Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35352e302f32342d3234203d3e20313336373837.roa
File: 39322e3131382e35352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: mpBwNOEEET7QNLNEjvxtV12MTAz1Btl6zmk0I1gb41E=
Subject key identifier: 33:F4:80:AC:AF:A8:91:23:86:2D:6D:EB:1B:BD:AE:8B:15:24:30:96
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5BB2E2D24F5D50AC27F1160D7678ED5772942F44
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:37 +0000
ROA not before: Fri 20 Dec 2024 15:18:37 +0000
ROA not after: Fri 19 Dec 2025 15:23:37 +0000
asID: 136787
IP address blocks: 92.118.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b2:e2:d2:4f:5d:50:ac:27:f1:16:0d:76:78:ed:57:72:94:2f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:37 2024 GMT
Not After : Dec 19 15:23:37 2025 GMT
Subject: CN=33F480ACAFA89123862D6DEB1BBDAE8B15243096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3b:7e:cd:fb:93:b4:85:3b:12:3d:b0:46:0d:
74:ed:06:55:bb:bc:4d:8f:64:9c:c4:90:6e:75:67:
30:dd:6b:8c:24:00:5e:d0:da:6a:12:58:7c:74:00:
e4:b1:b5:01:89:89:dc:11:a8:ea:c0:b9:6d:d0:c5:
2a:8e:87:32:36:49:ee:15:f1:1c:fa:af:cb:04:e1:
b1:b8:8c:ac:e0:9c:44:77:28:f5:c1:09:ef:d2:b8:
06:d3:1c:a8:9d:0b:a9:e9:d0:77:c3:84:7e:f7:a6:
48:95:ae:76:df:6d:a8:25:cd:c3:2c:66:32:a5:43:
53:33:fc:8e:4f:13:0b:bd:8f:e1:08:9f:ab:8f:cf:
22:5f:3c:e0:d8:fb:5f:58:f1:84:d6:4d:db:3f:6e:
9d:66:d6:05:a1:09:06:13:b9:49:38:09:cf:0b:83:
67:66:e2:0c:93:2d:c3:6f:14:86:cd:42:31:3e:ad:
26:78:62:dd:5e:f9:97:45:5d:f0:fc:44:a8:14:ba:
b1:a2:03:27:f2:44:7c:6e:21:2c:5c:ad:25:1e:b6:
fc:7c:ac:7a:3f:29:68:cc:25:ea:21:1e:98:46:df:
b1:08:bf:34:82:b6:b8:db:ff:59:f0:85:79:75:4f:
ab:9f:4a:5a:b6:3f:62:65:1b:97:d2:43:ae:47:d4:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F4:80:AC:AF:A8:91:23:86:2D:6D:EB:1B:BD:AE:8B:15:24:30:96
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.55.0/24
Signature Algorithm: sha256WithRSAEncryption
55:08:83:a4:8c:6b:83:70:97:43:bb:2f:40:94:46:5c:ee:30:
65:97:f1:a6:e3:95:57:1f:4d:96:e6:b8:d8:c9:e3:d8:26:76:
64:bc:fb:3f:e3:1e:80:1a:08:44:e7:91:45:23:e4:6f:4c:69:
eb:cd:52:3a:b5:22:71:ee:ae:4f:2f:20:d4:cb:00:6d:40:4d:
9c:33:47:12:77:1a:48:0e:be:dd:c4:6c:fa:73:87:61:68:86:
0a:5c:5b:22:a4:e4:9a:77:93:03:1b:24:35:d5:33:04:49:97:
2f:7f:e1:b6:03:17:7a:6b:cf:76:c8:cb:06:8d:b0:9c:87:67:
56:1c:47:7e:6d:dc:41:f2:73:50:ba:e2:19:e9:3d:44:6b:5c:
33:27:36:61:bf:d2:1c:b5:e2:e6:c0:f2:bf:31:e6:45:59:fe:
cd:46:e9:44:f8:2b:64:d2:1b:48:9f:9f:40:20:39:00:fa:89:
b8:5e:90:09:dc:69:d6:0f:c0:5c:e0:ef:e5:61:6c:b3:53:36:
ca:e0:ad:6b:51:6b:d5:74:7a:77:72:ad:3b:91:f5:ee:7f:88:
ba:0a:30:82:96:51:cc:dd:55:85:6a:10:a2:05:4a:83:aa:f1:
0a:73:55:37:96:32:4b:2b:34:87:91:39:30:61:17:2f:52:f9:
7c:2b:83:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:31:40 2025 by rpki-client