Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3139302e302f32342d3234203d3e20313336373837.roa
File: 39322e3234322e3139302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: n2l7YAa3qgHCXQ0mu0l10QgmYIrwNXh3VQgPt6bKtoE=
Subject key identifier: 62:AB:8A:8E:30:57:C3:EF:E6:BA:2E:7C:85:F2:04:76:D1:6A:95:C4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2D479111401843957BA51693A4BC7A161F565B91
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3139302e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:08 +0000
ROA not before: Fri 27 Dec 2024 11:42:08 +0000
ROA not after: Fri 26 Dec 2025 11:47:08 +0000
asID: 136787
IP address blocks: 92.242.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:47:91:11:40:18:43:95:7b:a5:16:93:a4:bc:7a:16:1f:56:5b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:08 2024 GMT
Not After : Dec 26 11:47:08 2025 GMT
Subject: CN=62AB8A8E3057C3EFE6BA2E7C85F20476D16A95C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:7a:00:3b:87:76:87:a4:20:12:0f:a8:34:
8b:1e:7e:5e:98:b6:10:6a:53:ac:82:9e:58:0b:88:
db:1a:9d:7a:03:94:bd:47:33:28:7e:5f:4c:36:93:
0b:66:b9:a2:b9:de:3f:f0:80:97:32:fb:e2:2b:b4:
4d:33:15:25:ba:94:2f:a1:24:a4:e6:ee:91:0a:c3:
ef:37:23:82:51:72:12:c3:68:c4:f9:ae:e3:af:cc:
57:9c:e3:91:d3:0b:a8:dc:d0:07:2a:e1:f6:68:2e:
89:b7:b3:52:f5:12:a3:25:9b:9e:7b:f9:49:3f:c3:
39:9f:04:b5:61:08:a2:14:5f:8f:db:d8:ee:57:98:
ed:35:e5:d4:e2:b1:1a:51:6d:51:11:4b:1b:4b:7c:
17:b8:e2:01:8a:30:7f:e7:84:29:8d:6c:1e:e3:ce:
7d:78:84:80:2a:c5:d5:43:97:be:31:a1:54:da:a2:
33:cb:33:69:a6:e1:e8:d5:00:4d:d5:e1:8b:63:8b:
26:43:a1:8a:f4:e4:4f:5e:2f:0c:ba:58:60:77:19:
9e:97:0d:18:45:27:1e:e4:e2:6e:c2:b4:d6:3d:66:
8a:f7:90:05:bb:f3:61:c0:ef:ca:e5:56:3a:05:92:
79:db:fb:3a:b5:a3:f1:cc:fd:d1:1b:25:30:1b:fd:
cd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AB:8A:8E:30:57:C3:EF:E6:BA:2E:7C:85:F2:04:76:D1:6A:95:C4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3139302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.190.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:82:47:b1:b4:9c:78:2e:24:4a:20:ae:86:62:51:a4:1f:2e:
96:f9:7f:ac:9c:ed:46:fd:9c:49:ca:2b:d8:77:1c:e6:cc:2c:
af:24:12:aa:9a:eb:88:26:d6:4f:d7:ec:0c:2c:83:ff:d9:42:
f3:89:72:dd:1a:d9:48:62:df:4a:e5:57:23:47:fb:cc:86:9f:
86:99:75:72:79:09:65:7e:aa:eb:af:fc:7f:00:7b:9d:e1:f7:
2c:24:8e:b9:54:22:99:9b:1b:68:c9:01:1c:2a:f6:1d:a4:9f:
17:a3:ed:19:58:24:7c:8b:a9:48:09:36:fe:f8:44:b9:d7:9f:
10:76:55:f4:11:a6:8c:50:a8:19:bf:a4:e4:f1:63:e5:a2:2d:
0b:09:53:e1:96:09:ac:5f:87:1c:21:cc:16:4b:c9:b1:20:0a:
5f:99:56:ef:68:ff:6a:8a:00:b2:10:f8:25:9a:99:20:0c:41:
9f:ff:bb:d2:0c:b8:11:b0:d8:ce:44:98:b6:99:35:0a:c3:d9:
d8:19:04:1c:c1:32:07:7c:b5:c6:58:23:b2:9f:98:a2:60:2c:
e4:ba:98:9a:dd:6a:cf:f8:94:2b:9e:9a:54:14:22:a5:ec:79:
81:bb:a7:ce:31:85:76:ff:50:cc:cc:16:1b:fb:27:ba:3e:54:
64:67:cf:4d
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIULUeREUAYQ5V7pRaTpLx6Fh9WW5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMDhaFw0yNTEyMjYxMTQ3MDhaMDMxMTAvBgNV
BAMTKDYyQUI4QThFMzA1N0MzRUZFNkJBMkU3Qzg1RjIwNDc2RDE2QTk1QzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXXoAO4d2h6QgEg+oNIsefl6Y
thBqU6yCnlgLiNsanXoDlL1HMyh+X0w2kwtmuaK53j/wgJcy++IrtE0zFSW6lC+h
JKTm7pEKw+83I4JRchLDaMT5ruOvzFec45HTC6jc0Acq4fZoLom3s1L1EqMlm557
+Uk/wzmfBLVhCKIUX4/b2O5XmO015dTisRpRbVERSxtLfBe44gGKMH/nhCmNbB7j
zn14hIAqxdVDl74xoVTaojPLM2mm4ejVAE3V4YtjiyZDoYr05E9eLwy6WGB3GZ6X
DRhFJx7k4m7CtNY9Zor3kAW782HA78rlVjoFknnb+zq1o/HM/dEbJTAb/c2pAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUYquKjjBXw+/mui58hfIEdtFqlcQwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMyMmUzMjM0MzIy
ZTMxMzkzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAFzyvjANBgkqhkiG9w0BAQsFAAOCAQEAbYJHsbSceC4kSiCuhmJRpB8u
lvl/rJztRv2cScor2Hcc5swsryQSqprriCbWT9fsDCyD/9lC84ly3RrZSGLfSuVX
I0f7zIafhpl1cnkJZX6q66/8fwB7neH3LCSOuVQimZsbaMkBHCr2HaSfF6PtGVgk
fIupSAk2/vhEudefEHZV9BGmjFCoGb+k5PFj5aItCwlT4ZYJrF+HHCHMFkvJsSAK
X5lW72j/aooAshD4JZqZIAxBn/+70gy4EbDYzkSYtpk1CsPZ2BkEHMEyB3y1xlgj
sp+YomAs5LqYmt1qz/iUK56aVBQipex5gbunzjGFdv9QzMwWG/snuj5UZGfPTQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:37 2025 by rpki-client