Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3234322e3234382e302f32342d3234203d3e20313336373837.roa
File: 39312e3234322e3234382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: KUdJb2FDr0qfUoLtcGW48ZTV1+LGRPsfW/B8M9De8DE=
Subject key identifier: A3:6F:23:64:C4:1A:44:78:D3:C8:07:44:8F:B7:80:49:4B:0A:3A:4A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6460DC98CA29622A9969412C3DD22E9162ABA82A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3234322e3234382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:48 +0000
ROA not before: Fri 27 Dec 2024 11:42:48 +0000
ROA not after: Fri 26 Dec 2025 11:47:48 +0000
asID: 136787
IP address blocks: 91.242.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:60:dc:98:ca:29:62:2a:99:69:41:2c:3d:d2:2e:91:62:ab:a8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:48 2024 GMT
Not After : Dec 26 11:47:48 2025 GMT
Subject: CN=A36F2364C41A4478D3C807448FB780494B0A3A4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0b:0f:01:06:f2:24:31:60:87:e8:e8:95:f6:
4f:30:54:53:ab:18:cb:b5:4c:d4:fa:6f:c9:9a:3b:
9a:07:e9:af:14:3c:7b:78:a8:0a:a2:73:aa:cf:db:
a2:56:e5:29:87:a1:ea:ca:66:d7:57:72:d4:83:cc:
13:2d:a0:80:2c:be:43:97:85:20:7e:5d:ac:76:4f:
b4:cb:63:8c:8e:7e:80:cc:a3:11:3b:a3:68:f9:af:
2b:3e:d7:8b:b4:57:12:bb:33:15:5c:cb:d7:a8:6b:
1b:cd:ee:04:68:f0:10:2b:eb:74:c1:71:c5:a9:ef:
50:c1:11:c2:d1:07:27:31:f5:91:56:e0:32:b2:43:
ba:61:57:b7:7b:9a:e1:a4:bd:93:36:cd:8f:68:65:
2d:82:50:f9:3b:61:66:6c:80:86:02:fc:83:4b:a8:
63:27:3a:fa:6f:19:55:90:4a:38:51:b1:a5:1e:c8:
fe:3a:b8:c4:fb:33:3c:0e:9a:93:97:15:c1:f2:62:
3c:ae:60:27:01:83:60:ae:52:66:51:bb:21:09:c3:
aa:15:27:28:1a:a7:f6:e6:7c:cd:f1:2c:88:90:d7:
c0:1f:11:15:ed:dc:3e:60:bc:cb:bd:c8:a2:03:2e:
c6:ee:a0:d6:77:38:78:bc:f8:c0:89:d3:ae:1d:5a:
b6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6F:23:64:C4:1A:44:78:D3:C8:07:44:8F:B7:80:49:4B:0A:3A:4A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3234322e3234382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:5a:d5:62:91:bb:54:cc:e7:6d:b6:c3:6e:4b:aa:d6:eb:3c:
49:93:71:7a:c8:a3:fc:b6:38:93:01:bb:7b:a9:cd:8e:09:ba:
ba:6a:16:b9:4e:9e:54:a9:41:43:7a:22:dd:e2:56:0c:ca:1c:
ca:18:1a:f1:4f:10:32:0d:cb:dd:0d:ad:ed:7e:ee:fd:ee:6c:
a2:a3:d8:7a:91:3a:b5:ff:77:ed:39:e0:8f:6e:b0:90:aa:37:
06:7c:ce:f3:cc:58:9b:41:dd:20:51:6a:a0:61:37:78:30:1c:
38:63:1e:bf:5b:10:65:08:e0:c5:51:e6:93:58:72:56:4b:8f:
f4:b8:90:dd:5f:4a:d6:47:a1:da:e1:3b:43:a1:97:90:b0:64:
12:1c:8b:84:95:89:df:53:3b:c8:6e:cd:91:38:f3:2f:9a:13:
8d:7c:63:c3:bb:87:ab:b4:ed:c0:d0:c2:41:c0:94:d9:cd:96:
a1:16:42:45:7a:c4:f7:bc:fc:3e:da:81:c1:ce:d4:62:9a:6d:
75:d9:a0:56:75:73:91:c6:c5:98:37:d4:85:77:3c:c2:d8:59:
40:48:1a:14:0a:eb:71:03:e2:a0:bc:90:cf:46:c2:30:0d:d2:
7a:66:b3:ee:89:60:bb:73:c9:2b:d4:be:cd:7f:82:b4:83:23:
11:a6:41:03
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:39 2025 by rpki-client