:34:88:d2:c2:70:8d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:32 2024 GMT
Not After : Dec 26 11:47:32 2025 GMT
Subject: CN=7117057F54F16EEA2C8881742046ACAF1C64515F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:8f:4e:82:ce:7a:77:6b:3b:ae:63:8c:f5:
29:5a:58:a8:c5:8e:50:1c:4f:82:4c:cd:67:92:6f:
3e:ac:b0:f4:23:e3:3f:ac:78:a5:4d:f7:8a:20:95:
0c:c2:ea:ed:9d:03:d6:67:2d:03:5c:dc:09:ff:e3:
cf:4f:d4:2c:2e:9b:63:24:0b:d9:b6:3d:68:d3:2f:
ec:74:38:61:e9:2c:6a:9c:f9:d5:d1:c3:31:99:22:
36:48:34:e1:a7:f6:a6:28:29:72:8c:9c:c2:43:1a:
8d:8f:c2:f3:f7:f0:a0:10:ca:75:1f:f9:76:58:86:
03:4b:76:4e:3b:15:8e:a5:fe:5b:10:1e:9e:d7:2f:
14:c7:60:4c:c6:06:b8:98:85:f6:da:fe:5c:50:1d:
a0:88:00:36:f7:e3:4e:d8:03:35:49:2c:cf:c8:9a:
8c:2c:8d:89:c8:a1:d9:e8:22:62:f6:71:15:b2:0f:
74:64:60:f1:0d:a6:fd:7d:be:7a:0a:24:be:a8:17:
c5:06:a9:fe:dc:71:27:45:10:e6:56:99:8c:c1:e2:
a6:36:f1:1d:d4:28:85:52:5d:b8:39:62:62:ff:96:
02:5c:cb:db:bf:1b:39:5a:81:14:7c:0d:f2:24:85:
ab:f3:ae:7b:20:24:4e:7d:69:a9:64:fe:1c:d3:24:
a6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:17:05:7F:54:F1:6E:EA:2C:88:81:74:20:46:AC:AF:1C:64:51:5F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36362e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.66.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:11:f1:40:11:88:88:55:84:ea:8e:4c:08:d7:df:11:be:45:
a5:02:4a:bf:cc:06:d6:97:f0:52:d6:23:6c:9b:8d:1e:40:e0:
f9:ec:d8:cb:9c:8b:36:8a:b3:d8:9f:e3:75:f2:d5:8c:e1:48:
f5:b2:e5:34:99:af:bd:1a:30:08:56:97:fc:cc:94:f5:ba:99:
0f:ac:e7:e1:ac:56:f0:f9:a8:e7:80:55:29:d7:86:46:c3:12:
a9:d5:77:e5:39:cb:66:68:e7:80:0f:b5:6d:c9:f1:1a:de:a8:
fa:41:fa:65:d2:a6:2c:0b:fb:2b:f2:3b:68:cf:4f:e3:e1:cc:
d3:17:c4:80:27:a0:0b:d6:60:bc:92:1b:e6:bc:27:e7:f8:aa:
3b:74:03:de:cc:f2:be:7c:e4:80:b5:a4:16:f3:cb:fb:4c:ec:
d2:44:08:49:32:12:60:31:73:22:60:f4:48:72:7e:cc:94:b1:
c6:4e:0a:da:86:8f:e4:d2:7d:ab:71:e0:c4:4f:7e:26:6e:85:
20:05:74:23:c6:59:9e:47:bb:d0:32:59:36:e8:d2:57:11:21:
f7:eb:06:f5:dd:10:36:78:0c:8a:a2:a5:5f:43:ee:4f:2c:8a:
02:a8:99:62:4d:c7:50:cf:65:2e:7c:46:4d:74:62:94:8c:e6:
b5:da:b4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:40:54 2025 by rpki-client