Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38312e302f32342d3234203d3e20313336373837.roa
File: 39322e3131392e38312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: mX7vOihenNVgiAc7mc8d42ZpgpfjyghxX2dQBj9Ofxs=
Subject key identifier: C2:A2:60:17:D2:C8:F1:EA:30:E8:C1:AE:95:55:F2:62:95:75:58:25
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4DF39BB28C870CB26F38365A995F59845EB7781A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:08 +0000
ROA not before: Fri 27 Dec 2024 11:42:08 +0000
ROA not after: Fri 26 Dec 2025 11:47:08 +0000
asID: 136787
IP address blocks: 92.119.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:f3:9b:b2:8c:87:0c:b2:6f:38:36:5a:99:5f:59:84:5e:b7:78:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:08 2024 GMT
Not After : Dec 26 11:47:08 2025 GMT
Subject: CN=C2A26017D2C8F1EA30E8C1AE9555F26295755825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:eb:5a:ec:85:39:2e:81:16:86:03:85:17:4c:
1a:9b:e6:12:ad:f2:c7:2d:f1:9e:27:9c:4a:9a:36:
92:3c:7b:99:f4:6c:db:ca:75:83:22:d8:a1:2c:a0:
83:dd:ac:a7:00:0d:a9:bf:60:be:30:0a:f1:87:57:
1a:62:3c:3c:d1:91:ec:75:43:6f:50:e1:d4:f0:78:
73:f2:21:ae:01:f8:eb:8d:74:70:46:c5:93:94:9b:
b9:c9:ca:43:ca:ba:0a:ea:ea:1f:f8:b7:9d:b7:79:
81:9c:11:f5:94:e2:5f:8b:bf:1e:c4:7d:48:2c:13:
7e:39:4d:8c:ec:db:67:36:7f:59:52:b1:79:d4:1e:
31:af:80:d5:55:8e:fa:e0:02:f7:ef:f2:4b:3d:51:
01:1e:a5:c5:55:e0:8b:9f:9b:3e:04:62:cc:02:b2:
bc:cd:8b:27:5b:4b:22:cb:90:60:66:1b:8d:1c:bb:
26:ea:86:85:4c:7f:75:8c:42:d0:cf:19:cc:58:4d:
90:03:56:90:dd:7c:80:a2:f5:99:b6:98:18:1b:2d:
4b:3a:b9:f5:4d:a6:fa:57:c2:18:63:d8:c5:2a:d9:
34:ca:63:4e:b1:56:5f:70:8b:d7:b5:ba:a7:2e:6f:
e4:c5:a6:89:a6:03:cb:fc:bb:d1:ff:7c:b1:fa:e5:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A2:60:17:D2:C8:F1:EA:30:E8:C1:AE:95:55:F2:62:95:75:58:25
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.81.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:08:73:ab:88:2d:32:bf:8e:32:0d:fe:1a:fd:db:40:ab:15:
7a:c9:7f:41:b5:52:bd:d0:c6:33:ac:78:1e:f9:de:2a:4b:2f:
14:13:95:77:99:af:84:68:8f:d0:ff:6d:48:cd:47:56:78:f5:
04:af:19:61:19:34:40:ba:9d:c3:df:ac:d6:53:c1:fa:46:14:
38:13:1e:f7:60:4d:3a:e7:1c:d5:af:ad:af:c2:b1:83:f2:00:
b8:7d:ce:0c:88:bd:41:99:33:f6:26:b7:21:7c:4a:68:ce:ce:
37:18:c9:99:b7:d3:41:06:bc:3e:92:01:06:1d:8b:e6:16:1b:
ed:f9:af:fc:f6:88:e6:cc:c2:bc:9c:96:7d:59:62:22:85:be:
c0:f7:72:1f:a7:6b:32:2d:30:fb:14:4a:7e:0c:8c:44:da:64:
c0:b6:74:fd:0a:93:41:91:60:33:fc:b6:21:6a:6e:e8:00:00:
85:75:63:51:af:e9:8c:bd:e7:5d:06:4d:f6:e6:48:a0:d6:e1:
0c:73:35:2a:dd:3c:b6:16:dc:0e:8a:6d:4a:3f:c2:ef:ac:c1:
7e:72:93:da:a4:c2:99:21:3b:98:97:04:50:b4:1c:15:e6:c7:
e1:70:f0:71:8d:c3:56:09:5a:18:2d:49:44:17:11:b2:65:b8:
c0:97:d9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:52:02 2025 by rpki-client