Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35322e302f32342d3234203d3e20313336373837.roa
File: 39322e3131382e35322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: wdrMf5715yggKaXlK3yE2XNeu/kes28nUd2Y6oF4ysY=
Subject key identifier: 39:76:54:03:A3:C1:96:6E:B3:F8:82:D8:7A:1B:90:91:63:10:D8:EC
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7628AA9B4872F480BD6E20FE3BCA1B140BD17ACF
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:31 +0000
ROA not before: Fri 20 Dec 2024 15:18:31 +0000
ROA not after: Fri 19 Dec 2025 15:23:31 +0000
asID: 136787
IP address blocks: 92.118.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:28:aa:9b:48:72:f4:80:bd:6e:20:fe:3b:ca:1b:14:0b:d1:7a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:31 2024 GMT
Not After : Dec 19 15:23:31 2025 GMT
Subject: CN=39765403A3C1966EB3F882D87A1B90916310D8EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:3a:b1:0a:0b:19:45:be:9f:da:fe:3f:c5:
ec:4e:02:5a:5b:cb:81:29:5f:ab:a4:dd:6d:e1:56:
8b:bd:85:e7:15:fd:27:8c:16:e1:0e:54:07:5a:9e:
ff:40:b5:99:c5:3e:dc:b9:be:88:4a:46:36:ed:f7:
de:a1:38:dd:d8:4c:b1:e1:aa:b1:e4:c7:4c:e0:b0:
2f:20:7b:f6:aa:67:46:3e:11:a3:22:c5:1d:ad:b9:
53:14:a1:a6:43:8c:dd:d9:e1:06:68:62:de:4a:35:
2a:d3:53:ca:32:53:c9:cd:be:64:48:d1:5e:0d:16:
63:a3:af:1d:4b:c9:62:8f:1d:b7:6e:1f:e9:98:a4:
61:d5:c0:05:24:44:2e:99:0c:ed:9e:20:f4:6a:40:
4a:f7:d7:17:93:ae:80:52:63:62:64:d9:d8:7e:d7:
9b:5d:bb:94:9c:35:8f:80:ef:23:a6:9d:2f:0a:41:
47:d1:6d:5e:01:ce:2a:89:36:2a:0c:9a:de:41:30:
54:b7:4b:52:7d:80:5d:c4:84:5b:86:8b:0d:a2:bc:
4f:39:2d:56:df:58:21:50:62:57:c4:0d:dd:2a:f5:
ff:08:d2:cc:1b:10:22:4e:88:e6:a6:c3:c5:21:de:
89:96:8e:18:59:ab:c7:15:9d:17:f9:eb:fc:87:70:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:76:54:03:A3:C1:96:6E:B3:F8:82:D8:7A:1B:90:91:63:10:D8:EC
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.52.0/24
Signature Algorithm: sha256WithRSAEncryption
62:4b:f6:3c:ff:98:6a:5c:93:08:70:f9:f9:6b:b5:51:16:7a:
b1:e5:42:96:f1:5f:12:b8:2e:09:f7:c0:02:5b:91:16:ae:c7:
ef:da:7b:b6:df:d8:03:54:2c:87:46:8f:81:a2:6d:90:16:c7:
db:2b:71:6b:74:3b:79:34:6d:d7:1e:9f:bd:90:45:94:23:60:
e5:47:ac:dd:5a:ad:1d:0c:2b:e5:ac:b5:1f:f2:26:89:83:c2:
0a:cd:55:05:91:34:bb:b3:df:a1:ad:cc:35:9b:19:cb:43:d4:
20:aa:60:d0:eb:62:71:97:50:9d:21:57:f0:e7:ad:a8:b3:bf:
ab:4c:4b:c0:6a:b3:9b:d2:56:32:44:cf:67:42:90:71:79:ce:
df:e6:39:42:12:db:72:65:07:b1:3c:88:13:57:7b:9a:3a:fa:
6a:c5:ca:87:16:c7:ae:b7:66:fd:51:8c:af:1c:85:08:36:1a:
fc:64:a2:49:1e:5d:06:5e:e5:f7:dd:0a:11:66:b7:20:54:03:
9e:9e:74:c4:b6:14:94:a0:1f:1d:44:af:ea:92:4f:5d:22:be:
2c:7f:e4:ea:3e:b5:5a:e8:ef:77:f1:86:93:e5:10:b8:b1:fe:
8e:62:4f:60:bf:44:94:5a:2e:a3:ad:12:49:62:95:fb:7a:10:
23:b7:65:81
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUdiiqm0hy9IC9biD+O8obFAvRes8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjAxNTE4MzFaFw0yNTEyMTkxNTIzMzFaMDMxMTAvBgNV
BAMTKDM5NzY1NDAzQTNDMTk2NkVCM0Y4ODJEODdBMUI5MDkxNjMxMEQ4RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQjqxCgsZRb6f2v4/xexOAlpb
y4EpX6uk3W3hVou9hecV/SeMFuEOVAdanv9AtZnFPty5vohKRjbt996hON3YTLHh
qrHkx0zgsC8ge/aqZ0Y+EaMixR2tuVMUoaZDjN3Z4QZoYt5KNSrTU8oyU8nNvmRI
0V4NFmOjrx1LyWKPHbduH+mYpGHVwAUkRC6ZDO2eIPRqQEr31xeTroBSY2Jk2dh+
15tdu5ScNY+A7yOmnS8KQUfRbV4BziqJNioMmt5BMFS3S1J9gF3EhFuGiw2ivE85
LVbfWCFQYlfEDd0q9f8I0swbECJOiOamw8Uh3omWjhhZq8cVnRf56/yHcMl5AgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUOXZUA6PBlm6z+ILYehuQkWMQ2OwwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMyMmUzMTMxMzgy
ZTM1MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABcdjQwDQYJKoZIhvcNAQELBQADggEBAGJL9jz/mGpckwhw+flrtVEWerHl
QpbxXxK4Lgn3wAJbkRaux+/ae7bf2ANULIdGj4GibZAWx9srcWt0O3k0bdcen72Q
RZQjYOVHrN1arR0MK+WstR/yJomDwgrNVQWRNLuz36GtzDWbGctD1CCqYNDrYnGX
UJ0hV/Dnraizv6tMS8Bqs5vSVjJEz2dCkHF5zt/mOUIS23JlB7E8iBNXe5o6+mrF
yocWx663Zv1RjK8chQg2GvxkokkeXQZe5ffdChFmtyBUA56edMS2FJSgHx1Er+qS
T10ivix/5Oo+tVro73fxhpPlELix/o5iT2C/RJRaLqOtEklilft6ECO3ZYE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:22:48 2025 by rpki-client