Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3139312e302f32342d3234203d3e20313336373837.roa
File: 39322e3234322e3139312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: RNa3EViLToqDMMcos2oCq9oDu3KKo85RrMhSigFZBS8=
Subject key identifier: E9:FE:B7:FC:69:93:56:21:84:80:9B:03:09:F9:6B:B7:A8:A4:EF:4C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6105F83D6AAA891028D5398C85930859E64F7308
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3139312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:39 +0000
ROA not before: Fri 27 Dec 2024 11:42:39 +0000
ROA not after: Fri 26 Dec 2025 11:47:39 +0000
asID: 136787
IP address blocks: 92.242.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:05:f8:3d:6a:aa:89:10:28:d5:39:8c:85:93:08:59:e6:4f:73:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:39 2024 GMT
Not After : Dec 26 11:47:39 2025 GMT
Subject: CN=E9FEB7FC6993562184809B0309F96BB7A8A4EF4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:42:58:c9:be:d6:e3:bb:98:81:ba:db:29:5d:
4e:5c:b4:70:9e:05:5b:a3:3c:43:6e:7a:0d:1a:2c:
36:f7:ca:e5:7c:7d:07:d2:99:4a:67:03:d5:22:9a:
58:84:95:3b:45:83:3a:2b:85:7c:e4:3e:a8:75:97:
b0:98:01:42:43:76:e2:91:d3:c9:a6:7e:7e:5a:58:
30:9f:30:8f:36:31:50:c8:58:1b:d6:94:cb:9a:a8:
26:fb:59:96:d3:fc:50:76:3d:3a:ac:e8:20:76:81:
77:20:a9:d5:d8:54:ba:73:cd:72:13:0e:62:5c:c4:
8f:48:5e:da:01:9a:71:e4:63:af:ce:bd:c6:75:c4:
7a:9c:51:47:40:1c:47:6f:7a:79:aa:f4:ba:b2:97:
d7:3d:35:ef:b8:67:b4:76:ed:98:07:f2:4e:92:e9:
9c:ee:9b:82:a7:67:81:12:0e:22:57:a1:dd:09:bc:
f3:4c:6f:90:52:ac:58:4f:e1:e6:13:ef:60:09:70:
f9:9b:1e:9c:d2:3e:44:19:86:df:44:97:93:1e:17:
04:46:52:ab:26:80:ad:a6:c2:47:ba:a7:d4:f0:48:
2e:89:37:d4:ed:5e:62:7c:ca:f1:c6:d4:84:8c:18:
f8:a2:8d:ef:9f:33:63:8e:a9:be:64:fd:fb:99:05:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FE:B7:FC:69:93:56:21:84:80:9B:03:09:F9:6B:B7:A8:A4:EF:4C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3139312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.191.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e8:2f:f1:3c:d0:c0:90:d9:b1:ed:6f:77:df:78:33:a5:47:
d3:db:3d:47:8c:13:83:18:58:9d:3a:3a:8d:33:bd:1d:19:23:
4b:97:ce:8f:d4:ac:a4:0d:36:b4:bf:3b:2a:0f:b9:16:4c:5e:
f6:70:a2:90:dd:37:69:14:72:f2:6a:ca:98:18:c4:0b:b5:15:
89:47:f3:f9:b3:7e:1d:59:5e:f2:78:af:0f:ef:de:be:40:e4:
89:09:ff:b4:5b:ac:4c:26:4b:03:bd:0f:89:9c:7f:23:0e:c0:
a3:6d:99:a7:9c:08:45:5a:dd:56:02:f3:90:58:c1:f3:ae:5d:
f4:b3:ac:89:a9:9e:95:99:84:87:e0:29:06:38:ed:90:fc:64:
39:95:ca:1a:50:76:6b:8f:5c:b4:c5:d5:98:22:44:1c:c1:1f:
d1:86:cf:cb:b0:e9:4b:c9:f2:71:f5:ed:3a:ac:4d:3b:12:30:
3d:a0:ae:83:ab:82:07:1a:3a:a1:ff:4f:30:3b:58:67:6f:df:
f4:e2:82:d5:ff:d6:3b:15:48:4f:85:f8:28:5c:d2:0c:87:90:
be:0a:89:6d:c7:1f:36:84:24:dd:6c:3b:0f:7b:56:62:84:1c:
68:9c:5a:04:01:97:c2:a4:d7:4e:bb:75:55:1b:70:78:4a:36:
4c:76:ff:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:22:56 2025 by rpki-client