Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36312e302f32342d3234203d3e203632323430.roa
File: 39322e3131382e36312e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: UlEZ5j/tRiDcnB0DYo6/0SkVLbCUZ0sU21ZWCXny+b8=
Subject key identifier: 10:0E:6A:40:FD:8B:B4:F3:42:1A:59:5C:1C:C7:A3:D2:4A:73:9F:34
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4E896915B8F0D6584D1E97D7E9EF3DADEA158A82
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36312e302f32342d3234203d3e203632323430.roa
Signing time: Fri 27 Dec 2024 11:47:38 +0000
ROA not before: Fri 27 Dec 2024 11:42:38 +0000
ROA not after: Fri 26 Dec 2025 11:47:38 +0000
asID: 62240
IP address blocks: 92.118.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:89:69:15:b8:f0:d6:58:4d:1e:97:d7:e9:ef:3d:ad:ea:15:8a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:38 2024 GMT
Not After : Dec 26 11:47:38 2025 GMT
Subject: CN=100E6A40FD8BB4F3421A595C1CC7A3D24A739F34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:1e:79:c5:d3:63:55:0a:53:e8:91:c2:b9:
d3:37:7f:3d:71:ba:f8:6b:73:20:a7:c3:c1:41:31:
e9:96:c1:72:55:ae:97:16:6e:8c:da:f8:24:10:8c:
4e:9a:bd:8d:c3:a4:b0:d1:b6:2d:a7:76:c2:b8:9a:
b9:06:99:4d:5a:cb:a3:1a:9b:4e:44:c4:14:5a:ff:
da:f4:7b:33:6f:43:72:25:39:79:fb:ab:34:ae:14:
6f:0b:ac:ae:b5:8d:97:21:e1:c8:2e:85:92:da:35:
a4:11:13:82:23:69:e8:a5:b9:2d:23:14:95:10:b2:
62:c0:37:43:cf:0f:3c:af:b7:b7:fd:35:44:ba:f0:
ea:75:07:d0:4a:27:95:4d:9e:60:33:9e:b6:01:92:
ab:43:f4:ee:d0:e1:69:15:c0:c2:76:52:af:69:ff:
f5:26:a1:08:4a:bc:c8:fb:45:d9:fc:17:6c:17:bc:
cd:08:4f:3c:83:a7:80:a0:36:11:8e:f0:0e:8a:57:
3e:a3:1f:bb:b6:8a:05:6b:a2:30:cf:c9:87:84:f4:
a8:85:37:bc:1e:5a:0b:bf:7d:48:d4:68:f8:92:90:
0c:f0:4b:e3:c4:87:13:f8:6b:ea:83:55:8d:07:cc:
3e:1d:ee:1b:d6:28:27:68:a8:c3:15:55:04:e5:83:
5b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0E:6A:40:FD:8B:B4:F3:42:1A:59:5C:1C:C7:A3:D2:4A:73:9F:34
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36312e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.61.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f9:eb:ac:69:39:68:1a:08:fa:02:27:1f:c7:db:ad:07:ca:
10:0c:a4:00:c9:df:29:9b:0b:18:42:f4:3a:1b:97:9a:28:6f:
16:4e:f7:e0:a7:1d:5f:93:30:fb:bc:06:45:9e:a1:86:ee:71:
cf:eb:56:a7:34:a3:d1:3e:9c:31:f1:fb:aa:96:f2:df:d7:b4:
33:fd:20:b7:2d:47:2a:2b:b5:3a:28:ba:d7:fc:72:7b:43:7b:
85:23:8d:bd:4e:a4:cf:fb:e1:d5:00:8a:15:99:a1:ee:34:66:
a7:6d:a7:f4:e6:7d:41:7c:65:a5:ba:19:de:c3:6c:56:a8:45:
02:0f:f9:52:26:9d:78:ce:c3:72:79:48:37:f6:0b:2c:f8:5f:
c9:d3:86:05:a6:5a:b9:b4:37:7f:65:20:50:39:b2:c6:ee:84:
cc:aa:d7:a3:ff:01:a8:28:fb:db:7c:ec:19:2f:5c:fc:2f:39:
fe:7c:11:ef:75:8b:3a:1e:80:e4:8e:cc:28:f4:28:83:88:8a:
1b:91:f6:88:df:4a:3a:aa:3f:88:b9:41:df:ce:9c:f5:c9:40:
77:a2:02:12:d6:1f:0f:4a:5e:21:38:49:6e:d1:c5:d5:6b:3a:
84:b9:fe:ff:94:ce:3d:5a:2f:e4:4e:31:b6:5e:4a:c2:7a:b6:
f5:44:3d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:18:39 2025 by rpki-client