Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3138392e302f32342d3234203d3e20313336373837.roa
File: 39322e3234322e3138392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: kgKPs7gBPVJW+7Jo4/isXzlHUfSKewyvoq4lfakSB3Q=
Subject key identifier: D9:DA:2F:D6:5C:78:D4:DD:F0:0B:0E:14:1F:5E:3F:34:86:01:35:CE
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7294C4F8ED0D6860D99BA3F71B6F7B84071238AE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3138392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:40 +0000
ROA not before: Fri 27 Dec 2024 11:42:40 +0000
ROA not after: Fri 26 Dec 2025 11:47:40 +0000
asID: 136787
IP address blocks: 92.242.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:94:c4:f8:ed:0d:68:60:d9:9b:a3:f7:1b:6f:7b:84:07:12:38:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:40 2024 GMT
Not After : Dec 26 11:47:40 2025 GMT
Subject: CN=D9DA2FD65C78D4DDF00B0E141F5E3F34860135CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b5:8e:1b:62:3a:c7:f4:6a:13:9b:0a:dc:50:
7f:d2:9a:11:32:df:23:ca:29:1e:e9:5f:a9:a9:49:
64:19:1b:db:47:92:42:00:3b:31:93:29:da:0a:3d:
00:9d:bf:5c:d8:7a:b0:b5:38:0a:5b:a3:89:73:0d:
76:cb:71:df:8a:67:c2:ee:66:96:38:ad:b6:0d:72:
14:f2:ab:04:0b:48:9d:6f:63:04:a9:c4:d2:51:db:
69:04:e1:7c:49:26:49:84:d0:b1:b6:71:3c:b1:ef:
91:55:36:12:9d:08:97:d1:fe:c5:8f:7c:5d:e0:2e:
6d:09:54:cd:f5:3f:3b:02:37:4c:f2:de:24:cf:bc:
02:c3:3d:d7:f7:a1:94:60:45:6d:fc:ed:0f:07:6a:
3c:e5:c3:ae:7b:62:2e:14:11:cf:d8:07:0d:d0:8e:
e1:64:60:78:2b:5e:79:bb:24:2b:e4:d6:8a:b3:55:
05:e7:10:e3:ce:fe:ed:bf:16:cb:50:04:39:ec:a2:
98:ba:85:bd:e7:65:90:90:a8:9a:33:50:72:8e:a7:
66:00:ce:54:dd:40:e2:15:db:73:91:ec:c0:97:58:
b3:06:cb:3a:ce:98:fe:43:49:f3:ef:2e:35:97:f9:
5d:cb:05:00:ba:ae:4f:50:e9:73:52:05:e4:d3:04:
15:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DA:2F:D6:5C:78:D4:DD:F0:0B:0E:14:1F:5E:3F:34:86:01:35:CE
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3138392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.189.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b6:19:85:1d:71:bd:7a:e1:cd:1d:38:63:06:cc:21:61:d8:
d1:33:ab:22:2d:50:34:27:13:5d:21:d7:ae:3e:09:5d:3c:6c:
89:8a:dd:4f:bf:97:cc:dd:3e:00:2e:43:51:1d:e7:35:c2:06:
30:31:1d:5d:e5:e8:59:2d:cf:82:4e:07:dc:39:6d:da:e6:9d:
07:98:6d:a0:5d:30:53:56:e8:90:f7:82:4b:6a:da:db:57:17:
9c:58:d4:7e:d5:64:21:d8:5f:86:d5:8e:37:f7:a6:3d:54:dd:
8f:e4:24:34:69:b7:f6:a6:34:6b:61:54:fe:ba:ff:b7:43:c3:
e2:08:0b:e2:53:b0:c2:c5:79:c2:09:a2:7f:5b:45:83:9e:f2:
5d:f1:2a:5b:f2:a9:dc:3a:68:37:3e:fd:1e:39:33:78:d7:3f:
15:6a:95:ab:85:72:43:b8:25:a7:79:71:53:4a:92:da:d2:2b:
21:40:ae:fb:19:00:18:0f:d0:28:c4:b4:ff:d5:3e:b8:64:b6:
5d:57:20:6b:da:0d:3c:31:58:91:9c:76:9a:64:7c:d1:7e:a4:
a7:53:df:ab:bf:c9:14:45:0d:82:20:e0:6d:b5:9c:7c:90:b5:
cb:05:de:fe:cb:55:35:0b:f7:d5:58:81:b3:08:5b:31:0e:b3:
9f:0b:b2:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:23:45 2025 by rpki-client