Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131322e302f32342d3234203d3e20323131313932.roa
File: 39342e3130312e3131322e302f32342d3234203d3e20323131313932.roa (raw, json)
Hash identifier: v7Gx54VWbZQGCgS1iyU8o0m1ObdtuvUQoPq6ExtPbkg=
Subject key identifier: F4:3A:DB:C6:DF:50:FC:BA:B1:1D:FA:B5:54:F7:D7:20:32:F4:8E:DB
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4D9251F0F7AB5B492E1C7904F29501C9FDE5F3D1
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131322e302f32342d3234203d3e20323131313932.roa
Signing time: Fri 20 Dec 2024 15:23:27 +0000
ROA not before: Fri 20 Dec 2024 15:18:27 +0000
ROA not after: Fri 19 Dec 2025 15:23:27 +0000
asID: 211192
IP address blocks: 94.101.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:92:51:f0:f7:ab:5b:49:2e:1c:79:04:f2:95:01:c9:fd:e5:f3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:27 2024 GMT
Not After : Dec 19 15:23:27 2025 GMT
Subject: CN=F43ADBC6DF50FCBAB11DFAB554F7D72032F48EDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b2:42:de:f2:ac:5b:c1:e2:f1:07:49:f9:d6:
a5:42:ab:18:6d:08:42:ef:5d:e0:1c:da:01:95:d8:
31:29:70:77:45:cc:67:2a:b6:40:a9:ce:0b:5b:f5:
5e:b9:66:62:e1:6f:98:50:58:9a:06:a2:ce:5d:a1:
d0:be:06:9c:8e:f9:b9:ff:85:e7:55:23:de:b2:7e:
54:7e:65:2f:20:d8:6a:35:58:9f:a3:c5:b2:0a:21:
a6:95:3b:3b:fc:61:98:f5:cd:8f:c7:04:8a:2c:19:
f4:b9:3f:ec:f1:ac:b8:e7:65:38:89:09:2e:fd:48:
ce:3a:a0:59:76:f3:22:64:f5:9d:01:b9:3e:52:16:
57:97:29:c9:20:18:d8:f6:d1:8c:a8:f8:2c:fe:0c:
68:e1:a6:e4:aa:47:c1:1f:f8:49:6a:69:27:b0:5d:
cc:55:ea:9a:ba:c2:f7:21:73:63:a1:7f:fe:86:1b:
f9:1a:4b:78:0d:25:a4:b9:69:96:cf:05:bb:84:d9:
5b:08:f6:55:1c:a5:13:c7:1d:92:aa:ab:1d:e7:8f:
a0:bf:9b:7a:38:d7:ec:c3:c5:75:21:fc:88:70:63:
49:0a:2c:fe:55:03:81:fc:c1:5d:f2:16:94:8d:4b:
27:5f:1e:aa:3d:61:8d:c6:83:26:6a:07:20:ed:ca:
d1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3A:DB:C6:DF:50:FC:BA:B1:1D:FA:B5:54:F7:D7:20:32:F4:8E:DB
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131322e302f32342d3234203d3e20323131313932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.112.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:4d:1b:f3:18:3f:64:df:eb:75:00:58:9e:aa:b9:4b:5d:3e:
16:03:cd:a3:70:58:13:2d:0c:c9:6e:f9:d8:5b:fe:56:b5:21:
2f:2f:de:8d:dd:f1:a9:c4:99:45:73:54:60:e8:be:ef:fb:01:
63:ef:c1:1d:0d:2f:2f:c0:44:2f:6e:07:35:6b:bd:81:fd:46:
1e:fa:d0:bd:11:60:46:0c:7f:43:34:21:c5:27:4c:19:9a:f3:
96:2b:81:14:9a:5a:c5:96:64:36:c6:4d:5c:cb:fd:1e:aa:f0:
72:2c:42:37:d8:81:88:4a:2f:ab:d0:a7:2f:02:8e:67:f6:09:
a8:15:98:cf:ad:a7:b0:8a:2a:1c:77:9a:2e:ba:98:86:33:5c:
39:8f:3a:f1:dc:eb:70:fc:6b:40:33:14:77:b0:1f:19:2b:8c:
b2:f8:98:56:3b:ce:c2:7e:c3:4f:ad:02:ea:72:a5:f7:ba:28:
29:bf:89:c3:67:90:da:da:52:4b:34:f8:e4:fc:26:cb:c9:d8:
f8:9f:9d:38:90:de:48:e0:8f:8b:9a:bc:51:1c:56:e0:37:2b:
7c:94:66:0a:4c:ad:a7:a7:a6:b4:c8:f7:fe:b5:22:aa:54:5e:
69:42:66:c4:ec:d8:1d:c1:9f:fb:25:2e:7f:bf:01:d9:80:ac:
38:d9:94:c6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:57:16 2025 by rpki-client