Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131332e302f32342d3332203d3e203430303231.roa
File: 39342e3130312e3131332e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier: b3G/Pyk2HhaAy7yY7uc4klgP4z6Pn2uEjAbXdN605rs=
Subject key identifier: 63:EC:D7:1F:2C:27:85:91:BD:CA:1A:06:69:5B:83:50:45:27:DE:2B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2DBBAC47A06838CDE0BAC125C0CABE65D4C160C8
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131332e302f32342d3332203d3e203430303231.roa
Signing time: Fri 20 Dec 2024 15:23:39 +0000
ROA not before: Fri 20 Dec 2024 15:18:39 +0000
ROA not after: Fri 19 Dec 2025 15:23:39 +0000
asID: 40021
IP address blocks: 94.101.113.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:bb:ac:47:a0:68:38:cd:e0:ba:c1:25:c0:ca:be:65:d4:c1:60:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:39 2024 GMT
Not After : Dec 19 15:23:39 2025 GMT
Subject: CN=63ECD71F2C278591BDCA1A06695B83504527DE2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:56:15:68:57:88:15:ed:c0:d7:2b:c5:1e:
6f:6d:ae:83:af:28:28:3c:e2:f2:7b:21:4c:03:ae:
bd:9f:3f:ae:4d:17:11:ac:9d:d7:5a:de:56:12:34:
13:63:98:7b:ce:b4:bf:50:20:06:b1:71:02:44:36:
57:87:23:98:49:4e:5b:48:be:fd:28:32:7b:3a:6e:
9a:74:b9:68:6c:bf:a3:81:4b:92:9c:ff:26:f1:35:
2b:07:13:cb:ba:38:60:dd:07:13:83:0d:78:b2:db:
d9:41:28:90:a5:62:35:57:33:58:99:fb:d8:ab:0d:
7f:17:39:55:86:fe:4f:41:f5:b7:12:a0:2f:f8:6a:
ad:8b:ef:48:0e:d6:6c:2c:78:03:e9:6f:64:87:7f:
4c:4b:b6:54:95:06:e1:00:61:c1:df:d4:3f:be:f0:
18:98:51:60:14:e5:df:ab:01:64:78:20:8e:44:4a:
17:28:5a:91:86:e0:f2:8a:41:71:32:2d:4e:a4:e3:
e8:4a:59:a9:50:ba:1e:88:31:9f:ea:9e:95:4a:41:
cd:e8:30:cd:5f:26:90:13:9d:d9:a8:99:c7:e0:b0:
86:2f:fb:d9:27:2e:b7:72:df:fe:43:89:34:3b:7a:
7e:3c:ba:ec:d9:19:dc:d9:0a:e0:e1:e3:d3:ff:09:
ff:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EC:D7:1F:2C:27:85:91:BD:CA:1A:06:69:5B:83:50:45:27:DE:2B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131332e302f32342d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.113.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:35:67:a1:e4:19:1d:c6:03:d5:79:cd:e8:84:1d:e1:2a:85:
bb:1e:3b:5d:6e:05:4e:e6:fb:e8:be:1d:ee:c0:f2:67:15:40:
3e:75:b2:e4:d5:57:76:29:0c:f8:ee:6d:bf:9c:13:80:30:be:
96:69:3f:d7:6d:ca:ed:82:66:84:39:11:29:80:bf:46:c5:7c:
c4:64:1c:a2:79:e8:2f:1d:71:52:80:f5:f2:aa:38:ef:1b:10:
3c:00:e5:c9:56:ed:50:8b:b9:e3:0b:e0:28:75:9b:8d:40:1d:
f5:21:e8:eb:39:8a:42:db:30:e4:e5:22:a6:b2:06:b0:70:ca:
a1:0e:c7:b9:55:33:55:e3:17:37:79:67:eb:e1:68:ca:49:0e:
82:d3:43:bb:e3:c8:74:fa:b2:1c:25:25:65:3d:28:8a:46:38:
3d:cb:09:aa:87:3e:f9:1f:93:7f:71:22:aa:2b:d3:ec:49:cb:
f0:db:73:1c:26:fd:42:18:91:20:f7:2c:e6:ce:fb:5c:7f:09:
01:29:a7:ba:20:ac:87:19:c1:a8:5f:64:8c:e2:02:43:0c:dd:
83:a3:2f:d5:94:67:2b:ad:0a:df:5c:41:7f:27:dc:1b:a8:39:
c8:31:1f:00:d7:8b:db:ea:00:ef:de:cb:0d:ff:4b:b6:30:9e:
52:99:03:95
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIULbusR6BoOM3gusElwMq+ZdTBYMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjAxNTE4MzlaFw0yNTEyMTkxNTIzMzlaMDMxMTAvBgNV
BAMTKDYzRUNENzFGMkMyNzg1OTFCRENBMUEwNjY5NUI4MzUwNDUyN0RFMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBaFYVaFeIFe3A1yvFHm9troOv
KCg84vJ7IUwDrr2fP65NFxGsndda3lYSNBNjmHvOtL9QIAaxcQJENleHI5hJTltI
vv0oMns6bpp0uWhsv6OBS5Kc/ybxNSsHE8u6OGDdBxODDXiy29lBKJClYjVXM1iZ
+9irDX8XOVWG/k9B9bcSoC/4aq2L70gO1mwseAPpb2SHf0xLtlSVBuEAYcHf1D++
8BiYUWAU5d+rAWR4II5EShcoWpGG4PKKQXEyLU6k4+hKWalQuh6IMZ/qnpVKQc3o
MM1fJpATndmomcfgsIYv+9knLrdy3/5DiTQ7en48uuzZGdzZCuDh49P/Cf+xAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUY+zXHywnhZG9yhoGaVuDUEUn3iswHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTM0MmUzMTMwMzEy
ZTMxMzEzMzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM0MzAzMDMyMzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABeZXEwDQYJKoZIhvcNAQELBQADggEBAF81Z6HkGR3GA9V5zeiEHeEqhbse
O11uBU7m++i+He7A8mcVQD51suTVV3YpDPjubb+cE4AwvpZpP9dtyu2CZoQ5ESmA
v0bFfMRkHKJ56C8dcVKA9fKqOO8bEDwA5clW7VCLueML4Ch1m41AHfUh6Os5ikLb
MOTlIqayBrBwyqEOx7lVM1XjFzd5Z+vhaMpJDoLTQ7vjyHT6shwlJWU9KIpGOD3L
CaqHPvkfk39xIqor0+xJy/Dbcxwm/UIYkSD3LObO+1x/CQEpp7ogrIcZwahfZIzi
AkMM3YOjL9WUZyutCt9cQX8n3BuoOcgxHwDXi9vqAO/eyw3/S7YwnlKZA5U=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:51 2025 by rpki-client